Re: Hack Microsoft

[Simon Spero <ses@tipper.oit.unc.edu>]

On Thu, 28 Sep 1995, Perry E. Metzger wrote:

> Thats almost an invitation to hack Microsoft's web products, isn't it?

Not a real attack- cos it's just a Denial Of Service, but it is kind of 
amusing... 

Windows NT has an interesting property in its handling of TCP connection 
establishment. NT has a small limit on the maximum size of its listen 
queue - it also handle queue overflow in a different way to BSD derived 
stacks. Instead of just dropping the connection request, and allowing the 
client TCP to retry automatically, NT sends a RST packet that aborts the 
connection. 

Ok, you can shutdown just about anything on the Net right now, and there 
won't be a real defence possible until IPSEC starts getting installed, 
but microsoft makes it much too easy. 

Simon