Barlaam writes "It shouldn't be too hard to see that you could end up answering every DNS query from an organization that came to you for an updated list of root name servers. Every one. And you might end up doing this for a very long time, especially if your answers were largely correct. An attack like this would have no resemblance to the YouTube hijack, where the entire planet gets a blank page and it's immediately apparent that something isn't right. Obvious events like this will continue to occur, and we'll continue to resolve them relatively quickly. But as this incident demonstrates, DNS hijacks are far less obvious and potentially far more harmful." Link to Original Source
This discussion was created for logged-in users only, but now has been archived.
No new comments can be posted.
What could you do if you pwn3d a root server? 0 Comments More Login /
Get More Comments