RE: A DoS Must Read from Steve Gibson...

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

Gee I use the RAW socket function from my AS400 to various protocol
converters thus handling the POS communication in my program.  TCP works in
packets but some of the converters run on the byte stream, thus raw TCP is
necessary.  The AS400 provides this function.  One can write a powerful DoS
attach program from their AS400.  I know because I had a bug that DoSed our
network.  Oops!  By the way, this is not an enhanced socket, but Micro$oft
is now giving you access to the lower level of their TCP/IP stack.  Just
wait for raw IP,  I failed my attempt and decided raw TCP would be easier
and better for the application.  It is really part of the BSD standards that
Micro$oft has never adhered to.

Christopher K. Bipes      mailto:ChrisB@Cross-Check.com
Operations & Network Mgr  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.                  http://www.cross-check.com
6119 State Farm Drive     Phone: 707 586-0551 x 1102
Rohnert Park CA  94928    Fax: 707 586-1884


-----Original Message-----
From: Bale, Dan [mailto:D.Bale@handleman.com]
Sent: Monday, June 25, 2001 12:55 PM
To: MIDRANGE-L@midrange.com
Subject: RE: A DoS Must Read from Steve Gibson...


Ken, I speak not from an expert's point of view, but strictly as someone who
desires to learn from all this.  So please feel free to fill in my gaps of
missing information.
I have read both the Steve Gibson side and anti-Gibson "sides".  I have
learned a lot from S.G. but also see his ego shining through a lot of what
he writes.
You say that all operating systems have this capability, except for the
previous versions of Windoze.  If your mother or your grandmother has a PC,
is it running anything other than Windows?  It would seem that most Linux
systems and other systems running non-Windoze OS's would be less vulnerable
on the basis that they are being administered by technically-minded folk and
would be more likely to be using a firewall.  Therefore, your argument
doesn't give me much comfort.
What particular purpose does the enhanced socket serve?  To quote from his
lengthy page: 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---