Dns Flaw

bored888

Good old Kaminsky at it again.

http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/

Funnily enough his dns checker on Doxpara shows BT Ireland's DNS servers are still vulnerable (not that a publicly released working exploit has been revealed yet..)

Bind 8 will not get patched (it's left to decay).

acidstorm

bored888 wrote: »

Good old Kaminsky at it again.

http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/

Funnily enough his dns checker on Doxpara shows BT Ireland's DNS servers are still vulnerable (not that a publicly released working exploit has been revealed yet..)

Bind 8 will not get patched (it's left to decay).

DNS over SSH , SSH over DNS TCP/IP over DNS , DNS over TCP/IP over DNS FTW, I thought Dan said he had kicked DNS's ass so much that he decided not to pick on it again!! Anyways good job... Now to read the article

acidstorm

I hate love to be the bearer of good news, but erm I dont think this works on eircom's DNS server, (They patched perhaps)>> Firefox cannot find the server at SITE.org

BTW I think DNS will get more attention now instead of it being the abandoned child of ISPs and run on old boxes.

stillhere08

acidstorm wrote: »

I hate love to be the bearer of good news, but erm I dont think this works on eircom's DNS server, (They patched perhaps)>> Firefox cannot find the server at SITE.org

BTW I think DNS will get more attention now instead of it being the abandoned child of ISPs and run on old boxes.

I also had a server problem the last 2 days, but have just seen this

http://news.bbc.co.uk/1/hi/technology/7499260.stm

if you use zone alarm, this could have an impact on your server connection!

ntlbell

There's an online test checker here..

http://www.doxpara.com/

ainiseoir

acidstorm wrote: »

I hate love to be the bearer of good news, but erm I dont think this works on eircom's DNS server, (They patched perhaps)>> Firefox cannot find the server at SITE.org

BTW I think DNS will get more attention now instead of it being the abandoned child of ISPs and run on old boxes.

Amazed to see Kaminsky such old hat to you guys.
Just checked with Eircom Broadband (Bangolore branch) who didn't know what I was on about - very comforting with Mr Kaminsky saying that my bank and credit card details may be public property shortly, if not already.
i did take him up on his offer to check my DNS and it seems to be alright. Nothing certain here.
I'm using Safari on MAC 10.5.4, maybe that got me through!

acidstorm

ainiseoir wrote: »

I'm using Safari on MAC 10.5.4, maybe that got me through!

Apple Skewered over missing DNS patch.
http://www.theregister.co.uk/2008/07/29/apple_dns_patch_mia/

FruitLover

ainiseoir wrote: »

I'm using Safari on MAC 10.5.4, maybe that got me through!

Browser and OS are irrelevant in the case of this tool

acidstorm wrote: »

Apple Skewered over missing DNS patch.

Don't know many people who would run a DNS server on OSX