Lab Notes

Windows WP SP2 and Windows Server 2003 are vulnerable to the LAND attack. This one is an oldie — it was originally identified in 1997 (OK, so that's not that long ago in geologic time, but in internet time...). Fortunately, having Windows Firewall enabled blocks the attack.

The reappearance of bugs like this highlights the importance of regression testing, which confirms that new software modifications don't unfix previously fixed bugs. It also highlights the importance of institutional memory. This attack is over seven years old — it's very possible the Microsoft engineer who re-introduced the vulnerability was not working at the company back then, and was not even aware that the LAND attack existed. Having the old hands around who know what not to do is just as important as hiring the young guns for any software development company.