DNS Fool

Bite my Bytes has collected a list of free DNS reporting utilities.

ICANN and IANA were the victims of a DNS redirection attack this week.
Turkish crackers were able to take over the icann.com, icann.net, iana.com and iana-servers.com and redirect them to a hosting account at atspace.com.
Zone-H is hosting a mirror of the defacement.

Yesterday ICANN moved forward with a proposal to expand the DNS namespace by allowing private entities to stake out new top level domains.  This is probably good news in the long run, but it may be the source of confusion for some in the immediate future.  Is my banking account at citibank.com or www.citi ?
As [...]

ICANN is set to vote on whether or not to open up the top-level namespace to individuals and companies:
“It’s a massive increase in the geography of the real estate of the internet.”
For example, the new policy would allow NBC to purchase the .nbc top-level domain and use it for things such as seinfeld.nbc, friends.nbc, and [...]

Interesting to here Verisign say this:
In the case of DNSSec, the security threats it was designed to address have been mitigated by changes to DNS software or in other ways, so the urgency is not there,” Silva explained.

Another DNS hijacking, this time the victim is Photobucket. Photobucket.com is registered with Register.com, and name service is provided by UltraDNS.
Register.com is investigating the problem

The Royal Pingdom blog has put together a list of “14 useful and FREE online tools for DNS and network troubleshooting“.
My favorites are IntoDNS and CheckDNS, since they provide a lot of information in their reports.

IronGeek demonstrates the dns_spoof plugin for Ettercap and shows how easily domain names can be redirected by an attacker on your network.
In this video I’ll show how to use the Ettercap plugin dns_spoof to set up DNS spoofing on the local area network. This Ettercap plugin is only one potential way to pull off DNS [...]

Did anyone notice the NSA’s DNS outage last month?

A new recursive and caching DNS server named Unbound has been released by NLnet Labs, VeriSign, Inc., Nominet, and Kirei. According to the press release:
Unbound is a validating, recursive, and caching DNS server designed as a high-performance alternative for BIND (Berkeley Internet Name Domain). Unbound will be supported by NLnet [...]