Gentoo Archives: gentoo-user

From: Kevin Chadwick <ma1l1ists@××××××××.uk>
To: gentoo-user@l.g.o
Subject: Re: [Bulk] Re: [gentoo-user] How to prevent a dns amplification attack
Date: Sat, 30 Mar 2013 15:10:55
Message-Id: 20130330151117.542b249b@kc-sys.chadwicks.me.uk
In Reply to: Re: [gentoo-user] How to prevent a dns amplification attack by "Norman Rieß"
1 On Sat, 30 Mar 2013 13:06:16 +0100
2 Norman Rieß <norman@×××××××××.org> wrote:
3
4 > As we all know everything works better and cheaper when things are
5 > privatized
6
7 Actually No it's not so simple at all.
8
9 You get incompetence in private and public and you may be more likely
10 to get away with it for longer in a public service than in a market with
11 competition but there are many examples where things simply get worse.
12
13 In the UK, water companies were privatisied and fat cats made lots of
14 money letting the pipes deteriorate for future generations.
15
16 British Telecom, well that's a mixed bag but it is certainly a
17 tiny shadow of it's original self.
18
19 We know ideals and theory hardly ever work but theoretically public
20 should be much better when well managed.
21
22 I wonder if ISPS wouldn't be handling things like TalkTalks
23 Homesafe in such a stupid manner (across the board is where it is
24 stupid, even for non users of the service) where they redirect all the
25 http traffic through an undoubtedly insecure layer 7 handling huawei
26 device with less commercial pressures or analysing bandwidth at layer
27 7 when they should be doing so more safely and completely at layers 3
28 and 4 leading me to believe they are not just thinking about bandwidth
29 usage. Why does it matter if you download 1000Gb via torrents or http.
30 ACKs can be managed in any case.
31
32 I'm glad open source is beginning to make strides into public services
33 as it should help put an end to expensive interoperability issues (if
34 we stay away from non posix things like systemd, though even then
35 shouldn't be too bad ;-)).

Replies

Subject Author
Re: [Bulk] Re: [gentoo-user] How to prevent a dns amplification attack "Norman Rieß" <norman@×××××××××.org>
[gentoo-user] Re: [seriously O/T] How to prevent a dns amplification attack Mick <michaelkintzios@×××××.com>