<http://www.gcn.com/cgi-bin/udt/im.display.printable?client.id=gcn&story.id= 46738> http://www.gcn.com/cgi-bin/udt/im.display.printable?client.id=gcn&story.id=4 6738 Darkness in the cloud 07/28/08 By Wyatt Kash If a seismograph were monitoring cybersecurity tremors, it certainly would have spiked earlier this month with the news that a pervasive vulnerability had been discovered that could allow hackers to redirect Internet traffic. <http://www.gcn.com/images/clearpixel.gif> As Government Computer News' William Jackson first reported July 8 (GCN.com Quickfind 1162), a number of vendors and security researchers have been scrambling secretly over the past six months to fix a design flaw in the Internet's Domain Name System. <http://www.gcn.com/images/clearpixel.gif> The DNS is the service that translates the text of a Web site name or an e-mail address and links the labels to their actual numeric IP addresses. <http://www.gcn.com/images/clearpixel.gif> The flaw in the system was discovered by Dan Kaminsky, director of penetration testing at IOActive. <http://www.gcn.com/images/clearpixel.gif> He noticed a weakness in the way random transaction numbers are created and assigned to identify DNS queries. <http://www.gcn.com/images/clearpixel.gif> The flaw makes it possible for attackers to predict certain characteristics of the DNS query and spoof responses from a DNS server. <http://www.gcn.com/images/clearpixel.gif> The result: Someone typing Citibank.com into their browser or e-mailing IRS.gov could be unwittingly sidetracked to a malicious Web site or mail server, or have the DNS cache on their system poisoned. <http://www.gcn.com/images/clearpixel.gif> Details of the vulnerability won't be released until next month's annual Black Hat security conference that will give major DNS vendors a chance to install patches, hopefully before hackers can exploit the flaw. <http://www.gcn.com/images/clearpixel.gif> The coordinated effort to develop a response, and the decision to install patches all at once, are commendable. <http://www.gcn.com/images/clearpixel.gif> But as this incident - and Jackson's report on broader DNS security challenges in this issue - suggest, the Internet operating community is under siege to address a worldwide web of security problems inherent in the Internet's design. <http://www.gcn.com/images/clearpixel.gif> Finding and fixing those flaws is only half the battle. <http://www.gcn.com/images/clearpixel.gif> The inability to deploy patches quickly, correctly and universally leaves the Internet about as secure as our borders with Mexico and Canada. <http://www.gcn.com/images/clearpixel.gif> That surely won't stop the relentless migration of computing to the Internet cloud. <http://www.gcn.com/images/clearpixel.gif> But this month's DNS news is a sobering reminder that inside that cloud lurks a darker cloud of Internet security vulnerabilities that will require a considerable amount of time and effort to manage. [Non-text portions of this message have been removed] ------------------------------------ -------------------------- Want to discuss this topic? Head on over to our discussion list, [EMAIL PROTECTED] -------------------------- Brooks Isoldi, editor [EMAIL PROTECTED] http://www.intellnet.org Post message: [email protected] Subscribe: [EMAIL PROTECTED] Unsubscribe: [EMAIL PROTECTED] *** FAIR USE NOTICE. This message contains copyrighted material whose use has not been specifically authorized by the copyright owner. OSINT, as a part of The Intelligence Network, is making it available without profit to OSINT YahooGroups members who have expressed a prior interest in receiving the included information in their efforts to advance the understanding of intelligence and law enforcement organizations, their activities, methods, techniques, human rights, civil liberties, social justice and other intelligence related issues, for non-profit research and educational purposes only. We believe that this constitutes a 'fair use' of the copyrighted material as provided for in section 107 of the U.S. Copyright Law. If you wish to use this copyrighted material for purposes of your own that go beyond 'fair use,' you must obtain permission from the copyright owner. For more information go to: http://www.law.cornell.edu/uscode/17/107.shtmlYahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/osint/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/osint/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
