bugtraq - RE: recursive DNS servers DDoS as a growing DDoS problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 30 Mar 2006 16:08:51 -0500
From: "Geo." <geoincidents@....net>
To: <bugtraq@...urityfocus.com>
Subject: RE: recursive DNS servers DDoS as a growing DDoS problem

> > servers and you have just created a really powerful control mechanism
for
> > entities to control large sections of the internet since folks from
those
> > sections won't be able to use anyone else's DNS servers or even run
their
> > own (much like port 25 blocking limits who can run a mail server today).
He
> > who controls dns controls the network.
>
> Is this like when you brought up Government conspiracies in this regard
> on another list?

It's a security issue. He who controls the dns server controls you, yes?

Ok we are talking about locking down DNS like we locked down smtp relay. So
if you want to send a mail today can you just use any smtp server you want
or are you severly limited, possibly by a port 25 block which forces you to
use just your ISP's mail smtp server?

Don't you think creating a control point like that is dangerous? Especially
dangerous when it's DNS which runs virtually every function on the internet?

It's not a conspiracy theory, it's fact, if you create a control like that
someone is going to want to control it. I suggest only that we consider this
along with everything else.

Geo.