DNS Fool

ISC has issued a statement about the performance issues that many BIND administrators are seeing.
Evidently, the new security updates to BIND are causing problems in high traffic recursive environments (more than 10k queries/sec).  Specifically, the issue exists with BIND 9.5.0-P1.  Their statement recommends that systems affected by this be immediately downgraded to BIND 9.4.2-P1, which [...]

Well that didn’t take long.
Mere days after the details of the recent DNS attack were made public there is already an exploit out in the wild.  HD Moore and I)ruid have added an exploit to the Metasploit project, a popular penetration testing framework.  These are the good guys, but the bad guys have the same [...]

It was just 14 days ago that Dan Kaminsky announced that he had found a critical security flaw in DNS, but that the details would be kept secret until he took the stage at Black Hat on August 6th.  This 29 day gap between the announcement of the discovery and the detailed description of the [...]

Dan Kaminsky has done it again.
Kaminsky found a security vulnerability in the design of DNS itself.  Yea, let that sink in.  The problem was in the DNS protocol, not just certain implementations.  That means BIND is affected (of course), Microsoft DNS is affected, and so on.   A full list of affected systems is available in [...]