[AWS] Is AWS vulnerable to the latest Hash based DoS attack scheme?
Pascal Obry
pascal at obry.net
Fri Jan 20 17:25:14 CET 2012
Hello there,
Thanks for bringing this issue to our attention! We believe this is now
fixed in AWS. We have introduced a randomized hash routine in AWS.Utils.
This is the recommended way of fixing this issue by the security
researchers. The collisions could still happen of course but it is not
possible to create a malicious software to DoS attack an AWS server. An
updated version is available to all our customers and an updated GPL
version is available from the Open-DO forge
(https://forge.open-do.org/projects/aws/).
Kind regards,
Pascal
--
--|------------------------------------------------------
--| Pascal Obry Team-Ada Member
--| 45, rue Gabriel Peri - 78114 Magny Les Hameaux FRANCE
--|------------------------------------------------------
--| http://www.obry.net - http://v2p.fr.eu.org
--| "The best way to travel is by means of imagination"
--|
--| gpg --keyserver keys.gnupg.net --recv-key F949BD3B
More information about the AWS
mailing list