republican-creole
Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Anti-DNS pinning & DNS-rebinding attacks!
Search Topic:
 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
Belarc Advisor / Missing Security Updates »
« Storm worm seems to be fading away  
AuthorAll Replies

bobince

join:2002-04-19
DE

reply to jansson_mark
Re: Anti-DNS pinning & DNS-rebinding attacks!

DNS pinning is a hack around the real problem - it is no surprise it doesn't really work. Even with 'properly' pinned DNS you can still have longer-term attacks like cookie sniffing.

This is why when running a site with accounts or other sensitive interaction, you must tie it to a virtual host (ensuring that the browser has set the Host: header to the right domain).

Attacks like this are well-known.
to forum · permalink · · 2007-08-03 22:15:55 · Reply to this
Forums » Up and Running » Security » SecurityBelarc Advisor / Missing Security Updates »
« Storm worm seems to be fading away  

Saturday, 28-Nov 16:37:47 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [77] TiVo Sees Record Customer Losses
· [70] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [62] Thanksgiving Open Thread
· [62] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· Using AirMax to provide triple play services? [Wireless Service Providers]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Gizmo5 has added a Google Voice section in its members area. [VOIP Tech Chat]
· Windows 7 - Dell ALPS Touchpad driver [Microsoft Help]
· What is the spell hit cap for a lvl 80 full arcane spec mage [World of Warcraft]
· Why would I want an e reader? [General Questions]
· Blue Ray: Samsung BD-P3600 or LG BD390 [Audio/Video Chat]
· [WIN7] Outlook express under Windows 7? [Microsoft Help]