Slashdot Mirror

← Back to Stories (view on slashdot.org)

Perils of DNS at RIPE-52

Posted by ryuzaki0 on from the don't-ping-me-there dept.

An anonymous reader wrote in to say that " The RIPE meeting got off to a good start yesterday (for those of you outside Europe, RIPE is the European counterpart to ARIN). Emin Sirer from Cornell presented his study of DNS vulnerabilities. The results are staggering: the average name depends on four dozen nameservers, 30% of domains are vulnerable to domain hijacks by simple script kiddies, 85% of domains are vulnerable to hijacks by attackers that can DoS two hosts. The lesson: DNS must be managed by professionals, and the pros have to pay attention to the DNS delegation graph when they set up name servers."

3 of 71 comments (clear)

  1. Re:BIND false versions by cheese-cube · · Score: 2, Funny

    Oh touché RedHat Rocky, touché.

  2. The lesson by metamatic · · Score: 2, Funny
    "The lesson: DNS must be managed by professionals..."

    That's why I go with Network Solutions!

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  3. Re:Ripe and ARIN by raddan · · Score: 2, Funny

    Would you like a definition for "DNS" while we're at it? How about "computer"?