Comments on: Internet's 'white pages' allow data attacks

The core domain name service can let attackers communicate across supposedly secure corporate perimeters.

[OneWithTech]

This is only the beginning!

This exploit is one of many that you will be seeing in the next year. We, as web developers, are only beginning to learn the inner-most workings of the world wide web. The javascript injection exploit as posted by Secunia Secure (http://secunia.com/advisories/11978/) had been around for a long time but only exploited just recently. With that said, I hope those that are in the business of twisting technology to find the flaws, continue to break this digital world. I know I will!

[bradleyland]

But why?

Have you ever heard the saying, "locks are for honest people." In the "real" world, security relies - to a certain extent - upon the implicit honesty of the individual. What's stopping you from breaking into the store you pass on the street? A piece of glass? Glass is exploitable you might say. The thing keeping you from breaking into the store is your implicit honesty, and the realization that this is someone else's property. Somehow this gets lost on the web. I just don't get it.

[ttul]

DNS can be exploited for email too

One use of DNS that should no go without mention is the routing of email. DNS can be manipulated to route email in funny ways that solve some of the most difficult problems facing the email world these days -- like spam and phishing. Check out http://www.mailchannels.com for an example of using DNS in a very new way.