Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hos

from [Stan Bubrouski] Network Security [Permanent Link]
Subject: Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup
Date: Thu, 13 Apr 2006 14:59:18 -0400 
On 4/13/06, Brandon S. Allbery KF8NH <allbery@ece.cmu.edu> wrote:


On Apr 13, 2006, at 1:29 , Dave Korn wrote:


  Hey, guess what I just found out:  Microsoft have deliberately
sabotaged
their DNS client's hosts table lookup functionality.


I thought this was part of avoiding malware attempts to block Windows
Update.


How bypassing blocking of go.microsoft.com affects windowsupdate I
don't know.  Been a while since I looked at windows update at all, but
doesn't it download files from mirrors anyways?  And even if it didn't
are the files actually downloaded from go.microsoft.com?  Either way
it appears Dave is right, which makes me wonder if there isn't another
greater purpose aside form WMP updates.  Like assured tracking of
users for other nefarious and monopolistic purposes.

Best Regards,
sb




--
brandon s. allbery     [linux,solaris,freebsd,perl]
allbery@kf8nh.com
system administrator  [openafs,heimdal,too many hats]
allbery@ece.cmu.edu
electrical and computer engineering, carnegie mellon university
KF8NH



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  QuickBlogger v1.4 Cross-Site Scripting, botan
Next by Date:  [Full-disclosure] Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup, Dave Korn
Previous by Thread:  Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup, Brandon S. Allbery KF8NH
Next by Thread:  [Full-disclosure] Re: Microsoft DNS resolver: deliberately sabotagedhosts-file lookup, Dave Korn
Indexes:  [Date] [Thread] [Top] [All Lists]