Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Multiple Vendors Tackle DNS Design Flaw » Quick Responses - Teksavvy
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Post a:
Post a:
« DNS Changes affecting SW Firewalls  
AuthorAll Replies


shopkins

join:2008-05-23
Nepean, ON
·TekSavvy Solutions..
·Bell Sympatico

reply to TKJunkMail
Re: Quick Responses - Teksavvy

said by TKJunkMail See Profile :

Better that the problem was avoided all together like the OpenDNS service did. If you used OpenDNS for your DNS servers you never were exposed at all.

More info on this security issue here in the BBR Security forum: »Internet flaw could let hackers take over the Web
True - apparently the potential exploit of the flaw has been known for a while (recall reading a comment that the DNS system has been known to be broken for a while). OpenDNS is a good solution for someone with some knowledge but I am pretty sure that the big ISP's (Bell, Telus & Rogers in Canada) would not pre-configure their service to use someone else's DNS. And 99% of internet users would never even want to fiddle with those setting... unlike those of us here on DSLR that have a higher comfort level with these changes.

Unsure exactly what TekSavvy did to patch their system but I would guess (since they said that they are not on an MS system) that they upgraded their BIND from v8 to v9. But that is pure speculation because I can honestly say that I do not know what that last sentence implies wrt ease of an upgrade


sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
·Optimum Online

said by shopkins See Profile :

True - apparently the potential exploit of the flaw has been known for a while (recall reading a comment that the DNS system has been known to be broken for a while).
Sometimes the nutjobs are 100% right:

»cr.yp.to/djbdns/forgery-cost.txt
-
Forums » Multiple Vendors Tackle DNS Design Flaw« DNS Changes affecting SW Firewalls  


Saturday, 28-Nov 00:42:09 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [121] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [95] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [70] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [64] Verizon CEO: Hulu Will Be Dead Soon
· [61] Thanksgiving Open Thread
· [43] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Leveling to 85 [World of Warcraft]
· So we need a legitimate reason to use a lot of bandwidth? [TekSavvy]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]
· I need a DID Hosting service [VOIP Tech Chat]
· Windows 7 boot manager editing questions [Microsoft Help]
· Comcast Tech Metrics [Comcast Cable TV]
· [Scam] Cruise line mail? [Spam, Scam and Phishbusters]
· Samsung LCD TV No Picture but has Sound [Electronics]
· Backstab vs screws (not which to use) [Home Repair & Improvement]
· [Newsgroups] Newzleech down? [Filesharing Software]