full-disclosure - Re: I'm not the only one who can't resolve phishtank.com, but some can..

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 25 Mar 2007 16:10:35 -0400
From: Tim <tim-security@...tinelchicken.org>
To: Michael Ward <mike-ward@....edu>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: I'm not the only one who can't resolve
	phishtank.com, but some can..

> I'm on a Mac, so I'm pretty sure I don't have any DNS poisoning or  
> evil malware.  My hosts is intact:

Um, you might want to read the article.  If your upstream DNS cache is
poisoned, it doesn't matter what OS you're running.  Now, if you're
running your own secure cache that goes directly to the roots, then
you're right, you'd be immune to this specific attack.

tim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/