|
CircleID is a community hub for the Internet Infrastructure |
Learn More Login | Sign Up | About CircleID |
Home / news68,000 Open Recursive DNS Servers Behaving Maliciously; “This is a crime with few witnesses”
Dec 11, 2007 9:51 AM PST
| Comments: 2
Reported today: “Researchers at Google Inc. and the Georgia Institute of Technology are studying a virtually undetectable form of attack that quietly controls where victims go on the Internet.” The Georgia Tech and Google researchers estimate that as many as 0.4%, or 68,000, open-recursive DNS servers are behaving maliciously, returning false answers to DNS queries. Unlike other DNS servers, open-recursive systems will answer all DNS lookup requests from any computer on the Internet, a feature that makes them particularly useful for hackers. They also estimate that another 2% of them provide questionable results. Read Full Story at PC World Source Credit: This has been a featured post from CircleID Reporter. To learn more, visit this participant's full profile page.
More Under: Cyberattack, DNS, Security 
Stay Updated: To receive weekly email updates from CircleID sign up here or see the list of RSS feeds and mobile version of this site. Comments
#2
| By David A. Ulevitch
| Dec 12, 07
@07:38 am PST
Yes, this is a poorly written report. I think the data is probably good, but it’s obscured by inaccuracies in the write-up which I told the authors about before it published. None of the significant errors I pointed out were corrected. Open recursive nameservers continue to NOT be a problem in this domain and people running mis-configured nameservers is. The fact that they are open may be related to the misconfiguration, but it is not a problem in and of itself. We’re open, but not susceptible to these attacks. |
Start Your AdAds
Sponsored LinksMarketplaceIndustry UpdatesMay 15, 2008 11:28 AM PSTOverstock.com Chooses NeuStar’s UltraDNS for Managed DNS Service
By NeuStar |
Views: 67
May 14, 2008 11:37 AM PSTInside Your Domain Portfolio
By Sedo |
Views: 110
May 14, 2008 11:32 AM PSTSedo at Domain Roundtable 2008, San Francisco
By Sedo |
Views: 100
May 14, 2008 11:27 AM PSTSedo’s New Brokerage Application
By Sedo |
Views: 135
May 13, 2008 3:00 PM PSTICANN Unanimously Approves RegistryPro Proposal to Expand the .Pro TLD
By Hostway |
Views: 247
May 06, 2008 10:16 AM PSTOversee.net’s DomainSponsor Presents 3rd Annual DOMAINfest Global
By DomainSponsor |
Views: 464
May 02, 2008 10:21 AM PST.NL Auction Sneak Peak!
By Sedo |
Views: 551
Apr 30, 2008 10:01 AM PSTdotMobi Requests Proposals for find.mobi
By dotMobi |
Views: 755
Apr 28, 2008 2:08 PM PSTdotMobi Offers Prime Selection of Generic Domain Names to Spur Mobile Web Growth
By dotMobi |
Views: 984
Apr 28, 2008 11:41 AM PSTSedo’s Better-than-Ever Brokerage Service!
By Sedo |
Views: 827
Start Your AdAds |
NeuStar, Inc. has announced that Overstock.com, a popular online closeout retailer, has chosen NeuStar's UltraDNS Managed DNS Service to provide Overstock.com with a global DNS infrastructure that significantly enhances end-user experience and operational security -- and protects revenue in the highly competitive online retail market. 
We've seen a lot of changes in the domain industry over the last year, some positive, some challenging. Whether you're an old pro or just beginning, this spring is a great time to take inventory and make sure your domain business is on the right track for success this year and beyond. 
RegistryPro, the exclusive operator of the .Pro top level domain (TLD), has 
The third annual DOMAINfest Global, the premier conference and networking event for the domain name industry, will be held at the Renaissance Hollywood Hotel in Hollywood, California from January 28-30, 2009. Event registration will open later this year. 
dotMobi today announced that is accepting proposals for find.mobi, a consumer-facing mobile search tool; find.mobi was created by dotMobi's research and development team to demonstrate an operational mobile search engine that made the most of the mobile web and needs of on-the-go users. |
Sitemap: Overview | Home | Desktop | RSS | Email | Mobile About CircleID: Overview | Media Coverage | CircleID Blog | Advertise | Contact Codes of Conduct | Privacy Policy | Terms of Use Copyright © 2002-2008 CircleID & Iomemo, Inc. All rights reserved unless where otherwise noted. |
 DNS Powered by NeuStar |
 Managed Hosting by Hostway |
The attack discussed in the article involves the use of malware to modify the resolver settings on the (Windows-based) victim system so that it queries a malicious DNS server. This is a more advanced form of the old trick where the “hosts” file is modified directly, and not an attack on DNS infrastructure or protocols.