[4304] in Privacy_Forum
[ PRIVACY Forum ] Subverting BIND's SRTT Algorithm: Derandomizing NS
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Wed Aug 14 13:03:10 2013
Date: Wed, 14 Aug 2013 09:53:12 -0700
To: privacy-list@vortex.com
Message-ID: <20130814165312.GA17656@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Subverting BIND's SRTT Algorithm: Derandomizing NS Selection
http://j.mp/13Zbwir (Security Intelligence)
"Today I presented at USENIX WOOT '13 a new vulnerability that we had
found in BIND, the most popular DNS server. Exploiting this
vulnerability allows to reduce the amount of effort required for an
off-path (blind) DNS cache poisoning attack. The whitepaper is now
publicly available, together with the presentation and ISC's (the
organization behind BIND) notification. In this blog post I will
describe the vulnerability in a less formal fashion."
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
