Qondio
Front
Intel
IntelMart
Shares
My Qondio
Account
darrellpoe > Intel > DNS Dangers

qondio.com/C6ll PRINT EMAIL

DNS Dangers

Have you heard? That website you’re headed to could be spoofed. Whether you’re typing a URL into your browser, clicking a link, or a banner ad you could be headed for a malicious “spoof” site designed to do any number of nefarious deeds. Steal your identity? Sure… Give you a virus? Why not? Turn your computer into a DDoS Zombie bot? Absolutely…

A flaw in the fundamental code that allows end users to reach websites across the internet was discovered in March of this year, and announced in early July. This flaw allows hackers to tap into the data that directs users to websites and manipulate it, sending them to sites of their choosing. This threat has existed since the inception of the internet and could be at the root of many online identity theft cases, DDoS attacks, virus leaks, etc..

The bug was not announced until July to give researchers time to write and implement patches for many major systems. Ordinarily this would set your mind at ease – the problem is fixed right?

No.

The simple truth is that patches are at best a stop-gap for this problem. In fact the first 2 rounds of patches have already been compromised. Companies that have critical online systems need to consider more long term solutions immediately. Frankly, protecting your end users from this kind of attack should be paramount to any company with any online presence. I liken it to putting up a “Wet Floor” sign in your store to protect customers from slipping. Technically there’s no legal liability in this case – but think about your credibility with your users. The impact could be far more costly – and any subsequent press and/or litigation would be disastrous for your brand/image.

I encourage anyone reading this article to do your research – Google “BIND DNS Bug” and you’ll find an astonishing number of articles about this.

IT IS TRUE. IT AFFECTS YOU. TAKE ACTION.

If it’s not with NeuStar/Ultra DNS that’s fine – we have a solution but ours is not the only one (though I’d be remiss if I didn’t say it was the best available).

Bottom line – do your due diligence and find a solution that clears this up, and meets your other needs. Fast.

I’m open to any connections here or find me on LinkedIn.com or Partnerpedia.com. If you have any questions – I’m happy to help.


Contributor's Note

Darrell Poe: Ultra DNS, A NeuStar Service
Global Account Executive
21631 Ridgetop Circle, 2nd Floor Sterling, VA 20166
[T]+1.571.434.6816 [M]+1.703.929.1516 [F]+1.240.489.7929 [E]darrell.poe@neustar.biz [W]www.ultradns.com www.neustar.biz

External Links

Dan Kaminsky's Site

Contributed by darrellpoe on August 29, 2008, at 2:21 AM UTC.

Reactions

No reactions yet.

Rate This Intel

Please login or sign up to rate this intel.

Comments

Please login or sign up to add a comment.

Share

Copyright Notice

The copyright for this content entitled "DNS Dangers" has been specified by the contributor as:

All Rights Reserved

This content may not be copied, distributed or adapted by anyone under any circumstances.

Login Here with
Any Email Address
Any Password
No account? Sign up.

Intel Contributor
This intel was contributed by darrellpoe

Qondio Archive
May, 2012
123456
78910111213
14151617181920
21222324252627
28293031


2008
January, February, March, April, May, June, July, August, September, October, November, December
2009
January, February, March, April, May, June, July, August, September, October, November, December
2010
January, February, March, April, May, June, July, August, September, October, November, December
2011
January, February, March, April, May, June, July, August, September, October, November, December
2012
January, February, March, April, May

Sign Up
Not a member yet? Qondio is a powerful network for making it online. If you have a website to promote, we can help. Sign up and get in on the action.

About Qondio
Welcome to Qondio! Discover the awesome power this network can deliver by going to our About page. Or you could skip straight to the Sign Up form.

ABOUT
SUCCESS GUIDE
FEATURES
FAQ
ADVERTISE
CONTACT
USAGE POLICY
PRIVACY POLICY


TWITTER
FACEBOOK