[91211] in Cypherpunks
Re: Kashpureff stuff online
daemon@ATHENA.MIT.EDU (Ng Pheng Siong)
Mon Dec 1 22:19:48 1997
From: "Ng Pheng Siong" <ngpsstoi@pacific.net.sg>
To: Adam Back <aba@dcs.ex.ac.uk>
Date: Tue, 2 Dec 1997 10:12:09 -0800
CC: lacc@suburbia.net, cypherpunks@cyberpass.net
In-reply-to: <199712011205.MAA00816@server.test.net>
Reply-To: "Ng Pheng Siong" <ngpsstoi@pacific.net.sg>
> So what did Kashpureff do? Who is Kashpureff? Is he the guy at
> Alternic who did some advanced DNS hacking to get Internic DNS root to
> point to him? Or something else?
Yup, that's him.
IIRC, he exploited Bind's failure to check input in certain cases:
He set his DNS server to be the delegating authority for .com,
say; then sent a recursive query to his victim's DNS server to get
the victim to query _his_ server; his server mixed the bogus info
into its response to the query, thus poisoning the victim's DNS.
Cypherpunks write code.
Crackerpunks read code.
Ng Pheng Siong
<ngpsstoi@pacific.net.sg>
