|)ruid and HD Moore release part 2 of DNS exploit

TalkBack 8 of 12:

Next »

« Previous

• Thread View
• Flat View

I beg to differ

It would be security through obscurity. Do you think there are no organizations out there that can figure out this on their own? Who knows if this was already used? This exploit is highly derivative and reading Kaminsky's article on how he discovered it I'm amazed nobody else did before (engineers at CDN providers for example.)

DNS is still quite insecure even with the random port mitigation. Moving to TCP would add a little bit more but still not perfect and it would be prone to man-in-the-middle attakcs. DNS needs some sort of authentication (IPSec AH, SSL connections, or DNSSec.)

http://en.wikipedia.org/wiki/Security_through_obscurity

In computer security, ignorance ISN'T bliss.

Alecco

Posted by: alecco   Posted on: 07/24/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Using Red Hat Enterprise Linux AS to Achieve Highly Available, Load-Balanced Clusters Dell The Red Hat Enterprise Linux AS operating system integrates Cluster ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now