The Day After the Zero-Days

Around August 1996 I traded private email with Wietse Venema about a TCP source-routing spoofing attack I had demonstrated against the BSD r-services trust model. Wietse later left a note in fix_options.c recording the exchange: &ldquo;I discussed this attack with Niels Provos, half a year before the attack was described in open mailing lists.&rdquo; The Secure Networks Inc. advisory followed in…