News

• NeuStar offers temporary fix for Kaminsky bug

  NeuStar has developed a proprietary system for thwarting Web traffic hijacking attacks that the company plans to market until standard DNS Security (DNSSEC) mechanisms are deployed widely across the Internet.

• New DNS bug and fix announced

  Domain name registries are scrambling to patch a newly discovered bug in popular open source DNS software that could be exploited for denial-of-service attacks.

• Researchers exploit Conficker flaw to find infected PCs

  Just days before the Conficker worm is set to contact its controllers for new instructions, security researchers have discovered a flaw in the worm that makes it much easier for users to detect infected PCs.

• Permanent fix needed for DNS security issues, Kaminsky warns

  Researcher who found cache-poisoning flaw says time has come for DNSSEC technology

• Security researcher Kaminsky pushes DNS patching

  Dan Kaminsky, who for years was ambivalent about securing DNS, has become an ardent supporter of DNS Security Extensions.

• IETF: Should we ignore the Kaminsky bug?

  The Internet engineering community is grappling with what to do about a serious flaw in the DNS discovered mid-year, and the ongoing debate brings to mind a famous quotation from Voltaire: "The perfect is the enemy of the good."

• Survey: 1 in 4 DNS servers still vulnerable to Kaminsky flaw

  Despite industry efforts to lock down DNS servers, one in four remain vulnerable to cache poisoning due to the well-documented Kaminsky flaw identified earlier this year and another 40 percent could be considered a danger to themselves and others, recent research shows.