The Patching Friars' AlmanacA calendar of CVE saints

December 25

Christmas AttackHoly card for mitnick-christmas-attack, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SEQ+64k SYN · SYN-ACK Christmas Attack NUMERUS PRAEVISUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Mitnick, Father of the Christmas Attack

Patron of TCP sequence numbers, trust relationships, and everyone who works even on Christmas Day.

Life

On 25 December 1994 the attack that bears Kevin Mitnick's name was launched against Tsutomu Shimomura's systems. By predicting TCP sequence numbers, then far too regular, the attacker impersonated a trusted machine and, silencing the real host, opened a connection in its name: the IP spoofing the textbooks had only theorised, put into practice on Christmas Day itself. The hunt that followed became legend.

Prayer

O Saint Mitnick, Father of the Christmas Attack, who guesses the next number before it is chosen, let our sequences be truly unpredictable. Amen.

How to celebrate

Celebrated by using random sequence numbers and trust relationships based on cryptography, not on the IP address.

At Christmas even the sequence numbers come as a surprise.

Technical record

Disclosed on
December 25 1994
CVE
CVE-1999-0077

Predictable TCP sequence numbers allow spoofing.

Sources: aeb.win.tue.nl · sei.cmu.edu

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.