First off, kudos to Fernando Gont for doing this research, and coming up with some interesting conclusions. The reality of it though is that attack is very much in line with the TCP reset attack that was highlighted at Cansecwest in 2004. What they both have in common is that while technically possible they are both not very feasible. As was pointed out already in the article by others, if it were it would already be in use by many of the Internet's bottom feeders.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11306/32414#32414