Comment Yay, I got slashdotted! (Score 4, Interesting) 49
I should really visit
Comment This only affects BIND and Unbound users (Score 1) 132
It is generally not made clear that problems are only to be expected for those users behind DNS resolvers that ask 'DNSSEC OK=1' questions by default.
Such 'do=1' default behaviour was enabled in BIND, most likely in an effort to 'make the world safe for DNSSEC'. Even though no further DNSSEC processing is performed by default.
Other implementations, like PowerDNS & DJBDNS, do not wantonly ask 'DNSSEC OK=1' questions. This means that for these (and other) resolvers, on May 5th nothing will happen.
The 'testing' sites linked do not clarify if you are behind a resolver that asks 'do=0' or 'do=1' questions, and may thus lead to needless worry.
Cheers,
Bert - PowerDNS.
Scientists Say a Dirty Child Is a Healthy Child 331
Researchers from the School of Medicine at the University of California have shown that the more germs a child is exposed to, the better their immune system in later life. Their study found that keeping a child's skin too clean impaired the skin's ability to heal itself. From the article: "'These germs are actually good for us,' said Professor Richard Gallo, who led the research. Common bacterial species, known as staphylococci, which can cause inflammation when under the skin, are 'good bacteria' when on the surface, where they can reduce inflammation."
Comment Re:powerdns was vulnerable, but differently (Score 1) 237
Paul,
I'd love to know more about how PowerDNS could be spoofed more easily - I'd love to fix it. Since Kaminsky, nothing has changed within the PowerDNS Recursor, so anything you've discovered is still relevant!
Bert
Comment Re:DoS on PowerDNS? (Score 3, Informative) 237
Nothing too serious, probably a prank from some bored employees at the time. We asked some of the Nominum people what they were up to, since we'd been receiving packets that caused PowerDNS to crash from Nominum IP space.
I seem to recall one of their (ex-)employees eventually even told us which bug they had been triggering.
I don't for a moment believe this was a Nominum-sanctioned activity.
But this is all way back in the mists of time, the beginning of 2002.
Bert
(PowerDNS)
Submission + - Nominum calls Open Source DNS 'a recipe for proble
Raindeer writes: "In an effort to promote its new Cloud based DNS service SKYE, Nominum one of the commercial DNS-software, providers slaundered all open source/freeware DNS packages. It said: "Given all the nasty things that have happened this year, freeware is a recipe for problems, and it's just going to get worse.(....) So, whether it's Eircom in Ireland or a Brazilian ISP that was attacked earlier this year, all of them were using some variant of freeware. Freeware is not akin to malware, but is opening up those customers to problems. " This has the DNS community fuming. Especially when you know Nominum was one of the companies affected by the DNS Cache poisoning problem of last year. Something PowerDNS, MaraDNS and DJBDNS all open source weren't vulnerable too."
Slashdot Top Deals
No one gets sick on Wednesdays.
