Special Interest > Open Source Tech Gulch

DNS Servers taken offline. If you......

(1/3) > >>

Rarick:
There was a cluster of DNS servers taken by the govs' a while back from a piracy/ malware ring (yeah, yeah focus on practical here).  The DOJ was keeping them running for whatever reason, but due to "Budget Cuts" they have been turned off.  That was done on the 9th.  If your computer is having some random DNS errors you may have had the DNS virus that was diverting your computer to the bogus servers that were shutdown.  You could search a solution or go to Malwarebytes.com and get some software to both fix the problem, and probably the best antivirus/ antinalware shareware on the market to keep tyhe bugs away.

I use this plus my copy of kaspersky, and a scanning copy of Nod32, to scan with and it still finds things that the others don't.

khyeron:
This just astounds me.  A DNS listing is nothing but a text file, similar, or identical (Depending on application in question) to a .csv file (comma separated values.)  To this day, almost all the nastiest attacks depend on poorly validated input data.  Take cross site scripting and SQL injection attacks.  Deadly to servers and yet, to this day, many high grade commercial servers permit unfiltered input into their server from various poorly written web forms.  Execution of local data is still permitted by many kernels that shouldn't, etc.

Hardened kernels are available for most operating systems, linux, in the very least has several flavors of app and kernel protection (grsec, apparmor, selinux, etc) and most people aren't even aware of them.  The geeks are, but everyone else considers security to be something you buy a product for, and then go to sleep on your laurels.

As for the windows side, keep that stuff updated at all times, and more importantly, run a backup DNS server if you can afford the juice to keep it up.  (And keep a secured copy of your /etc/hosts file in which you should keep the resolution lines for all your friends' sites and such, and have your DNS resolver check against it to see if your DNS server has come under some form of attack... or not.)

What is more amazing, is that to this day there are still buggy pieces of software in crucial points (DNS for example) which have had decades of unchanged existence and should have been debugged to the point of being perfect.  Dubbyah Tee Eff mate?

ZooT_aLLures:
a working DNS system is trivial to build.......

Rarick:
Yep, someone got paid to keep those up and running.........and laughed all the way to the bank.........

ZooT_aLLures:
Yeah, but the real question is..........what did folks learn, if anything, from it?
And more importantly, what are folks going to do, if anything, about it?

Navigation

[0] Message Index

[#] Next page