From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <ce3cd2eb74d8211244db56f5ab952f9d@quanstro.net>
To: 9fans@9fans.net
From: erik quanstrom <quanstro@quanstro.net>
Date: Sun, 27 Jul 2008 11:57:40 -0400
In-Reply-To: <20080727155414.5C8501E8C1C@holo.morphisms.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Subject: Re: [9fans] dns exploits (self-promotion remix)
Topicbox-Message-UUID: f2853148-ead3-11e9-9d60-3106f5b1d025

> those things combined mean that you get 15 bits of randomness
> from query id and 15 from source port, giving 30 bits,
> so ndb/dns is okay (for now).

why only 15 in the query id?  that's an artifact of rand()
which returns 0 ≤ n ≤ 0x7fff.  why not return numbers
between 0 and 0xffff?

- erik