<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Technoblog.org &#187; random source port</title>
	<atom:link href="http://technoblog.org/tag/random-source-port/feed/" rel="self" type="application/rss+xml" />
	<link>http://technoblog.org</link>
	<description>Technoblogging</description>
	<lastBuildDate>Mon, 23 Aug 2010 07:58:59 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Mac OS X DNS workaround failed</title>
		<link>http://technoblog.org/2008/08/mac-os-x-dns-workaround-failed/</link>
		<comments>http://technoblog.org/2008/08/mac-os-x-dns-workaround-failed/#comments</comments>
		<pubDate>Fri, 01 Aug 2008 23:22:16 +0000</pubDate>
		<dc:creator>jrp</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[10.4]]></category>
		<category><![CDATA[10.5]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[BIND]]></category>
		<category><![CDATA[Client]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[mac os x]]></category>
		<category><![CDATA[random source port]]></category>
		<category><![CDATA[security update]]></category>
		<category><![CDATA[Security Update 2008-005]]></category>

		<guid isPermaLink="false">http://technoblog.org/?p=12</guid>
		<description><![CDATA[The latest Mac OS X security update (2008-005) failed to fix (or temporarily solve) the DNS vulnerability in the client version of Mac OS X 10.5 and 10.4. The update solved (temporarily) the same problem in Mac OS X server, but somehow Apple forgot to update the client libraries. The source port is still not [...]]]></description>
			<content:encoded><![CDATA[<p>The latest Mac OS X security update (<a title="Mac OS X Security Update" href="http://technoblog.org/2008/08/mac-os-x-security-update/">2008-005</a>) failed to fix (or temporarily solve) the DNS vulnerability in the client version of Mac OS X 10.5 and 10.4. The update solved (temporarily) the same problem in Mac OS X server, but somehow Apple forgot to update the client libraries. The source port is still not randomized (but incremented by 1 each time). So, is this really a critical problem? Or should we worry more about DNS servers behind NAT?</p>
<p>Read more details about how <a title="DNS Workaround failed Mac OS X 10.5" href="http://isc.sans.org/diary.html?storyid=4810">the DNS workaround failed in Mac OS X 10.5</a> or how the <a title="DNS Workaround failed Mac OS X 10.4" href="http://blog.ncircle.com/blogs/sync/archives/2008/08/apple_dns_patch_fails_to_rando.html">DNS Workaround Failed in Mac OS X 10.4</a></p>
]]></content:encoded>
			<wfw:commentRss>http://technoblog.org/2008/08/mac-os-x-dns-workaround-failed/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
