- home
- reviews
- news
- downloads
- cnet tv
HOLIDAY HELP DESK: Broadcasting live at 1:00 p.m., PT
- log in
- join CNET
- welcome,
- my profile
- log out

Comments on: Massive, coordinated DNS patch released

A fundamental flaw within the Domain Name System is being addressed by multiple vendors.

Add a Comment (Log in or register) (7 Comments)


by gagahput3ra July 8, 2008 12:31 PM PDT: why does it show "Error establishing a database connection" on the DNS Checker webpage? If the website got attacked in an attempt to protect "the greatest number of people worldwide", this will be the biggest joke of internet security this year.; Like this Reply to this comment


by pencoyd July 8, 2008 3:36 PM PDT: OpenDNS was never vulnerable, so you might want to try their free service. http://www.opendns.com/; Like this Reply to this comment


by Spiderrman July 8, 2008 3:46 PM PDT: Don't know about Vista, but on XP ZoneAlarm ceases to function unless it is turned off or the firewall setting for Internet is set to Medium from High.; Like this Reply to this comment


by dragonstar125 July 9, 2008 12:20 AM PDT: that ture spider but its due to the microsoft update to fix the dns server patch grrrrrr so do set zone alarm to meduim i have sent email to zone alarm about this hope they fix asap :(; Like this Reply to this comment

by portiadacosta July 9, 2008 2:08 AM PDT

Ah, could this be why I couldn't connect to the internet this morning after installing the latest security patch, on my WinXP SP3 system? I use Zone Alarm too.

I uninstalled the security patches for the time being.

I also use Open DNS, would that have any bearing on the problem?

Like this Reply to this comment


by dragonstar125 July 9, 2008 8:09 AM PDT: reinstall the patches but before do so set internet setting in zone alarm to mediuim and your still safe :) it works for me as said above :); Like this


by bt_ July 23, 2008 10:35 AM PDT: "Where we had 16-bit before, we now have 32 bits." ? said Dan Kaminsky welcoming the DNS patches coming out as if we are safe now.

Wrong! We still have the fundamental flaw ? we are still using something (DNS as we use WEP, VLAN, etc) that has not been designed for (security).

New ?finding? did not change the quality to the better ? it just changed the quantity of the feature. It means that when our computing recourses become faster we would be able to ?break? the randomness of 32 bits as easy as we can do it today for 16. Then what?

Poor work, too much fuzz...

We have to focus efforts on the DNS re-architecture and re-design - from scratch and having security requirements put forth for the new development.

/bt_; Like this Reply to this comment

(7 Comments)

About Defense in Depth

Covering computer viruses and computer crime, Robert Vamosi goes beyond the hype to provide you with expert interviews of the top security researchers, as well as offering the hands-on, nontechnical advice you'll need to stay safe online.