Network World
Saturday, November 22, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Community: Security

Navigation

people naturally healthy too?

Consider this: People went out of their way to create computer viruses, it's not a naturally ocuring digital-disease. Computers are naturally 'healthy'.

Perhaps people are also 'naturally healthy' and our species has created our own viruses mentally because of our need to have an advisary. It gives us something to fight against and grow.

Click to read the article this is in response to.

DNS is Flawed!!!

0

Patches alone won't suffice. This problem is part of the inherent vulnerability in the DNS. It sems the bad guys always find ways to circumvent these security patches: DNS Revolutions & Evolutions(http://www.internetevolution.com/author.asp?section_id=495&doc_id=158621&F_src=flftwo)

2nd page really necessary

0

Were 2 pages for this story really necessary? I'm glad they like to have us click through that one more time to read one more paragraph. I'm not meaning to rant, but the amount of information on this page of the story is so small.

LOL! The patcher is attacked by hackers...

0

LOL! The patcher is attacked by hackers. Funny thing.

S. Nilesh

www.itech7.com

ummm.... This guy wasn't

0

ummm.... This guy wasn't the the creator of the patch. He was the guy who publicly released the exploit into the wild.

If you're going to comment on irony, at least get your facts straight, because being owned when you're the one who publicly released the exploit is very ironic.

pwned! Even Cartman knows that.

0

pwned! Even Cartman knows that.

snoof.c/logicmoo

0

Google "snoof.c"
This exact exploit can be patched to return multiple answers so for example the snoof is going to use 5474564561 as the transaction ID for nasa.gov becasue it just used 5474564560 for mydomain.com. A patch will presend 1000s of answers with 5474564562,5474564564,etc.. This snoofing is over 10 years old.. Did somebody just add a better patch to it like the one described?

Time Warner, Too

0

I also got a report of this happening on Tuesday morning at a Time Warner customer in Austin. It was redirecting traffic for www.google.com to a website at hostmonster.com

You are so full of it!

0

First off, HD moore did not get pwned. Get the story right. His found that an upstream DNS server had been poisoned and was handing out a malicious i-frame for Google. The WHOLE story is on his blog. Read that and then you will see that this story is wrong.

Robert McMillan you should feel ashamed for reporting this story.

Next, the exploit was being talked about online and it was just a matter of time before the POC hit the web. Moore decided to get it tooled up for the metasploit framework so pen testers and security teams could test there systems. Yes, I know haxors can use the same tools for evil, but that is true with anything.

Report that facts McMillan!

the point

0

The point is that justice is served, not about HD's technical prowess and whether he personally was 'pwned' or not. Karma dude, that's all I'm saying.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <i> <b> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <br /> <br> <p>
  • Lines and paragraphs break automatically.
  • You can use BBCode tags in the text.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.

Advertisement: