ISP compromises security

ScratchMonkey · 04-20-2008, 07:10 PM

I recall Network Solutions getting in hot water because of the addition of wildcard DNS entries redirecting to NSI ad pages. Now it seems that such redirection practiced by many ISPs may result in compromising your security:

http://www.theregister.co.uk/2008/04...mo_at_toorcon/

Quote:

Comcast, Verizon and at least 70 other internet service providers are putting their customers at serious risk in their quest to make money from mistyped web addresses, security researcher Dan Kaminsky says.

Speaking at the ToorCon security conference in Seattle, Kaminsky demonstrated an exploit class he dubbed PiTMA, short for provider-in-the-middle attacks. A variation of man-in-the-middle attacks, it stole authentication cookies and injected arbitrary content into trusted web pages by exploiting weaknesses in an ad server Earthlink used when returning results for non-existent addresses.

**=DdogG=** · 04-20-2008, 09:35 PM

this is a DNS rooted issue though, right? i.e. - if you set your DNS to dynamic.

208.67.222.222 and 208.67.220.220 ftw

I set it in every router I configure and allow computers to stay dynamic.

ScratchMonkey · 04-20-2008, 10:18 PM

Or you could run TreeWalk:

http://ntcanuck.com/

04-20-2008, 09:35 PM	#2 (permalink)
=DdogG= Join Date: Nov 2003 Location: Ennis, TX Age: 31 Posts: 1,583	Re: ISP compromises security this is a DNS rooted issue though, right? i.e. - if you set your DNS to dynamic. 208.67.222.222 and 208.67.220.220 ftw I set it in every router I configure and allow computers to stay dynamic. __________________ Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. -Albert Einstein The two most common elements in the universe are Hydrogen and stupidity. -Harlan Ellison If all else fails: "rm -rf /"

04-20-2008, 10:18 PM	#3 (permalink)
ScratchMonkey Join Date: Aug 2005 Location: San Pablo, California Posts: 3,834	Re: ISP compromises security Or you could run TreeWalk: http://ntcanuck.com/ __________________ Sig

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Sponsored links

Sponsored links