 Dns Warns Of Pharming Attacks, APR 4, 2005--> ARTICLE ID: 5520 |
|
|
|
|
  |
 Apr 7 2005, 03:55 PM
Post
#1
|
|
|
To Err Is Human, To Forgive Divine  Group: Members Posts: 558 Joined: 24-December 04 From: http://www.ultimatekayakfishing.com/ Member No.: 1,871  |
QUOTE DNS is a global network of computers that translates requests for reader-friendly Web domains, such as www.computerworld.com, into the numeric IP addresses that machines on the Internet use to communicate. The latest attacks use a strategy called DNS cache poisoning, in which malicious hackers use a DNS server they control to feed erroneous information to other DNS servers. The attacks take advantage of a vulnerable feature of DNS that allows any DNS server that receives a request about the IP address of a Web domain to return information about the address of other Web domains. The whole story is here so be careful when you are browsing, "Pharming" is becomming more and more common. Info World Article on Pharming. Nils |
 |
 
|
|
Apr 8 2005, 05:15 AM
Post
#2
|
|
|
Techno-Necromancer Group: Members Posts: 1,018 Joined: 13-January 05 From: The Net Member No.: 2,127 |
This sounds like what happened when you and moonwitch visited that one page that overworte google. Is this the same thing? And if not, what is the difference?
|
|
|
|
|
Apr 8 2005, 09:22 AM
Post
#3
|
|
|
Teh Teckeh Trekkeh Group: Members Posts: 682 Joined: 8-September 04 From: Scotland, UK Member No.: 389 |
Nah a lot different, the problem with the google thing was that google.com was parked to that account, wouldnt go anywhere, wouldnt spread, just a piece of nonsence, the hosts file then picked up the wrong IP, it sounds like its the same thing, it probably could be but it wouldnt go further than that sites viewers.
|
|
|
|
|
Apr 8 2005, 12:06 PM
Post
#4
|
|
|
Techno-Necromancer Group: Members Posts: 1,018 Joined: 13-January 05 From: The Net Member No.: 2,127 |
Thanks trekkie. I didn't think they were the same (because it didn't spread and such), but they had such similar results I wanted to be sure.
|
|
|
|
|
Apr 8 2005, 03:08 PM
Post
#5
|
|
|
Advanced Member Group: Members Posts: 173 Joined: 22-March 05 From: Hyderabad,India Member No.: 3,155 |
I posted some info about this some time back..... It's really worrying that we dont have to do anything now...Dunno how far this would go.
|
|
|
|
|
Apr 8 2005, 04:13 PM
Post
#6
|
|
|
To Err Is Human, To Forgive Divine Group: Members Posts: 558 Joined: 24-December 04 From: http://www.ultimatekayakfishing.com/ Member No.: 1,871 |
The pharmers, phisers and scammers are getting smarter, the problem with a poisoned DNS server may change the way DNS servers are setup and talk to each other. If it get out of hand DNS servers will have to be registered and you have to manually use a handshake protocol to link up with the next DNS server upstream or downstream from from you and a group of servers may have to be setup as the authorative NS cops.
How this will be done or work, I'm not smart enough to figure out...  I would think it has to be a subset of the Authorative name servers so that new nameservers has to register with them and setup some form of login, then a rogue nameserver can't just inject new data into neighboring nameservers. New nameservers can only receive data from registered nameservers but not transmit changes until it's registerd and verified.just my $0.02 Nils |
|
|
|
 |
Similar Topics
|
Lo-Fi Version | Time is now: 7th October 2008 - 06:11 PM |