Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] Re DNS spoofing issue discussion |
|---|---|
| Date: | Thu, 31 Jul 2008 21:17:00 -0600 |
The BGP fixes were devised after the last meltdown, but question again is whether they are installed. If DNSSEC had been installed, Kaminsky's issue would not exist.
That's probably not the case. It would only alter the scope of attack to include encryption and not simply port+xid. Since UDP is stateless one could could have theoretically kicked off some semblance of brute force attack against the key used for encryption. For algorithms that use bits larger than would be feasible for brute force attacks, the latest SNMPv3 vulnerability comes to mind, as does Tim Newsham's attack on WEP. In other words, there are always options. The attack wouldn't have gone away. As they say, there are 1,000,000 ways to get to Detroit. D _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Full-disclosure] Re DNS spoofing issue discussion, Mary and Glenn Everhart |
|---|---|
| Previous by Thread: | [Full-disclosure] Re DNS spoofing issue discussion, Mary and Glenn Everhart |
| Indexes: | [Date] [Thread] [Top] [All Lists] |