[8329] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Netscape "What's Related"

daemon@ATHENA.MIT.EDU (Kragen)
Wed Oct 28 15:51:37 1998

Date: 	Wed, 28 Oct 1998 07:09:38 -0500
Reply-To: Kragen <kragen@POBOX.COM>
From: Kragen <kragen@POBOX.COM>
X-To:         pedward@WEBCOM.COM
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <199810232249.PAA19329@eris.webcom.com>

On Fri, 23 Oct 1998 pedward@WEBCOM.COM wrote:
> Can anyone say DNS cache poisoning???

It should be pointed out that DNS cache poisoning would interact badly
with packet-filters --- if you have filtered out the *real* IP
addresses of www-rl.netscape.com, but someone poisons your cache, your
users will be able to reach the fake www-rl.

Exciting stuff.

Kragen

--
<kragen@pobox.com>       Kragen Sitaker     <http://www.pobox.com/~kragen/>
A well designed system must take people into account.  . . .  It's hard to
build a system that provides strong authentication on top of systems that
can be penetrated by knowing someone's mother's maiden name.  -- Schneier

home help back first fref pref prev next nref lref last post