Snappy newsletters. Simple Facebook sharing. Spirited comments. Sweet features are waiting… GET THEM NOW!

'Every Network Is at Risk' Thanks to Bug

Security expert says DNS flaw could cause Internet-wide chaos

By Kevin Spak,  Newser Staff

Posted Aug 7, 2008 8:05 AM CDT

(Newser) – Security researcher Dan Kaminsky outlined what he calls the biggest Internet security hole since 1997 to a gathering of experts yesterday, and it's a lot worse than had been understood, Wired reports. “Every network is at risk,” Kaminsky said at the Black Hat conference in Las Vegas. "That's what this flaw has shown." The bug, a hole in the Domain Name Service, has wider implications than anyone realized when word of it leaked last month, Kaminksy said.

Hackers can not only use it to hijack web browers, they can also target FTP services, email servers, spam blockers, online banking protections, and other services. “There are a ton of different paths that lead to doom,” Kaminsky said. Since Kaminsky warned of the DNS flaw a month ago, many companies have patched their servers, but currently 58% of broadband users are still on unprotected servers, he said, as are 30% of Fortune 500 companies.

Dan Kaminsky, director of penetration testing for Seattle-based computer security consultant IOActive Inc., speaks at the annual Black Hat convention in Las Vegas, Wednesday, Aug. 6, 2008.
Dan Kaminsky, director of penetration testing for Seattle-based computer security consultant IOActive Inc., speaks at the annual Black Hat convention in Las Vegas, Wednesday, Aug. 6, 2008.   (AP Photo/Jae C. Hong)
In this undated photo provided by IOActive Inc., Dan Kaminsky, director of penetration testing for Seattle-based computer security consultant IOActive Inc., is shown.
In this undated photo provided by IOActive Inc., Dan Kaminsky, director of penetration testing for Seattle-based computer security consultant IOActive Inc., is shown.   (AP Photo/IOActive Inc.)
Attendees listen to a keynote speech by Dan Kaminsky, director of penetration testing for computer security consultant IOActive Inc., at the annual Black Hat convention in Las Vegas, Aug. 6, 2008.
Attendees listen to a keynote speech by Dan Kaminsky, director of penetration testing for computer security consultant IOActive Inc., at the annual Black Hat convention in Las Vegas, Aug. 6, 2008.   (AP Photo/Jae C. Hong)
« Prev« Prev | Next »Next » Slideshow
To report an error on this story, notify our editors.
A snapshot of the day's best news stories.
 
COMMENTS
Be the first to comment on this story.

More Newser Stories

Hackers Hit Internet Giant VeriSign

Latest Domain Name Hack Disguises Its Danger

Coming This Week: Dot-Anything

.xxx Porn Sites May Be Coming Soon

Web Addresses Will Gain International Flavor


NEWS FROM OUR PARTNERS
Other Sites We Like:   24/7 Wall St.   |   Betty Confidential   |   BuzzFeed   |   Cracked   |   Fark   |   Timelines   |   The Frisky   |   Geek Sugar   |   NewsOne