Archive for July 19th, 2008

19
Jul

POLL: Dan Kaminsky’s DNS Poisoning Bug

By theReformed 1 Comment
Categories: briefs, internet, opinion, poll, thereformed and vulnerability

More than a week later, we mull over Dan Kaminsky’s recent finding that has directly impacted the Internet and it’s support industry, vendors and consumer and stirred controversy that has led some to speculate whether he is only looking for exposure before his talk at the BlackHat briefings this year - we’re posting this poll, referencing his article to see what you think of his disclosure motives or the lack thereof.

You might say, “Why haven’t you written an article on it?” - To be clear, we haven’t blogged about it simply because everyone and their mom has already and we think some of the more provocative ones get to the point here and here.

Dan Kaminsky's DNS bug is...

  • Very Important! (73%, 33 Votes)
  • Moderately Important! (16%, 7 Votes)
  • Searching for 15 Seconds of Fame! (11%, 5 Votes)
  • Not Important! (0%, 0 Votes)

Total Voters: 45

Loading ... Loading ...
July 2008
M T W T F S S
« Jun   Aug »
 123456
78910111213
14151617181920
21222324252627
28293031  

Months

Recent Entries

Worth Reading

    robert hansen [rsnake]
    (sectheory)

  • HTTPOnly Fix In MSXML - I’m happy to announce that Microsoft has released MS08-069 today. It’s got a lot of changes in it, but one in particular that I’ve been tracking for about a year now. MSXML has
    Read more...  


    • chris eng, chris wysopal [weldpond] &
    christien rioux [dildog]
    (veracode)

  • News Report on Non Vulnerability in Windows Vista - Are editors so excited to use the headline “Vulnerability in Windows Vista” in their SEO URLs that they will have their reporters write a story on a non-issue? IDG News has published a
    Read more...  


    • spacerogue

  • HNN Archive Posted - I don’t really know who actually owns the Hacker News Network anymore. I own the domain now but the original content was part of the sale of L0pht to @Stake which was then sold to Symantec. At
    Read more...  


    • dan kaminsky
    [ioactive, inc.]

  • No School Like The Old School - I really need to learn to leave DNS alone DNS TXT Record Parsing Bug in LibSPF2 A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and
    Read more...  


    • dino dai zovi

  • Dead Bugs Society: Apple File Server - For today’s installment of Dead Bugs Society, I’m going to dig up another one of my favorite exploits.  This exploit is actually the second exploit that I wrote for the Apple File Server
    Read more...  


    • amrit williams

  • Injustice Served: The Julie Amero Case is Finally Over - The tragedy of Julie Amero (here) has finally come to an end. The substitute teacher accused of showing pornography to her middle school class, in which a series of incompetent computer experts and
    Read more...  


    • dave goldsmith, jeremy rauch,
    thomas ptacek & chris rohlf
    [matasano chargen]

  • Matasano Revs Up Firewall Rule Management With Playbook v1.1 - We are happy to announce a new release of our firewall management product Playbook, available today. Playbook v1.1 introduces Rule Macros and support for managing rules for Cisco PIX firewalls among
    Read more...  


Blogroll