Reducing ip_id information leakage

Garrett Wollman wollman at lcs.mit.edu
Fri May 2 11:06:57 PDT 2003


<<On Wed, 30 Apr 2003 16:17:12 -0700, "Crist J. Clark" <crist.clark at attbi.com> said:

> This is actually bad with respect to the spirit of the paper and the
> whole idea of information leakage. If I have two FreeBSD machines, one
> i386 and one sparc64, they now look different to someone sniffing the
> traffic. If I leave the htons(), all of my FreeBSD hosts look
> alike.

If you have two little-endian machines, one FreeBSD and one some other
operating system which doesn't do the htons(), they now look different
to someone sniffing the traffic.  If you remove the htons(), all of
your little-endian hosts look alike.

-GAWollman



More information about the freebsd-net mailing list