Translate to German Translate to Spanish Translate to French Translate to Italian Translate to Portuguese Translate to Japanese Translate to Korean Translate to Russian Translate to Chinese

Security researcher Dan Kaminsky identified a problem in a large number of DNS servers (the thing that lets you type in website names instead of IP addresses) that permits website impersonation (spoofing). This is a very very bad thing. You can check if your Internet Service Provider’s (ISP) DNS servers are vulnerable by using a simple one click web tool called the DNS Checker provided by Dan on his personal blog: DoxPara Research. You can find it in the right sidebar of his blog page along with a description of what to look for in the simple report it produces.

If your ISP has not yet patched their DNS server, some people, including my friend Preston Gralla, are recommending using the free OpenDNS service’s DNS servers. Note, however, that you will run into issues if you take your notebook PC or Mac out of your home and into an environment that is either an Intranet with an internal DNS server (your office network, for example) or a network proxy front-end like you might find in a Hotel network or at an Internet coffee shop.

For more information, listen to episode 155 of the Security Now podcast titled Bailiwicked Domain Attack and Preston Gralla’s article Protect yourself against poison DNS attacks in 30 seconds.

Tags: hdtv, game, wi-fi, camera

Comments are closed.



Site Navigation
Close
E-mail It