Showing 2026 · cs.CRShow all
2 papers · 2 filters
cs.CR2026
Cross User/App Network Attacks - Hijacking TCP Connections and DNS Cache Poisoning via a Malicious User/App (Extended Version)
Tamir Shahar, Amit Klein
Off-path network attacks against TCP and DNS (over UDP) client-server connections are generally considered impractical nowadays, due to built-in security features in these protocol…
cs.CR2026
One (Thread) Can Keep a (PRNG) Secret, but not Two
Ehood Porat, Amit Klein, Benny Pinkas
We present a novel, practical attack on the IPv6 Fragment ID generation algorithm of XNU, which is the kernel used by Apple products such as macOS and iOS. This attack exploits a r…