POLL: Dan Kaminsky’s DNS Poisoning Bug

More than a week later, we mull over Dan Kaminsky’s recent finding that has directly impacted the Internet and it’s support industry, vendors and consumer and stirred controversy that has led some to speculate whether he is only looking for exposure before his talk at the BlackHat briefings this year - we’re posting this poll, referencing his article to see what you think of his disclosure motives or the lack thereof.

You might say, “Why haven’t you written an article on it?” - To be clear, we haven’t blogged about it simply because everyone and their mom has already and we think some of the more provocative ones get to the point here and here.

Dan Kaminsky's DNS bug is...

Very Important! (73%, 33 Votes)
Moderately Important! (16%, 7 Votes)
Searching for 15 Seconds of Fame! (11%, 5 Votes)
Not Important! (0%, 0 Votes)

Total Voters: 45

Loading ...

July 2008
M	T	W	T	F	S	S
« Jun		Aug »
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

July 2008

« Jun

Aug »

Worth Reading

robert hansen [rsnake]
(sectheory)

HTTP Verb Brute Forcing - I read a few interesting posts here and here regarding brute forcing HTTP verbs. The F5 post suggested that it is possible to thwart people who are looking for what options you support by giving a

chris eng, chris wysopal [weldpond] &
christien rioux [dildog]
(veracode)

Tallying Twitter?s Application Security Best Practice Violations - If you were paying attention the last few days, you’ve probably read about the wave of attacks launched against the popular Twitter service. It started over the weekend, with a series of

spacerogue

HNN Archive Posted - I don’t really know who actually owns the Hacker News Network anymore. I own the domain now but the original content was part of the sale of L0pht to @Stake which was then sold to Symantec. At

dan kaminsky
[ioactive, inc.]

No School Like The Old School - I really need to learn to leave DNS alone DNS TXT Record Parsing Bug in LibSPF2 A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and

dino dai zovi

ARM versus x86 - At Hack in the Box in Kuala Lumpur this year, I was interviewed by Sumner Lemon of IDG about various Mac and iPhone-related security topics. One of the topics was the relative security of ARM

amrit williams

“Happiness” my new password for 2009 - Wired reports that the 18 year old hacker (age is not relevant but it always fun for the media to point out that some “hacker” is still in his teens) responsible for breaking into

dave goldsmith, jeremy rauch,
thomas ptacek & chris rohlf
[matasano chargen]

Penetration Testing: Dead But Not Really Dead. - Yah, late commentary. Sorry, been a little busy. Brian Chess kicked the hornet’s nest beautifully by declaring: Penetration Testing: Dead in 2009 with: “Death doesn’t mean

theReformed