Previous
DNS creator: It's time to add security
News Following the publication of a fundamental flaw in the Domain Name System (DNS) by security researcher Dan Kaminsky, DNS inventor Paul Mockapetris told ZDNet.co.uk on Thursday that internet service providers (ISPs) should "take action" and "add...
[August 12, 2008, 11:57]
Researcher attempts to unravel Kaminsky DNS flaw
News A warning about the DNS vulnerability, which could allow attackers to hijack web surfing, was publicised earlier this month by researcher Dan Kaminsky. Kaminsky did not release technical details of the flaw, choosing instead to work with affected...
[July 22, 2008, 17:43]
Kaminsky reveals details and extent of DNS flaw
News Security researcher Dan Kaminsky has given details of a fundamental flaw in the Domain Name System, and the extent of the vulnerability. In a presentation given at the Black Hat security conference in Las Vegas on Wednesday, Kaminsky gave details...
[August 7, 2008, 14:46]
DNS attacks occurring, warns Kaminsky
News I think we have been seeing attacks already going on in the field," said Dan Kaminsky, director of penetration testing for IOActive, who warned the industry about the Domain Name System (DNS) vulnerability nearly five months ago.
[August 22, 2008, 8:08]
Sony rootkit victims 'in every US state'
News Security researcher Dan Kaminsky released the information at the Shmoocon 2006 hacker conference in Washington last week. Kaminsky worked out the locations of machines with the Sony rootkit installed by collating information on communication...
[January 17, 2006, 16:40]
Security researchers vs vendors: Hope for truce
News Leading by example was Dan Kaminsky, director of penetration testing for IOActive, who warned security software vendors about a fatal flaw in the DNS (Domain Name System) months before going public, so vendors could release patches.
[September 18, 2008, 10:55]
First attacks on DNS flaws reported
News The existence of the Domain Name System (DNS) flaw, which could be used to redirect browsers to malicious sites, was revealed at the start of July by security researcher Dan Kaminsky. Users can check if their nameservers are vulnerable through a...
[July 28, 2008, 13:37]
Friday
Blog Today, they highlight the doings of one Dan Kaminsky, an American old-skool hacker who bores through network stacks like a death-watch beetle presented with a particularly tasty oak-panelled church. Kaminsky takes a more Hendrixian approach...
[November 22, 2002, 17:08]
'Harmless' DNS data can mask attacks
News Moreover, corporate security measures, such as firewalls, tend to ignore DNS data because they assume it's harmless, said Dan Kaminsky, a security researcher for telecommunications firm Avaya and a speaker at the Defcon hacking conference here.
[August 2, 2004, 9:10]
VeriSign: Major Internet security update by 2011
News Kane said that the DNS vulnerability publicised by researcher Dan Kaminsky in August 2008 had speeded recognition that .com and .net needed to be signed. The vulnerability publicised by Kaminsky had been known earlier; Kaminsky showed how easy it...
[November 16, 2009, 4:00]
Black Hat Cisco router flaw finally revealed
News Cisco deserves credit for not just patching the initial hole, but also strengthening the checks process against other as yet unknown attacks," said Dan Kaminsky of Doxpara Research. In the wake of Black Hat and Cisco's actions against Lynn, the...
[November 3, 2005, 8:35]
Apple issues patch for critical DNS flaw
News The DNS flaw, which was first publicised by Dan Kaminsky of IOActive on 8 July, could allow attackers to redirect website visitors to any site they choose and present forged information. During the second pre-Black Hat security conference Webinar...
[August 1, 2008, 8:19]
Windows bug may allow network traffic hijacks
News Still, the proxy problem isn't a critical security issue, Paget and fellow IOActive security expert Dan Kaminsky said. Also, the proxy problem may be appealing to attackers who find it increasingly hard to exploit other vulnerabilities, Kaminsky said.
[March 26, 2007, 8:44]
Wanted: Windows Hackers
News Security researcher Dan Kaminsky attended the first Blue Hat and supports the event. Kaminsky also said that Microsoft is listening to the security community. The two-day meeting of Microsoft insiders with independent researchers provided each side...
[August 2, 2005, 9:55]
Attack code released for Kaminsky DNS flaw
News Attack code has been released for a DNS flaw discovered by security researcher Dan Kaminsky. Kaminsky's flaw has been the subject of speculation, as the researcher has not yet given out technical details, preferring instead to work with affected...
[July 24, 2008, 15:39]
Microsoft issues Patch Tuesday DNS fix
News The flaw, which was discovered by security researcher Dan Kaminsky, affects multiple vendors, including Cisco. Microsoft has issued a series of four 'important' bulletins as part of its monthly patch cycle.
[July 9, 2008, 13:28]
Microsoft patch leaves ZoneAlarm users in the dark
News At issue is Microsoft Update KB951748 (MS08-037), which addresses a DNS flaw made public on Tuesday by security researcher Dan Kaminsky. Check Point Software Technologies, maker of ZoneAlarm, on Wednesday said it is working with Microsoft to...
[July 10, 2008, 11:26]
Apple patch fails to address DNS flaw, say experts
News The vulnerability, which was made public by security researcher Dan Kaminsky, affects software from multiple vendors. Apple's Domain Name System patch for Mac OS X systems is not completely effective, according to security experts.
[August 4, 2008, 14:17]
OpenID at risk due to DNS flaw, warns researcher
News Robin Wilton, a corporate architect for federated identity at Sun, described OpenID's reliance on the integrity of the Domain Name System (DNS) as a "multi-factor problem" in light of the discovery of a fundamental flaw in DNS by security...
[August 13, 2008, 15:54]
Internet-scale 'man in the middle' attack announced
News Both Kapela and Moss drew parallels between this flaw and Dan Kaminsky's DNS disclosure in July. In Black Hat's October Webinar on Thursday, Anton Kapela, datacentre manager at 5Nines Data, spoke about internet-scale 'man in the middle' attacks.
[October 20, 2008, 12:11]
