It appears matasano posted an explanation of Dan Kaminsky's DNS issue to their blog today, but looks like it may have been yanked back down. My google reader account nabbed it via the RSS feed while it was up.
It looks like maybe they had this typed up, ready to hit "post" as soon as someone else figured it out? They had advance knowledge of the issue via conference calls with Kaminsky. Halvar Flake posted some speculation on what the issue was, but his speculation was not the full issue; only a re-hash of previously known issues. In any event, Halvar's ideas were close, but incomplete. Matasano filled in the missing details, possibly by accident. :) http://blog.invisibledenizen.org/2008/07/kaminskys-dns-issue-accidentally-leaked.html -N
_______________________________________________ Framework-Hackers mailing list Framework-Hackers@spool.metasploit.com http://spool.metasploit.com/mailman/listinfo/framework-hackers
