Comments on: DNS Vulnerability Survives Scrutiny of Peer Review http://www.veracode.com/blog/2008/07/dns-vulnerability-survives-scrutiny-of-peer-review/ Application security testing, analysis, and metrics Tue, 15 May 2012 22:16:53 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Mathew Gregson http://www.veracode.com/blog/2008/07/dns-vulnerability-survives-scrutiny-of-peer-review/comment-page-1/#comment-1452 Mathew Gregson Thu, 10 Jul 2008 04:47:20 +0000 http://www.veracode.com/blog/?p=119#comment-1452 Hype is rarely warranted. It just makes the wrong people panic and carry on like headless chooks. In any case, I've patched my own server today as I was too tired when I learnt about this last night. Though I wonder how useful my effort was, as my ISP enforces an http proxy and they haven't yet patched their own DNS (and knowing them, they probably won't know about the issue until Christmas and will not do anything about it in any case - tpg.com.au if you're interested). I've only jumped to it immediately, because I have had idiots try to exploit my bind installation from time to time. Hype is rarely warranted. It just makes the wrong people panic and carry on like headless chooks.

In any case, I’ve patched my own server today as I was too tired when I learnt about this last night. Though I wonder how useful my effort was, as my ISP enforces an http proxy and they haven’t yet patched their own DNS (and knowing them, they probably won’t know about the issue until Christmas and will not do anything about it in any case – tpg.com.au if you’re interested).

I’ve only jumped to it immediately, because I have had idiots try to exploit my bind installation from time to time.

]]> By: Dan Kaminsky Disqualified from Most Overhyped Bug Pwnie « …And you will know me by the trail of bits http://www.veracode.com/blog/2008/07/dns-vulnerability-survives-scrutiny-of-peer-review/comment-page-1/#comment-1439 Dan Kaminsky Disqualified from Most Overhyped Bug Pwnie « …And you will know me by the trail of bits Thu, 10 Jul 2008 04:03:44 +0000 http://www.veracode.com/blog/?p=119#comment-1439 [...] the hype was warranted.  I was flattered, however, when Rich Mogull called me and invited onto a conference call with Dan Kaminsky and the other Doubting Thomas (Ptacek, that is).  Dan explained the full details [...] [...] the hype was warranted.  I was flattered, however, when Rich Mogull called me and invited onto a conference call with Dan Kaminsky and the other Doubting Thomas (Ptacek, that is).  Dan explained the full details [...]

]]> By: Thomas Ptacek http://www.veracode.com/blog/2008/07/dns-vulnerability-survives-scrutiny-of-peer-review/comment-page-1/#comment-1396 Thomas Ptacek Thu, 10 Jul 2008 01:39:19 +0000 http://www.veracode.com/blog/?p=119#comment-1396 Suckers. Next time, be wrong early like me! Suckers. Next time, be wrong early like me!

]]>