News for hackers. Stuff that matters.

A comment on IP Spoofing. Parent comment

Re:IP Spoofing by w8rbt on Friday October 07, 2016 @04:04PM (#12663533)
All the orgs suffering from amplification attacks from services using UDP. DNS, NTP, chargen, etc.
[ Parent | on HN ]
Re:IP Spoofing by toast0 on Friday October 07, 2016 @05:42PM (#12664126)
Is udp/chargen really a useful publically exposed protocol? Does it provide a benefit over tcp/chargen?

Most of the fine people running chargen servers seem to be running the server from Microsoft services for UNIX package which is configured to send giant fragmented responses, and then they have a firewall that drops the first fragment. Thanks a lot guys.

[ Parent | on HN ]
Re:IP Spoofing by hueving on Friday October 07, 2016 @05:59PM (#12664235)
Those organizations are unfortunately confused and are not directing their frustrations towards the real cause (ISPs which allow spoofing).
[ Parent | on HN ]
Re:IP Spoofing by openasocket on Friday October 07, 2016 @05:58PM (#12664225)
... do people still use chargen? Are there seriously still chargen servers in the world?
[ Parent | on HN ]
Re:IP Spoofing by x0 on Saturday October 08, 2016 @07:59AM (#12666632)
Oh man they are rare but they are definitely still out there. Think printers from the 90's that came with chargen & usually telnet enabled by default, and for some reason are publicly accessible.
[ Parent | on HN ]