Coincidentally, or perhaps not given my recent comments about
the dumbness of tracing and blocking as a strategy, someone
appears to be syn flooding my cable modem right now. Tons
of TCP connections from a bank of IP addresses slowly changing.
Adam
Adam Shostack wrote:
> Folks should take a look at the work Bindview did on the Naptha family
> if dos attacks. Basicly, they found ways to move up the application
> stack, consuming CPU, without a serious comitment of resources on the
> client side. razor.bindview.com/publish/advisories/adv_NAPTHA.html
