Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Fundamental Flaw in TCP/IP: Connecting Everything
Oldest First  |  Newest First  |  Threaded View
jfinkhaeuser
50%
50%
jfinkhaeuser,
User Rank: Apprentice
5/17/2017 | 3:01:09 PM
P2P
So the fundamental idea is to move everything to a P2P overlay network.
HardenStance
50%
50%
HardenStance,
User Rank: Strategist
5/18/2017 | 5:16:45 AM
ETSI doing next gen protocol work for the telecom sector
Thanks Jeff, great post. The Next Generation Protocol (NGP) folks at the European Telecommunications Standards Institute (ETSI) are also doing some great - related - work around finding ways of avoiding the security and efficiency flaws in TCP/IP as telecom networks evolve with SDN, virtualization and 5G.
nomics
50%
50%
nomics,
User Rank: Apprentice
5/19/2017 | 3:41:15 PM
No Perfect Solution
Fixing the flaw in TCP/IP is undoubtedly a daunting task which is probably one reason it's been largely unchanged all these years. I am interested in reading all the proposed solutions and who knows, maybe one day there will be some sort of revelating new implementation using IP or some other protocol. But at the end of the day, there will always be a way into the network, there is no perfect solution.
sixscrews
50%
50%
sixscrews,
User Rank: Apprentice
5/19/2017 | 7:46:21 PM
Assured identification of source/destination
Where does IPV6 come into this?

The resistance of US and other ISPs to implement IPV6 as a basic service is hard to understand - except when it comes to money, of course.

Can IPV6 help here?

I'm speaking from a low level of understanding of the identidy issue although I understand TCP/IP and <Most> of its shortcomings with respect to verifiable identity and spoofing of message headers.

wb


COVID-19: Latest Security News & Commentary
Dark Reading Staff 4/7/2020
The Coronavirus & Cybersecurity: 3 Areas of Exploitation
Robert R. Ackerman Jr., Founder & Managing Director, Allegis Capital,  4/7/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-20637
PUBLISHED: 2020-04-08
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connecti...
CVE-2020-11650
PUBLISHED: 2020-04-08
An issue was discovered in iXsystems FreeNAS 11.2 and 11.3 before 11.3-U1. It allows a denial of service.
CVE-2020-11653
PUBLISHED: 2020-04-08
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
CVE-2020-2732
PUBLISHED: 2020-04-08
A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVE-2020-1627
PUBLISHED: 2020-04-08
A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific packets requiring special processing in microcode that the flow cache can't handle, causing the riot forwarding daemon to crash. By continuously sending ...