bugtraq - Re: recursive DNS servers DDoS as a growing DDoS problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.BSO.4.58.0604031620550.18304@voodoo.mediaservice.net>
Date: Mon, 3 Apr 2006 16:39:46 +0200 (CEST)
From: Marco Ivaldi <raptor@...eadbeef.info>
To: bugtraq@...urityfocus.com
Subject: Re: recursive DNS servers DDoS as a growing DDoS problem

On Thu, 30 Mar 2006, Geo. wrote:

> Don't you think creating a control point like that is dangerous?  
> Especially dangerous when it's DNS which runs virtually every function
> on the internet?

Yeah, it could be indeed...

It's not directly related to the discussion topic, but i just wanted to
inform you about the current Internet censorship campaign promoted by the
Italian government since last February 20th: a list of web sites offering
(illegal) on-line gambling services is blocked through DNS records
hijacking performed at the ISP level.

In other words, the Italian government is forcing all the major ISPs to
break regular DNS functionality and override these censored records:

http://www.aams.it/site.php?page=20060213093814964&op=download

Italy is the first "democratic" country to do something like that, AFAIK. 

Just my 2 euro-cents,

-- 
Marco Ivaldi
Antifork Research, Inc.   http://0xdeadbeef.info/
3B05 C9C5 A2DE C3D7 4233  0394 EF85 2008 DBFD B707