infoworld.com
Jul 25, 2008
DNS bug reveals the Internet's soft, chewy center TAGS: Internet Security You've probably been inundated with news about Dan Kaminsky’s DNS cache exploit, potentially one of the biggest Internet-wide vulnerabilities ever announced. Unpatched DNS servers can be easily tricked into leading users to bogus Web sites, and literally, without patching the DNS servers (and sometimes the clients) there is little the average end-user can do. Although many Internet security experts believe this flaw is critical, but way overhyped, there is a likely chance that the crimeware industry will be working overtime to utilize this exploit. It is so potentially damaging that Dan quietly worked with the world's biggest DNS services vendors to make sure they had patches before he went public with the exploit details at the Black Hat Conference on...
[read full story]