See all mentions of "Attack #2"
> a day of unixtime + potential pids makes ~86420 potential XIDs, this is a feasible attack vector.
The number of potential XIDs isn't timestamp PLUS pid, it's timestamp TIMES pid, right?
Totaling not "~86420" but 2,160,000, right?
But where does he get "a day" from? How does he know the target wasn't booted yesterday, or a month ago?
See all mentions of "Attack #2"