Security Basics mailing list archives

RE: DNS flaw for home users...


From: "Murda Mcloud" <murdamcloud () bigpond com>
Date: Thu, 24 Jul 2008 13:42:44 +1000

Bit of searching netted me this on Kaminsky's site:

http://www.doxpara.com/ 
Click on the DNS checker. 
Also here:
https://www.dns-oarc.net/

the second one gives pretty graphs.




-----Original Message-----
From: Murda Mcloud [mailto:murdamcloud () bigpond com]
Sent: Thursday, July 24, 2008 11:16 AM
To: 'security-basics () securityfocus com'
Subject: DNS flaw for home users...

With all the brouhaha surrounding the DNS flaw that Dan Kaminsky has
hinted at and others have 'accidentally' disclosed or stumbled upon, what
kind of advice would you be giving to home users?

Obviously the whole push is towards patching and trying to do that before
the evil ones work out how to create an exploit(maybe they already have
<shrug>).
But, that means home users are left to wonder whether their ISP has
patched.
What should they do? Ask their ISP? Try and run an exploit against their
ISP's DNS?(joke...I'm joking..sheesh, lighten up).

I've tried explaining it to some people here and used a simplified
version of the deli ticket thing but people's eyes still glaze over.
So...is it even worth me worrying? Is this a rhetorical post...?
Yes, I know that the hole has been there for a long time and no-one
(really)worried about it before etc etc.






Current thread: