full-disclosure - Microsoft DNS resolver: deliberately sabotaged hosts-file lookup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <122827b90604131159s29bf6020ka7836aa06793ab6e@mail.gmail.com>
Date: Thu Apr 13 19:59:29 2006
From: stan.bubrouski at gmail.com (Stan Bubrouski)
Subject: Microsoft DNS resolver: deliberately sabotaged
	hosts-file lookup

On 4/13/06, Brandon S. Allbery KF8NH <allbery@....cmu.edu> wrote:
>
> On Apr 13, 2006, at 1:29 , Dave Korn wrote:
>
> >   Hey, guess what I just found out:  Microsoft have deliberately
> > sabotaged
> > their DNS client's hosts table lookup functionality.
>
> I thought this was part of avoiding malware attempts to block Windows
> Update.

How bypassing blocking of go.microsoft.com affects windowsupdate I
don't know.  Been a while since I looked at windows update at all, but
doesn't it download files from mirrors anyways?  And even if it didn't
are the files actually downloaded from go.microsoft.com?  Either way
it appears Dave is right, which makes me wonder if there isn't another
greater purpose aside form WMP updates.  Like assured tracking of
users for other nefarious and monopolistic purposes.

Best Regards,
sb

>
> --
> brandon s. allbery     [linux,solaris,freebsd,perl]
> allbery@...nh.com
> system administrator  [openafs,heimdal,too many hats]
> allbery@....cmu.edu
> electrical and computer engineering, carnegie mellon university
> KF8NH
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>