Slashdot Mirror

← Back to Stories (view on slashdot.org)

What Could You Do With a Bogus Root Name Server?

Posted by Soulskill on from the root-root-root-for-the-home-team dept.

Barlaam notes a post from the Renesys Blog which follows up on news they discussed a couple weeks ago about the 'identity theft' of a root name server. To emphasize the issue of safeguarding such a system, they've now posted an explanation of exactly how the situation could be exploited. "It shouldn't be too hard to see that you could end up answering every DNS query from an organization that came to you for an updated list of root name servers. Every one. And you might end up doing this for a very long time, especially if your answers were largely correct. An attack like this would have no resemblance to the YouTube hijack, where the entire planet gets a blank page and it's immediately apparent that something isn't right. Obvious events like this will continue to occur, and we'll continue to resolve them relatively quickly. But as this incident demonstrates, DNS hijacks are far less obvious and potentially far more harmful."

8 of 120 comments (clear)

  1. Its simple... by Indes · · Score: 5, Funny

    .. do what we do every night.. try to take over the world!!

    (Seriously, Imagine borrowing every bank's front page in North America .... You could be cashing in big time..... )

    1. Re:Its simple... by Anonymous Coward · · Score: 5, Funny

      I would reroute all of 4chan's traffic to fbi.gov

  2. easy by circletimessquare · · Score: 5, Funny

    i would redirect http://slashdot.org/ to http:///..org

    yeah how funny is it now that the joke is on the other foot biatches!

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  3. Simple recipe by canuck57 · · Score: 5, Insightful

    If you have lost DNS, game is over, you lose. A recipe if your system hits a compromised root server.

    • You open up email to read todays email. You PC looks up pop3.yourisp.com.
    • DNS returns the IP of evil PC to your PC which will connect to it.
    • Next, evil PC will emulate your login, IP address and record the password. Could even be a /. password.
    • Evil pc now has the info needed to read/retrieve your email.

    Better yet, people often use similar IDs and passwords into other systems. Evil hackers can often use the email to figure out which banks, credit, stock brokers and on line e-tailers you use. Maybe change the home address of your Amazon account and order stuff, if the e-tailor isn't right on top of it.

    Root servers need to be secure, end of story.

    I should note the above method would also work with SSL, be creative, it only has to be a legitimate cert with a root chain.

  4. Re:Hmmm... by tomhudson · · Score: 5, Funny

    You could send all Obama's web traffic to Clinton's web site ... oops, already been done!

  5. That's easy by bconway · · Score: 5, Informative

    World-wide Rickroll?

    --
    Interested in open source engine management for your Subaru?
  6. Obvious first move by PPH · · Score: 5, Funny

    Goatse.cx lives!

    --
    Have gnu, will travel.
  7. Re:they tried that by jonaskoelker · · Score: 5, Funny

    Ooh, I have an idea. We could request only the parts of the file we actually need. Then we could probably do it in real time; the load on the master server will possible get too heavy, though. I know, our ISPs could cache local copies, and we could split the file into hierarchical chunks.

    Hey, I oughta' write up an RFC on this ;)