News for hackers. Stuff that matters.

A comment on Some thoughts on OpenSSH 9.8's PerSourcePenalties feature. Parent comment

Re:Some thoughts on OpenSSH 9.8's PerSourcePenalties feature by metadat on Wednesday August 14, 2024 @08:17PM (#41252063)
How would you spoof multiple valid packets in a TCP-based protocol requiring a sequence of interactions when you can't receive any of the ACKs (because they'll be sent to not-your-IP)?
[ Parent | on HN ]
Re:Some thoughts on OpenSSH 9.8's PerSourcePenalties feature by katzinsky on Wednesday August 14, 2024 @10:36PM (#41252668)
Depending on the protocol you can probably do reflection attacks over tcp with TFO.
[ Parent | on HN ]