dns debacle

ZDNet Resources

• sort by:
• Relevance
• Date
• Popularity

Vulnerability disclosure gone awry: Understanding the DNS debacle

Vulnerability disclosure gone awry: Understanding the DNS debacleI think he deserved better for sureYou know, Dan does manipulate the media well, but I'll tell you this, he's a stand-up guy. Did he try to drum up the press a bit? Sure, why not? Did he choose his...

Tags: debacle, DNS, DNS debacle

Discussion threads 2008-07-22

Additional Resources

Measuring (not so) recent BIND nameserver patching

Guest editorial by Derek Callaway This post is meant to provide an approximation of BIND nameserver updates that occurred during the past month, most likely in response to Dan Kaminsky's DNS cache poisoning vulnerability. I conducted this research because I was curious as to how widely BIND...

Tags: Vulnerability, BIND, Domain, Dinosaur, Domain Names, Internet, Ryan Naraine

Blog posts 2008-08-14

Did Apple forget to patch something?

Less than 24 hours after Apple belatedly released a patch for the DNS cache poisoning vulnerability, there are reports circulating that the DNS client on the OSX 10.4.11 distribution still has not been patched. According to nCircle's Andrew Storms, the client libraries on a fully patched OSX...

Tags: DNS, Domain, IP, Server, Apple Inc., BSD, Client Library, Domain Names, Networking, Internet, Ryan Naraine

Blog posts 2008-08-01

News to know: Microsoft Midori; Sub $600 PCs; Dell; Neosploit; SOA

Notable headlines: Mary Jo Foley: More tech details emerge on Microsoft's 'Midori' What if Apple had conducted the 'Mojave Experiment'? Tom Steinert-Threlkeld: Microsoft, In Search Of Itself Adrian Kingsley-Hughes: The 'Mojave Experiment' - Just an exercise in guided clicking or does it...

Tags: Dell Computer Corp., PC, Malware, SOA, Microsoft Corp., Adrian Kingsley-Hughes, Service-Oriented Architecture (SOA), Spyware, Adware & Malware, Cyberthreats, BIOS, Mergers & Acquisitions, Web Services, Viruses And Worms, Security, Middleware, Enterprise Software, Software, Hardware, Components, Investment, Finance, Larry Dignan

Blog posts 2008-07-30

Microsoft joins 'patch DNS now' chant; Apple patch missing

On the heels of the release of weaponized exploit code for the DNS cache poisoning vulnerability, Microsoft has joined the chorus of security pros pleading with DNS server providers to immediately apply patches to protect users from malicious attacks. The Redmond, Wash. security...

Tags: Apple Macintosh, DNS, Vulnerability, Apple Inc., Exploit Code, Microsoft Corp., Attack, Dan Kaminsky, Domain Names, Apple Mac OS X, Networking, Security, Internet, Operating Systems, Software, Apple Mac OS, Ryan Naraine

Blog posts 2008-07-25

Attack code published for DNS flaw

The urgency to patch Dan Kaminsky's DNS cache poisoning vulnerability just went up a few notches. Exploit code for the flaw, which allows the insertion of malicious DNS records into the cache of the target nameserver, has been added to Metasploit, a freely distributed attack/pen-testing tool....

Tags: Ryan Naraine

Blog posts 2008-07-23

News to know: Yahoo; VMware; Apple; DNS vulnerability

Notable headlines: Ryan Naraine: Vulnerability disclosure gone awry: Understanding the DNS debacle RIM ships fix for BlackBerry code execution bug Dancho Danchev: Georgia President's web site under DDoS attack from Russian hackers 75% of online banking sites found vulnerable to security design...

Tags: Apple iPhone, Google Inc., Larry Dignan, DNS, Yahoo! Inc., Vulnerability, Dana Blankenhorn, Health Care, Apple Inc., VMware Inc., App Store, Banking, Vertical Industries, Domain Names, Benefits, Healthcare, Security, Financial Services, Enterprise Software, Software, Internet, Human Resources

Blog posts 2008-07-23

Vulnerability disclosure gone awry: Understanding the DNS debacle

On July 7, the day before the release of the patch for the now infamous DNS design flaw, hacker Dan Kaminsky with the help of Black Hat conference organizers invited reporters to a press conference to "discuss the massive multivendor patch being released this Tuesday." "A synchronized...

Tags: Black Hat, DNS, Conference, Dan Kaminsky, Thomas Ptacek, Domain Names, Patches, Security, Networking, Internet, Ryan Naraine

Blog posts 2008-07-22

Senator: Keep U.N. away from the Internet

Senator: Keep U.N. away from the InternetMessage has been deleted.Yes The Internet Should Not Be Managed by the UN, and Neither by the US!For a president that was preaching smaller government, etc he sure is doing the complete opposite. The ICANN was doing fine, UNTIL the current administration could...

Tags: Internet service providers (ISPs), Government, Internet, ICANN, domain, Cuba, indy

Discussion threads 2005-10-18

U.N. agency says it's ready to govern the Net

U.N. agency says it's ready to govern the NetSure forcefully take the Internet away from the U.S, Won't happen!Who made it and governs it. The United Nations isn't a government or higher than any government's law.The U.N need to prove they are competitent firstThe U.N. has proven over and over...

Tags: Domain names, VeriSign Inc., ICANN, U.N. Agency, DNS, Internet

Discussion threads 2005-09-30

Microsoft says PC 'recycle bin' yielded Google clue

Microsoft says PC 'recycle bin' yielded Google clueMicrosoft has met its matchIBM, Oracle, HP, Linux bah..Google is the worthy competitor. This is going to be a true clash of the Titans.Microsoft routinely hires from competitorsMicrosoft routinely hires competitor's best employees away to work on competing technologies. The best example...

Tags: Linux, Operating systems, Programming languages, PC, Microsoft Corp., Google Inc.

Discussion threads 2005-08-10

Who should manage the DNS?

Who should manage the DNS?U.S. CONTROL OVER THE INTERNETThe US government control over the internet has not helped it very much. Only in June 2005 it was disclosed that Hackers hacked the files of US Military. US government should not worry about whether it should have any control over the...

Tags: unipolarity, Internet, DNS

Discussion threads 2005-07-01