1src Forums - DOS attack vulnerability on Palm discovered!

05-21-2003, 03:50 PM	#1
demannu Member Join Date: Apr 2003 Location: Santa Clara, CA Posts: 40	DOS attack vulnerability on Palm discovered! I suppose its inevitable that such a newcomer platform to the WWW would have some problems that need to be corrected, but I just found this article @ secunia.com telling of a DOS vulnerability in the Palm OS and it's not being able to handle "a flood of ICMP echo requests". Not that a lot of people would be trying to do this, but it is kinda scary in that they say the solution is a Hard reset! Yikes watch out. http://www.secunia.com/advisories/8804/ -d Oh, and we need an angrier looking message icon. I am more than a little frowny about this one.

05-21-2003, 04:30 PM	#2
avega Mexican Member Join Date: Aug 2002 Location: Mexico Posts: 413	I'm not worried about this...

05-21-2003, 05:40 PM	#3
rob_squared That Voice In Your Head Join Date: Jan 2003 Posts: 2,694	I was once worried about being killed by bottle caps but this is ridiculous. __________________ Main Site Silkskins <--Read Disclaimer Over 2200 downloads at Cliesource

05-21-2003, 05:57 PM	#4
keesercc Registered User Join Date: Feb 2003 Location: washington Posts: 142	sarcasm on I hear that if you stand on your head and and do a google search for (insert nonesense word here) with netfront on a wifi network in italy, you will have to do a warm reset follwed by a cold bath.... sarcasm off __________________ __________________________ Gumby

05-21-2003, 05:59 PM	#5
keesercc Registered User Join Date: Feb 2003 Location: washington Posts: 142	perhaps you could share with us WHY this is such a problem and worthy of anything more than a frowny? I know lots of regular programs that can cause a hard reset. __________________ __________________________ Gumby

05-21-2003, 06:03 PM	#6
keesercc Registered User Join Date: Feb 2003 Location: washington Posts: 142	how real is this threat? do many web pages flood your palm with ICMP requests? does this kind of thing happen often? or are we looking at the same chances of getting struck by lightning. you seem to have some knowledge on this issue, so perhaps you could enlighten us as to what preventative measures we could take, or what to look out for. any info would be appreciated. (the link doesn't provide much information useful to someone who does not understand the nuances of WWW...) __________________ __________________________ Gumby

05-21-2003, 09:05 PM	#7
demannu Member Join Date: Apr 2003 Location: Santa Clara, CA Posts: 40	heheh hey man I just read articles and post them. I really don't know what would cause this in a normal situation, but a DOS attack isn't a normal situation. I would guess that this would only happen by malicious intenet, and if someone wanted to flood you with ICMP requests, they could, as long as you have the CF card turned on, and they are on your local network. Just a warning. Nothing more. I didn't realize that there was a frown and a mad frown. I got the right one. Don't worry for the most part. Unless you are paranoid, then worry, worry a lot.

05-21-2003, 09:07 PM	#8
demannu Member Join Date: Apr 2003 Location: Santa Clara, CA Posts: 40	sarcasm on I now see how keesercc got 116 posts. sarcasm off...mostly

05-21-2003, 09:22 PM

save the day

Silver Contributor

Join Date: Oct 2002

Location: NC, USA

Posts: 2,374 hherbzilla is on a distinguished road

Quote:

Originally posted by avega
I'm not worried about this...

Yeah... If you're worried about this, you have bigger issues.

I'd say this deserves more of a roll your eyes smilie:

__________________

Search and ye shall find!
"It's because they're stupid, that's why. That's why everybody does everything." - Homer J. Simpson
SJ30 > NX70V > T3

05-21-2003, 09:30 PM	#10
Joel 1src Co-Founder Join Date: Dec 2001 Location: Guam Posts: 4,517	I just backup often.

05-21-2003, 09:36 PM	#11
Eddy Registered User Join Date: Mar 2003 Location: 22°18'N/114°10'E Posts: 3,924	yep, BACKUP, you can never perform to much of that. __________________ PalmTX + 512SD UX50(JP)+256MB MS Pro NX70/V (JP)+1G SanDisk CF

05-21-2003, 09:41 PM	#12
n2ifp Retired Member Join Date: Nov 2002 Location: Manchester, NJ Posts: 12,444	Phew! I am safe, it says for Palm OS 3.x and 4.x, I have OS 5.x __________________ Cheers! Larry Winward T\|T3 + SE T610 + SE HBH-65 = BT Heaven!

05-21-2003, 10:43 PM	#13
Eddy Registered User Join Date: Mar 2003 Location: 22°18'N/114°10'E Posts: 3,924	haha, Larry, I'm safe as well... OS 5.x here too! __________________ PalmTX + 512SD UX50(JP)+256MB MS Pro NX70/V (JP)+1G SanDisk CF

05-21-2003, 11:51 PM	#14
lal2707 Senior Member Join Date: Apr 2003 Location: London Posts: 562	Same here - using OS 5.x Always Backup as often as possible and test recovery process __________________ Thanks Lalit

05-22-2003, 12:16 AM	#15
Homie_S DESTROY Join Date: Jan 2003 Posts: 151	That statement makes about as much sense as this: