https://hackerpaper.kaipfister.de/p/2209.12993/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMThttps://news.ycombinator.com/item?id=40724468urn:hackerpapers:mention:2209.12993:40724468Wed, 19 Jun 2024 03:28:39 GMT<p>A whitepaper detailing this CVE-2022-32296 attack. Vulnerability is in Double-Hash Port Selection (DHPS, IETF RFC 6056) Fixed in Linux 5.17.9 and above using a variant of DHPS. Linux sysctl: net.ipv4.conf.all.rp_filter = 1 net.ipv4.conf.default.rp_filter = 1 Also Firefox Only HTTPS must be enabled to prevent JavaScript from performing dwell on hidden unsecure HTTP DOM frame. ---- https://support.mozilla.org/mk/questions/1359401 https://arxiv.org/pdf/2209.12993 https://github.com/0xkol/rfc6056-device-tracker https://www.rfc-editor.org/rfc/rfc6056.html</p><p><a href="https://hackerpaper.kaipfister.de/p/2209.12993/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CRhttps://news.ycombinator.com/item?id=33121142urn:hackerpapers:submission:2209.12993:33121142Fri, 07 Oct 2022 13:41:38 GMT<p>Device Tracking via Linux TCP Source Port Selection Algorithm</p><p></p><p>2 points; 0 discussion replies on HN. <a href="https://hackerpaper.kaipfister.de/p/2209.12993/">Paper and source history</a>. A submission is not an endorsement.</p>cs.CR