oss-security - Re: DNS vulnerability: other relevant software

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Sun, 13 Jul 2008 20:51:10 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: DNS vulnerability: other relevant software

* Bernhard R. Link:

> if there are many queries, I think attacking only gets harder, because
> guessing the order of requests gets harder to predict, adding more
> variables.

Right.

> I'm also looking forward to this. I was under the impression that is was
> common knowledg that dns is simply insecure, everyone trusting on it is
> insane, and security issues meaning it is easier to hijack than it
> should be (like dns servers accepting answers for things they never
> asked for and things like that).

Online banking security mainly relies on the integrity of DNS and
routing.  (Bert's DNS forgery resilience draft actually covers this, and
I think he's right.)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.