The Domain Name System (DNS) translates Internet domain and host names to IP addresses.
10
votes
7answers
783 views
Can a HTTPS connection be compromised because of a rogue DNS server
If I'm visiting (just a desktop pc, client side) a site that has a valid HTTPS cert/connection, that can it be compromised if I'm using [not with free will, so e.g.: I'm "attacked"] a rouge DNS ...
2
votes
0answers
372 views
Hack scenario when a person has a non-superuser shell [closed]
Suppose that there are following three machines in the network:
Machine A:
Microsoft Server 2003 Service Pack 2
FileZilla 0.9.29 beta ftp server (TCP 21)
Mcafee ePolicy server (81), remote desktop ...
15
votes
3answers
911 views
DNS Amplification DDOS attack
During the weekend I made some tests to simulate an DNS Amplification DDOS attack. sending about 90Mb/s traffic I was able to generate about x.x Gb/s amplified traffic which sent our datacenter ...
20
votes
3answers
715 views
What are some risks of purchasing a “used” domain name
If you purchase an existing domain name that was already used by someone else what are the ways in which the domain could have been broken by the previous owner? Are such problems common and are there ...
3
votes
5answers
383 views
Alternatives for DNS resolution
I was told it's a good idea not to use your ISP to resolve DNS, both for privacy issues and because it can be slow. So I wanted to change, but I've read criticism on using OpenDNS (who makes money on ...
6
votes
3answers
1k views
What's involved in taking over someone else's domain name?
I'm asking this for purely academic reasons.
I know that there are domain record lists and whatnot, but I'm trying to understand the exact structure of how DNS works and where someone can potentially ...
4
votes
2answers
681 views
How does DNSSec work? Are there known limitations or issues?
Based on information from this site, DNSSec is needed to protect us from a number of DNS and SSL / TLS hacks, including:
DNS spoofing, especially on wifi or shared medium
Registrars that abuse their ...
1
vote
1answer
284 views
What is a DNS leak?
I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I ...
8
votes
4answers
1k views
Is NTP vulnerable to DNS poisoning or spoofing attacks?
Scenario:
Attacker somehow compromises the DNS lookup for the NTP server used by the victim (a web application)
Victim sends DNS request for e.g. ntp.pool.org, which is responded to by attacker to ...
4
votes
1answer
192 views
Does deliberately wrong information from a DNS server violate standards generally accepted good practices?
For certain host names my DNS gives me a wrong ip address (the ip address of a transparent proxy) for which inverse DNS look up does not give me back the host I originally looked up.
This is related ...
3
votes
2answers
502 views
How does DNS Changer malware detection work?
This malware directs your computer to use DNS servers under control of the badguys. These DNS servers were taken over by the FBI. They were replaced with clean ones, to prevent service disruption, but ...
2
votes
2answers
772 views
How do the root servers get updated with my name server? Is WhoIS information always in sync with the root?
I've never understood what happens behind the scenes when I go to my registrar and enter in my name server's information.
Can someone elaborate on what happens when an update is made, and how it is ...
1
vote
2answers
1k views
DDoS Protection for DNS providers
Zerigo, our DNS provider has reported to have been under heavy DDOS attack in the last 24 hours or so. Considering the distributed nature of DNS, and their architecture consisting of 5 main DNS ...
1
vote
1answer
416 views
How can I tell if a DNSSec zone is protected using NSEC3 (versus NSEC)
This answer describes how DNSSec might permit "Zone walking"... where a bad guy can extract all the DNS records from a DNSSec enabled zone. NSEC3 is an update that prevents this. (See bottom of this ...
0
votes
1answer
224 views
Is using a local DNS cache server more secure than using a DNS server from a router?
Is using a local DNS cache server imore secure than using a DNS server from a router?
