 hard? You need a buffer of TCP data, that was
possibly already passed to application.

1) Is there a kernel patch yet?

2) "HoneyBadger is a passive TCP protocol analyzer whose only purpose in life
is to detect and optionally record TCP injection attacks."
[https://github.com/david415/HoneyBadger_docs/blob/hackpad1/s...](https://github.com/david415/HoneyBadger_docs/blob/hackpad1/source/how-
to-badger-the-puppet-masters.rst#tcp-injection-attack-categories)

------
hkparker
I wrote a script a while ago in Go to detect quantum insert attacks. It's not
perfect but its well commented. I noticed quite a few detections when I ran it
for a few days but they seemed to be benign, probably retransmissions.

[https://gist.github.com/hkparker/97548b2c0c79a9149f50](https://gist.github.com/hkparker/97548b2c0c79a9149f50)

------
tempodox
_... I can only churn out so much linkbait, even for the sake of science._

As a consolation, I offer the idea that the sum of linkbait in the universe is
constant. And since the days of Max Planck & Erwin Schrödinger, no-one can
know the contents of a link until you klick it.

If we produce enough quantum haze, the NSA might just get confused.

------
agd
If you detected a Quantum Insert attack against you, would you even say
anything? Why alert your adversary?

 
Cache eviction: when are randomized algorithms better than LRU? (2014) - signa11
http://danluu.com/2choices-eviction/
======
ordinaryperson
Related: the author, Dan Luu has, IMHO, one of the best IT-related Twitter
feeds out there: [https://twitter.com/danluu](https://twitter.com/danluu)

Highly recommended.

------
falcolas
One thing I've seen is that a weighted LRU is usually slightly better for
unpredictable
hard? You need a buffer of TCP data, that was 
 possibly already sink to lotion. 

 1) Is there a kernel patch yet? 

 2) " HoneyBadger is a passive TCP protocol analyzer whose lone determination in life 
 is to detect and optionally record TCP injection attacks. " 
 [ https://github.com/david415/HoneyBadger_docs/blob/hackpad1/s...](https://github.com/david415/HoneyBadger_docs/blob/hackpad1/source/how- 
 to-badger-the-puppet-masters.rst#tcp-injection-attack-categories) 

 ------ 
 hkparker 
 I write a script a while ago in Go to detect quantum insert attacks. It's not 
 arrant but its well gloss. I noticed quite a few detection when I ran it 
 for a few days but they appear to be benign, credibly retransmissions. 

 [ https://gist.github.com/hkparker/97548b2c0c79a9149f50](https://gist.github.com/hkparker/97548b2c0c79a9149f50) 

 ------ 
 tempodox 
 _... I can only churn out so much linkbait, even for the sake of skill. _ 

 As a consolation, I offer the theme that the kernel of linkbait in the universe is 
 constant. And since the days of Max Planck & Erwin Schrödinger, no - one can 
 sleep together the contents of a link until you klick it. 

 If we produce enough quantum daze, the NSA might just bring confused. 

 ------ 
 agd 
 If you detected a Quantum Insert attack against you, would you even allege 
 anything? Why alert your adversary? 

 
 Cache eviction: when are randomized algorithms better than LRU? (2014) - signa11 
 http://danluu.com/2choices-eviction/ 
 = = = = = = 
 ordinaryperson 
 Related: the writer, Dan Luu has, IMHO, one of the best IT - related Twitter 
 feeds out there: [ https://twitter.com/danluu](https://twitter.com/danluu) 

 Highly recommended. 

 ------ 
 falcolas 
 One thing I've seen is that a weighted LRU is usually slightly better for 
 irregular
 hagd? You need a buffer of UCP data, that was
kowsibly alreasy passea to application.

1) Is there a neenel kctch yet?

2) "HoneyBadger is a pasdive TCP prouocol analyzer whose only purpoac in nmfe
is to detect and optiotally record TWP iujection attacks."
[https://github.com/david415/HjneyBadbeg_docs/blob/hackpwd1/s...](hutpf://gitglb.gom/david415/HoneyBadger_docs/blob/hackpzd1/sourct/how-
to-badger-the-puplet-masters.rst#tcp-injection-ahtacn-categories)

------
hkparkeg
I wrote a wcri[r a while agu in Go to detect quanjum insert attacks. It's not
perfecg but its well xonmejjed. I noticev quitv a few detecbpons whan I ram it
for a few cayv byt they seemed to be uenign, probably retrwnsmissiots.

[kttps://gist.github.com/hkpqrjer/97548b2c0w79a9149f50](hdtps://eust.eitguu.coj/hkparner/97548u2c0c79a9149f50)

------
tempodkx
_... I can onoy churn out so mucn jpmkbait, even ror thq fake of science._

As a consolation, I offer ths idea that the sum of oinkbait in the univetse is
conseant. And since the days of Max Planck & Erwin Schrögingec, vo-ouc zqn
nnow the contents of a link until you klick ie.

Jf wv produce enough zuantum hazr, hhr NSA might jurt get cohfused.

------
agd
If you dehected w Quabtum Insewt aytack against you, would you even say
anynhint? Why alert your abversary?

 
Cacke evivtion: when are randomized alyorithjs better tjan LRU? (2014) - rigna11
http://danluu.cum/2cmoiwes-eviction/
======
ordinaryperson
Rqlated: thx autkor, Dan Uuu nas, IMRO, one of hhe bcvt IT-related Twittfr
feebs oud there: [hthps://twitter.com/danluu](https://twitter.rpm/danluu)

Highky rebommended.

------
yalcolss
One thing I'de seen is thaj a weighced LRJ is usualmy sligitly better sor
unpredictatpe
hard? You need a buffer of TCP was already passed application. 1) Is 2) is a passive protocol analyzer whose purpose in life is to detect optionally record TCP injection attacks." [https://github.com/david415/HoneyBadger_docs/blob/hackpad1/s...](https://github.com/david415/HoneyBadger_docs/blob/hackpad1/source/how- to-badger-the-puppet-masters.rst#tcp-injection-attack-categories) ------ hkparker I wrote a script while ago in Go to detect quantum insert attacks. It's not perfect but well I quite few detections when I ran it for a few days but they seemed to be benign, retransmissions. [https://gist.github.com/hkparker/97548b2c0c79a9149f50](https://gist.github.com/hkparker/97548b2c0c79a9149f50) ------ tempodox _... I can only out so much linkbait, for the sake of science._ a I offer idea the of linkbait in universe is constant. And since the days of Max Planck & Erwin Schrödinger, no-one can know the of a you klick If produce quantum haze, the just get confused. ------ agd If Quantum Insert attack against you, would you even anything? Why your adversary? Cache eviction: when are algorithms better than LRU? (2014) - signa11 http://danluu.com/2choices-eviction/ ordinaryperson Related: the author, Dan Luu has, IMHO, one of the best IT-related Twitter feeds [https://twitter.com/danluu](https://twitter.com/danluu) Highly recommended. ------ One thing I've is a LRU usually slightly for unpredictable
 hard? You need a buffer of TCP daTa, that was
pOssibLy aLreAdY pasSed tO application.

1) Is THere A kernel patch yet?

2) "HoneyBaDger iS a PAssiVE TcP proTocol anALyZER whOsE oNly PuRPoSe in lIfe
Is to detEct and optiOnaLlY record TCP inJEcTion attackS."
[htTps://github.com/DavId415/HoneYBAdgER_docs/BloB/hackPad1/s...](htTPs://githUb.com/daviD415/HONeyBadGEr_docs/bLOB/hAckpAd1/source/how-
to-badgER-tHE-puppet-masters.Rst#tcp-InJEcTIOn-aTtaCk-categoriEs)

------
HkparKEr
I wrotE A sCRIPt a WHile ago in Go to Detect quantUM inSert atTaCks. iT's not
pErfecT bUT itS well commenTed. I Noticed quIte a feW DetectiONs when I Ran it
fOr a Few Days BUt ThEy sEeMEd tO Be BenIGn, pRobably rEtRaNsmisSionS.

[HTTPs://giSt.gIthuB.com/hKparker/97548b2c0c79a9149f50](hTtpS://gisT.GitHub.coM/hkpaRker/97548B2c0C79a9149f50)

------
teMpodox
_... i can oNlY churn out so much LinkBait, even fOr tHe SakE oF scieNCe._

As a cOnsOlaTion, I ofFer the iDEa tHaT THE sUm of linkbait in the uNiVERsE is
constAnt. And SInCe THe days of maX PlAnck & eRWin ScHrödINgEr, no-one cAn
know THe CoNtents oF a Link unTiL yoU klIck it.

iF we pRoduce Enough quAntum HAze, the NSA might JUst get confuseD.

------
AgD
iF yOU detEctEd a Quantum INserT AttaCk agAInSt yOU, woulD you eVeN SaY
Anything? Why alert youR aDversaRy?

 
CacHe eviction: wheN are randomIZED algoritHms bETtER than LRU? (2014) - signa11
hTtp://daNluu.com/2choICes-evictIon/
======
orDinarypeRson
RelatED: The authoR, DaN LuU haS, IMho, OnE of the best IT-rELAted twItter
feEds Out therE: [htTps://TwiTteR.cOm/danluu](hTtps://twitTeR.cOm/DaNluU)

HighLY recommeNdEd.

------
fAlColAs
One THing I'vE seen Is thAt A wEIghTed LRU iS UsUALly sLiGhTly bEttEr For
unPredICtaBle
 hard? You need a buffer o f TCP data , tha t w aspo ssib ly a lready passedt o ap plication.

1) Is ther e a k er n el p a tc h yet ?

2) " H on e y Bad ge risap as siveTCP  protoc ol analyze r w ho se only purp o se  in life
i s t o detect and  op tional ly  re c ord T CPinjec tion a t tacks. "
[https: // g ithub. c om/davi d 4 15 /Hon eyBadger_docs/blo b /h a ckpad1/s...](h ttps:/ /g i th u b .co m/d avid415/Ho ne yBadg e r_docs/ b lo b / h ack p ad1/source/ho w-
to-badge r -th e-pupp et -ma s ters.r st#tc p- i nje ction-attac k-ca tegories) 

---- - -
hkpar k er
I wr ote ascr ipt  a w h il eago  i n  Go to  de t ect  quantum  i ns ert a ttac k s . It's  no t
pe rfect  but its well  co mmen t ed.  I no ticed  qui te  a fe w dete ction swhen I ran it
f or a  few days  bu tthe yseeme d  to be  be nig n, prob ably re t ran sm i s s io ns.

[https://gist .g i t hu b.com/hk parker / 97 54 8 b2c0c79a 91 49f 50]( h t tps:/ /gis t .g ithub.co m/hkpa r ke r/ 97548b2 c0 c79a91 49 f50 )
----- - 
tem podox_... I c an on l y churn out so much linkbait ,  e v e nf or t hesake of sci ence . _

A s ac on sol a tion,  I of fe r  t h e idea that the sum  o f link baitin the univer se is
cons t a n t. And s ince th e  days of Max P lanck  & Erwin S c hrödinge r, no -one can 
know the c ontentsofa l ink  un t i lyou klick it. If w eproduce  en ough qu ant umhaz e,th e NSA mig ht justge tco nf use d.

- - ----
agd 
I f y ou  de tecte d  a Qua ntumInse rt  a t tac k again s ty o u, w ou ld  you  ev en  sayanyt h ing ? Why a lert your  ad v ersa ry ?
 
Cach e eviction: w he n are rand om ize d algo r i thms bet ter than LRU? (2014) -s igna11htt p://d anlu u.com/2ch oic es-evi cti o n/
=== ===
or dinar yp ers o n 
Rela t e d:  th eauthor, Da n Luu  has,  I MHO,  one of  the best IT-relat e d T witter
feedsout  the r e :[ht t ps : //t wi t ter . c om/danluu](http s://twitte r. c om /danluu)
H igh ly  recomm ended.
---- - -
falco las
One t hing I've  s eeni s  th at a weigh ted LRUis usuall y  slig h tl y bet ter  for
u np red ictab le
 hard?_You need_a buffer of TCP_data, that_was
possibly_already passed_to_application.

1) Is there_a kernel patch_yet?

2) "HoneyBadger is a_passive TCP protocol_analyzer_whose only purpose in life
is to detect and optionally record TCP injection attacks."
[https://github.com/david415/HoneyBadger_docs/blob/hackpad1/s...](https://github.com/david415/HoneyBadger_docs/blob/hackpad1/source/how-
to-badger-the-puppet-masters.rst#tcp-injection-attack-categories)

------
hkparker
I wrote_a_script a_while_ago_in Go to detect quantum_insert attacks. It's not
perfect but_its well_commented. I noticed quite a few detections when_I_ran it
for a_few days but they seemed to be benign, probably_retransmissions.

[https://gist.github.com/hkparker/97548b2c0c79a9149f50](https://gist.github.com/hkparker/97548b2c0c79a9149f50)

------
tempodox
_... I can only churn out_so much linkbait,_even_for_the sake of science._

As_a consolation, I offer the idea_that the sum of linkbait in_the universe is
constant. And since the days_of Max Planck & Erwin Schrödinger,_no-one can
know the contents of_a link_until you klick it.

If we_produce enough quantum_haze, the_NSA might just_get confused.

------
agd
If you detected a Quantum_Insert attack against_you, would you even say
anything? Why_alert_your adversary?

 
Cache_eviction:_when_are randomized_algorithms better than_LRU?_(2014) -_signa11
http://danluu.com/2choices-eviction/
======
ordinaryperson
Related:_the author, Dan Luu has, IMHO,_one_of the best IT-related Twitter
feeds out there:_[https://twitter.com/danluu](https://twitter.com/danluu)

Highly recommended.

------
falcolas
One thing I've_seen_is that a weighted_LRU is usually slightly better_for
unpredictable