TCP security threat

University of California, Riverside posted a description and fix for a security threat to all Linux systems. It is posted in Phys.org, titled "Study highlights serious security threat to many internet users" on August 9th, 2016 with this link: http://ift.tt/2aPWN30

I tried "Qian recommends the following temporary patch that can be applied to both client and server hosts. It simply raises the `challenge ACK limit' to an extremely large value to make it practically impossible to exploit the side channel. This can be done on Ubuntu, for instance, as follows: 1. Open /etc/sysctl.conf, append a command "/net.ipv4/tcp_challenge_ack_limit = 999999999".
2. Use "sysctl -p" to update the configuration."

In Terminal, but got error messages.

Let's block ads! (Why?)

TCP security threat