|
    |
|
|
DNS Dangers
Have you heard? That website you’re headed to could be spoofed. Whether you’re typing a URL into your browser, clicking a link, or a banner ad you could be headed for a malicious “spoof” site designed to do any number of nefarious deeds. Steal your identity? Sure… Give you a virus? Why not? Turn your computer into a DDoS Zombie bot? Absolutely… A flaw in the fundamental code that allows end users to reach websites across the internet was discovered in March of this year, and announced in early July. This flaw allows hackers to tap into the data that directs users to websites and manipulate it, sending them to sites of their choosing. This threat has existed since the inception of the internet and could be at the root of many online identity theft cases, DDoS attacks, virus leaks, etc.. The bug was not announced until July to give researchers time to write and implement patches for many major systems. Ordinarily this would set your mind at ease – the problem is fixed right? No. The simple truth is that patches are at best a stop-gap for this problem. In fact the first 2 rounds of patches have already been compromised. Companies that have critical online systems need to consider more long term solutions immediately. Frankly, protecting your end users from this kind of attack should be paramount to any company with any online presence. I liken it to putting up a “Wet Floor” sign in your store to protect customers from slipping. Technically there’s no legal liability in this case – but think about your credibility with your users. The impact could be far more costly – and any subsequent press and/or litigation would be disastrous for your brand/image. I encourage anyone reading this article to do your research – Google “BIND DNS Bug” and you’ll find an astonishing number of articles about this. IT IS TRUE. IT AFFECTS YOU. TAKE ACTION. If it’s not with NeuStar/Ultra DNS that’s fine – we have a solution but ours is not the only one (though I’d be remiss if I didn’t say it was the best available). Bottom line – do your due diligence and find a solution that clears this up, and meets your other needs. Fast. I’m open to any connections here or find me on LinkedIn.com or Partnerpedia.com. If you have any questions – I’m happy to help.
|
Contributor's Note
Darrell Poe: Ultra DNS, A NeuStar Service Global Account Executive 21631 Ridgetop Circle, 2nd Floor Sterling, VA 20166 [T]+1.571.434.6816 [M]+1.703.929.1516 [F]+1.240.489.7929 [E]darrell.poe@neustar.biz [W]www.ultradns.com www.neustar.biz
|
|
Dan Kaminsky's Site
No reactions yet.
Please login or sign up to rate this intel.
Please login or sign up to add a comment.
The copyright for this content entitled "DNS Dangers" has been specified by the contributor as:
All Rights Reserved
This content may not be copied, distributed or adapted by anyone under any circumstances.
|
 |
May, 2012
2008
January, February, March, April, May, June, July, August, September, October, November, December
2009
January, February, March, April, May, June, July, August, September, October, November, December
2010
January, February, March, April, May, June, July, August, September, October, November, December
2011
January, February, March, April, May, June, July, August, September, October, November, December
2012
January, February, March, April, May
|
|
Not a member yet?
Qondio is a powerful network for making it online. If you have a website to
promote, we can help.
Sign up and get in on the action.
|
|
Welcome to Qondio! Discover the awesome power this network can deliver by going to our About page. Or you could skip straight to the Sign Up form.
|
|