Re: Quick Responses - Teksavvy in http://www.dslreports.com/forum/r20763000 en Tue, 09 Feb 2010 23:55:20 EDT Tue, 09 Feb 2010 23:55:20 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20768126 sporkme :
said by shopkins See Profile :

True - apparently the potential exploit of the flaw has been known for a while (recall reading a comment that the DNS system has been known to be broken for a while).
Sometimes the nutjobs are 100% right:

»cr.yp.to/djbdns/forgery-cost.txt]]> http://www.dslreports.com/forum/remark,20768126 Thu, 10 Jul 2008 02:11:21 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20766052 NetAdmin :
said by dvd536 See Profile :

is there a PoC somewhere you can test your providers servers at?
There is not one listed in the CERT advisories and I haven't seen anything on NANOG. The CERT advisory does give a list of affected products at the bottom of the notice:

»www.kb.cert.org/vuls/id/800113
--
---
Over ten plus years of carrying The Clue Bat...]]> http://www.dslreports.com/forum/remark,20766052 Wed, 09 Jul 2008 18:10:28 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20766018 dvd536 : is there a PoC somewhere you can test your providers servers at?]]> http://www.dslreports.com/forum/remark,20766018 Wed, 09 Jul 2008 18:03:45 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20764860 NetAdmin :
said by OverModded See Profile :

Better that the problem was avoided all together like the OpenDNS service did.
That's because OpenDNS's systems uses a non-standard, in-house product for their DNS services.
--
---
Over ten plus years of carrying The Clue Bat...]]> http://www.dslreports.com/forum/remark,20764860 Wed, 09 Jul 2008 14:41:47 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20763612 en102 : DSL Extreme has been typically quick to respond.. however, they also did attempt to install Zone finder once.
--
Canada = Hollywood North]]> http://www.dslreports.com/forum/remark,20763612 Wed, 09 Jul 2008 11:02:39 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20763323 supergirl :
said by shopkins See Profile :

Proof as to why Teksavvy is a great ISP - we posted in their forum on DSLR yesterday and by midnight they had applied the patches. That is service !
They are.

"Gee, when I went to Vatican.org, I wound up at girlsgonewild.com. Weird! Girls didn't do that stuff at my college." -Pope Benedict
--
Saving the world keeps me busy. However, I find Earth very primitive from my home planet of Krypton.
-Supergirl]]> http://www.dslreports.com/forum/remark,20763323 Wed, 09 Jul 2008 10:06:30 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20763000 Rob :
said by OverModded See Profile :

said by shopkins See Profile :

Proof as to why Teksavvy is a great ISP - we posted in their forum on DSLR yesterday and by midnight they had applied the patches. That is service !
Better that the problem was avoided all together like the OpenDNS service did. If you used OpenDNS for your DNS servers you never were exposed at all.

More info on this security issue here in the BBR Security forum: »Internet flaw could let hackers take over the Web
Not to take credit away from OpenDNS, but shopkins is referring to an ISP.

When was the last time you saw an ISP be so proactive and respond so quickly to these type of issues? I know I haven't. It's good to see TekSavvy be so quick to respond and update their systems - high five to them.]]> http://www.dslreports.com/forum/remark,20763000 Wed, 09 Jul 2008 08:48:49 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20762970 shopkins :
said by OverModded See Profile :

Better that the problem was avoided all together like the OpenDNS service did. If you used OpenDNS for your DNS servers you never were exposed at all.

More info on this security issue here in the BBR Security forum: »Internet flaw could let hackers take over the Web
True - apparently the potential exploit of the flaw has been known for a while (recall reading a comment that the DNS system has been known to be broken for a while). OpenDNS is a good solution for someone with some knowledge but I am pretty sure that the big ISP's (Bell, Telus & Rogers in Canada) would not pre-configure their service to use someone else's DNS. And 99% of internet users would never even want to fiddle with those setting... unlike those of us here on DSLR that have a higher comfort level with these changes.

Unsure exactly what TekSavvy did to patch their system but I would guess (since they said that they are not on an MS system) that they upgraded their BIND from v8 to v9. But that is pure speculation because I can honestly say that I do not know what that last sentence implies wrt ease of an upgrade ;)]]> http://www.dslreports.com/forum/remark,20762970 Wed, 09 Jul 2008 08:41:53 EDT Re: Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20762945 OverModded :
said by shopkins See Profile :

Proof as to why Teksavvy is a great ISP - we posted in their forum on DSLR yesterday and by midnight they had applied the patches. That is service !
Better that the problem was avoided all together like the OpenDNS service did. If you used OpenDNS for your DNS servers you never were exposed at all.

More info on this security issue here in the BBR Security forum: »Internet flaw could let hackers take over the Web
--
My BLOG .. .. Internet News .. .. My Web Page]]> http://www.dslreports.com/forum/remark,20762945 Wed, 09 Jul 2008 08:34:22 EDT Quick Responses - Teksavvy http://www.dslreports.com/forum/remark,20762935 shopkins : Proof as to why Teksavvy is a great ISP - we posted in their forum on DSLR yesterday and by midnight they had applied the patches. That is service !]]> http://www.dslreports.com/forum/remark,20762935 Wed, 09 Jul 2008 08:30:12 EDT