Kaminsky on the net-shaking DNS bug Wired's Danger Room has a good interview with Dan Kaminsky, whose DNS hack has been burning up the wires. Dan figured out a means of disrupting the entire Internet by poisoning DNS. The exploit's existence and scope have been hotly ...Details of DNS Flaw Leaked; Exploit Expected by End of Today Despite Dan Kaminsky's efforts to keep a lid on the details of the critical DNS vulnerability he found, someone at the security firm Matasano leaked the information on its blog yesterday, then quickly pulled the post down. ... DNS Exploit in the Wild Well it took a little longer than expected so it's not quite a zero-day exploit, but the anticipated attack code to exploit the critical Kaminsky DNS cache-poisoning flaw is now in the wild (assuming there wasn't one already out there). ... Attack Code Published For DNS Vulnerability ZDNet is reporting that HD Moore has released exploit code for Dan Kaminsky's DNS cache poisioning vulnerability into the point-and-click Metasploit attack tool. From the article: 'This exploit caches a single malicious host entry into ... Kaminsky on How He Discovered DNS Flaw and More Dan Kaminsky is understandably swamped today, given the unexpected early release of information about the critical DNS flaw he discovered that potentially affects the security of every web site on the internet. ... DNS exploit in the wild We've been tracking Metasploit commits since Matasano's premature publication of [Dan Kaminsky]'s DNS cache poisoning flaw on Monday knowing full well that a functional exploit would be coming soon. Only two hours ago [HD Moore] and ... Have You Updated Your DNS Settings? Recently, a significant threat to DNS, the system that translates names you can remember (such as www.doxpara.com) to numbers the Internet can route (66.240.226.139) was discovered, that would allow malicious people to impersonate ... The DNS Debacle In Poetic Review It was with DNS, It was nasty and raw. He decided than rather to disclose all at once he'd instead only tell people who'd fix it in months. So some meetings were had and work soon began vendors wrote patches coordinated by Dan ... Is Your DNS Server Safe? Major Security Hole Needs To Be Patched ... Dan Kaminsky found a security hole in DNS recently, the details of which he was keeping quiet so providers could fix and release patches and DNS server owners could get those patches deployed, in order to avoid security breaches on the ... Aussies play down DNS disaster One large Australian organisation and a local computer security advisor have played down the importance of a security flaw in the global Domain Name System (DNS) that has led to panic in some security circles around the globe.
|