News for hackers. Stuff that matters.

A comment on IP Spoofing. Parent comment

Re:IP Spoofing by collinmanderson on Saturday October 08, 2016 @10:09AM (#12666966)
It's fine to have a public UDP server on the internet. Just make sure it can't be used to amplify/mirror attacks.

QUIC uses tokens for example. https://docs.google.com/document/d/1g5nIXAIkN_Y-7XJW5K45IblH...

[ Parent | on HN ]
Re:IP Spoofing by hueving on Saturday October 08, 2016 @04:13PM (#12668523)
That's not even enough. The token generation can be used as an amplification vector.

That's why this approach of attacking UDP instead of spoofing is misguided.

[ Parent | on HN ]