[128632] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Kaminsky finds DNS exploit

daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Jul 22 10:09:26 2008

To: cryptography@metzdowd.com
From: "Perry E. Metzger" <perry@piermont.com>
Date: Tue, 22 Jul 2008 10:09:00 -0400
In-Reply-To: <4874523A.5090402@pobox.com> (Udhay Shankar N.'s message of "Wed\, 09 Jul 2008 11\:22\:58 +0530")


Udhay Shankar N <udhay@pobox.com> writes:
> Kaminsky Breaks DNS
[...]
> Unlike other researchers who give up the gory details, Kaminsky took a
> wiser path by smiling and nodding. He=E2=80=99ll give up the goods at Bla=
ck
> Hat in August. That should give folks enough time to patch their
> systems.

The details of the exploit (or at least an exploit just as bad) have
now leaked. I'm not surprised -- any secret known by more than one
person doesn't remain secret for long, and what one person can figure
out can be figured out by others.

Still, it was good that we had a couple extra weeks to patch.

Perry

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post