DNS flaw is much worse than first thought

IN A TALK at the Black Hat conference in Las Vega on Wednesday, security researcher Dan Kaminsky said that the systemic Internet Domain Name System (DNS) vulnerability he discovered some months ago is much more dangerous than most have appreciated.

"Every network is at risk," Kaminsky told the overflow crowd gathered for his presentation. "That's what this flaw has shown." He said that what little he'd initially revealed about the DNS vulnerability, and the later leak of more details about it, was only the tip of an iceberg that he called the worst Internet security risk to surface since 1997.

The initial worry has been the danger that hackers could exploit the DNS cache poisoning vulnerability that Kaminsky found to hijack web browsers and route unsuspecting wibblers to malicious websites harboring phishing or malware attacks.

To read the whole read, see here. This is to follow on from this news post.

-Ken