Top all-time · #19117
Jakob Lell
Personal blog · jakoblell.com/blogsecurityprogramming
Jakob Lell's personal blog at jakoblell.com covers security and programming. Since 2013, 4 different Hacker News readers have linked it 5 times, most often “Quick Blind TCP Connection Spoofing with SYN Cookies”. The last post was in 2014, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Jakob Lell's posts on TCP security and cryptography, including blind TCP connection attacks and malleability. Comments cite them as sources or pointers and do not judge the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Quick Blind TCP Connection Spoofing with SYN Cookies3 people · 3 mentions · first linked 2013-08-15
- Practical malleability attack against CBC-mode encrypted LUKS partitions2 people · 2 mentions · first linked 2013-12-23
What Hacker News says?
Unless your server's TCP stack has SYN-cookies enabled (and I think most do): http://www.jakoblell.com/blog/2013/08/13/quick-blind-tcp-con... Law of unintended consequences strikes again.
Comment linking /blog/2013/08/13/quick-blind-tcp-connection-spoofing-with-syn-cookies/
on “Securing a Linux Server”Submitted Practical malleability attack against CBC-mode encrypted LUKS partitions as a story · 3 points
HN discussioneh, no need to apologise. i think we're used to you here and there's a level of tolerance given the contributions you make. also, did you see http://www.jakoblell.com/blog/2013/12/22/practical-malleabil... which i think could be added to an early crypto challenge? (but maybe you already cover the idea).
Comment linking /blog/2013/12/22/practical-malleability-attack-against-cbc-encrypted-luks-partitions/
on “So, you want to crypto”Submitted Quick Blind TCP Connection Spoofing with SYN Cookies as a story · 1 points
HN discussionhttp://lcamtuf.coredump.cx/oldtcp/tcpseq.html > However, guessing the right ISN from the entire 32-bit space (4,294,967,296 possibilities) is not feasible due to the excessive amount of bandwidth and time required. That is why a good TCP sequence number generator implementation currently provides enough security to protect against spoofing attacks, at least for the present time and in typical conditions. But increas…
Comment linking /blog/2013/08/13/quick-blind-tcp-connection-spoofing-with-syn-cookies/
on “Faking the TCP handshake”
