Sponsored White Papers, Webcasts, and Downloads
Additional Resources
- EIC podcast: Microsoft's analyst meeting; Icahn's deal; Facebook
- On this week's EIC squared podcast, Dan is back and we talk about Microsoft's analyst meeting, Kevin Johnson's departure from the software giant, Carl Icahn's deal with Yahoo and Facebook. The big news this week was Microsoft's financial meeting (see Mary Jo Foley and Ina Fried's coverage)...
- Tags: Facebook, Yahoo! Inc., Microsoft Corp., Carl Icahn, Dan, Podcasts, Portals, Internet, Larry Dignan
- Blog posts 2008-07-25
- Microsoft joins 'patch DNS now' chant; Apple patch missing
- On the heels of the release of weaponized exploit code for the DNS cache poisoning vulnerability, Microsoft has joined the chorus of security pros pleading with DNS server providers to immediately apply patches to protect users from malicious attacks. The Redmond, Wash. security...
- Tags: Apple Macintosh, DNS, Vulnerability, Apple Inc., Exploit Code, Microsoft Corp., Attack, Dan Kaminsky, Domain Names, Apple Mac OS X, Networking, Security, Internet, Operating Systems, Software, Apple Mac OS, Ryan Naraine
- Blog posts 2008-07-25
- How OpenDNS, PowerDNS and MaraDNS remained unaffected by the DNS cache poisoning vulnerability
- The short answer is being paranoid about tackling a known vulnerability. It's 2001, and Daniel J. Bernstein DJB, author of the then popular djbdns security-aware DNS implementation, is applying basic math principles to raise awareness on what's to turn into the "sky is falling" critical Internet vulnerability in 2008, in...
- Tags: DNS, Vulnerability, Anomaly, Attack, OpenDNS, MaraDNS, NSS, Domain Names, Networking, Internet, Dancho Danchev
- Blog posts 2008-07-25
- If Xen and KVM are free, why do VMware and Microsoft get all of the press?
- Xen and KVM, like other virtualization tools, can be used as part of a comprehensive datacenter architecture. One of the most important value propositions offered by both of these tools is low initial cost (read "free"). Depending upon the implementation (Citrix, Red Hat, SUSE, Virtual Iron, Oracle, Sun, Qumranet, etc.)...
- Tags: Red Hat Inc., Xen, VMware Inc., Microsoft Corp., Tool, Comprehension, Productivity, Data Centers, Open Source, Storage, Hardware, Data Management, Dan Kusnetzky
- Blog posts 2008-07-25
- Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon
- Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soonTTLSomething I wish I'd asked during the webcast and which I can't quite get my head around:It was said that setting a long TTL doesn't help because of the way delegation works - has to...
- Tags: Domain names, DNS server, TTL, server, Kaminsky
- Discussion threads 2008-07-24
- Kaminsky suggests long-term fix will still have to be determined, but patch now, or pay soon
- I listened to the Black Hat webcast today to grab as much info as I could on this subject. The biggest thing that I heard from the whole talk is that the patch fixes things to a reasonable point, but that long-term, there will have to be more work...
- Tags: CERT, DNS Server, Server, Kaminsky, Dan, Patches, Domain Names, Security, Internet, Nathan McFeters
- Blog posts 2008-07-24
- AT&T iPhones exposed to DNS cache poisioning? Or not?
- Here's a photo of my iPhone after running Dan Kaminsky's Doxpara DNS Checker tool a few minutes ago: I ran the same test at the DNS-OARC's DNS checker and got this:Â 209.183.33.23 (schinetdns.mycingular.net) appears to have GREAT source port randomness and GREAT transcation...
- Tags: DNS, AT&T Corp., Domain Names, Networking, Internet, Ryan Naraine
- Blog posts 2008-07-24
- Don't doubt Deputy Dan
- Don't doubt Deputy Danfound articleI found this related article Security Snafu Puts Dangerous Internet Flaw into Hackers’ Hands
- Tags: Deputy Dan
- Discussion threads 2008-07-24
- Google opens Knol website, a wiki with bylines
- Google opens Knol website, a wiki with bylinesRE: Google opens Knol website, a wiki with bylinesCan't wait for this service to be closed in a year like other Google services! That's assuming it even lasts that long. When your employees do nothing but play with office toys its...
- Tags: Knol website, Google Inc., Knol, Wiki, Wikipedia
- Discussion threads 2008-07-24
- News to know: DNS flaw; Amazon; Microsoft shakeup; Facebook
- Notable headlines: Ryan Naraine: Researchers borrow from Google PageRank for network defense service Attack code published for DNS flaw Nate McFeters: |)ruid and HD Moore release part 2 of DNS exploit 'Spam King' escapes from federal prison iPhone vulnerable to phishing,...
- Tags: Apple iPhone, Facebook, DNS, Amazon.com Inc., Microsoft Corp., Microsoft Xbox, Flaw, Game Players, Domain Names, Networking, Security, Consumer Electronics, Personal Technology, Internet, Larry Dignan
- Blog posts 2008-07-24
- Parallels releases Parallels Server for Mac
- I almost missed Parallels' announcement of Parallels Server for Mac. I didn't speak with company representatives. All I saw was a press release. It was nearly lost in a huge pile of other mail in my inbox. Although there are several virtual machine software products that support...
- Tags: Apple Macintosh, Operating System, Virtual Machine, Parallels Server, Parallels Management Console, Toolset, Desktops, Apple Mac OS, Desktop Virtualization, Operating Systems, Servers, Hardware, Software, Dan Kusnetzky
- Blog posts 2008-07-24
- |)ruid and HD Moore release part 2 of DNS exploit
- |)ruid and HD Moore release part 2 of DNS exploitSo, Linux's BIND the first to be exploited...So, Linux's BIND the first to be exploited...Nice work!CoolNate, nice post and analysis!Wasn't the replacing the ns.victim.com cache entry part of the Halvar Flake speculation? I thought first part of the exploit was to...
- Tags: Domain names, NETWORKING, Operating systems, Alecco, DNS, ruid, exploit, HD Moore, Linux
- Discussion threads 2008-07-24
- |)ruid and HD Moore release part 2 of DNS exploit
- [Updated 07/24/2008: Gallery images of diffs of code revisions has been included and will be updated as things change, see here.] Earlier today, noted researchers |)ruid and HD Moore released exploit code for the Metasploit tool for attacking the DNS flaw that was originally reported by Dan...
- Tags: DNS, Domain, Server, Entry, Exploit, NS, NS Record, Domain Names, Networking, Internet, Nathan McFeters
- Blog posts 2008-07-23
- Attack code published for DNS flaw
- The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool....
- Tags: Ryan Naraine
- Blog posts 2008-07-23
- Virtual Iron Customer Profile: Goodell DeVries Leech & Dann, LLP
- I had the chance to speak with Goodell DeVries Leech & Dann's David Roden, a few questions about their use of Virtual Iron's virtual server environment. Thanks for spending time with me, David! Here are my questions and David's answers: Who are you and what...
- Tags: Virtual Iron, Server Virtualization, Disaster Recovery, Virtualization, Servers, Hardware, Data Management, Dan Kusnetzky
- Blog posts 2008-07-23
- News to know: Yahoo; VMware; Apple; DNS vulnerability
- Notable headlines: Ryan Naraine: Vulnerability disclosure gone awry: Understanding the DNS debacle RIM ships fix for BlackBerry code execution bug Dancho Danchev: Georgia President's web site under DDoS attack from Russian hackers 75% of online banking sites found vulnerable to security design...
- Tags: Apple iPhone, Google Inc., Larry Dignan, DNS, Yahoo! Inc., Vulnerability, Dana Blankenhorn, Health Care, Apple Inc., VMware Inc., App Store, Banking, Vertical Industries, Domain Names, Benefits, Healthcare, Security, Financial Services, Enterprise Software, Software, Internet, Human Resources
- Blog posts 2008-07-23
- Vulnerability disclosure gone awry: Understanding the DNS debacle
- Vulnerability disclosure gone awry: Understanding the DNS debacleI think he deserved better for sureYou know, Dan does manipulate the media well, but I'll tell you this, he's a stand-up guy. Did he try to drum up the press a bit? Sure, why not? Did he choose his...
- Tags: Domain names, Advertising & Promotion, Dan, DNS
- Discussion threads 2008-07-22
- Vulnerability disclosure gone awry: Understanding the DNS debacle
- On July 7, the day before the release of the patch for the now infamous DNS design flaw, hacker Dan Kaminsky with the help of Black Hat conference organizers invited reporters to a press conference to "discuss the massive multivendor patch being released this Tuesday." "A synchronized...
- Tags: Black Hat, DNS, Conference, Dan Kaminsky, Thomas Ptacek, Domain Names, Patches, Security, Networking, Internet, Ryan Naraine
- Blog posts 2008-07-22
- 10 hard drive disasters
- Deaths at the hands of bananas, smelly socks and WD-40 are some of the unusual fates to have befallen innocent hard drives, according to a data recovery company. Deaths at the hands of bananas, smelly socks and WD-40 are some of the unusual fates to have befallen innocent hard...
- Tags: Hard Drive, hard drives, data recovery, Dan Ilett, Silicon.com
- News items 2008-07-22
- << Previous
- page 1 of 1
- Next >>
White Papers and Webcasts