11–20 of 108 posts
In fact, the only people I can see this affecting (in the unlikely event it does happen) are people setting up new sites.
Most interesting bit : The principle is simple; a flaw that uses forged UDP packets is to be used to trigger a rush of DNS queries all redirected and reflected to those 13 IPs. The flaw is as follow; since the UDP protocol allows it, we can change the source IP of the sender to our target, thus spoofing the source of the DNS query. The DNS server will then respond to that query by sending the answer to the spoofed IP…
I'm pretty sure every hacker group has gotten this idea at one point or another. Has anyone even come close to taking down all the root DNS servers at once?
does this mean, that even if we typed the IP address of a site, we would get an error? i'm not sure how all the protocols work, so any clarification would be great.
No, you could still get to the site with just an IP address, if you have it.
i'm kinda glad they're attempting this, IMO. i'm tired of ignorant people not understanding what the "web" really is, and how important it is to keep it free and open. sure, this might make "hackers" look bad, but honestly, if we sit back and do nothing, then we cannot complain when laws are passed, etc..
if they pull this off, it will be a historic day, no?
hmm..and people here on HN say they aren't a digital terrorist group.....
While the DOS discussed in that link is quite obviously misguided, counterproductive, juvenile and likely criminal, 'terrorism' seems like a pretty strong word.
Most interesting bit : The principle is simple; a flaw that uses forged UDP packets is to be used to trigger a rush of DNS queries all redirected and reflected to those 13 IPs. The flaw is as follow; since the UDP protocol allows it, we can change the source IP of the sender to our target, thus spoofing the source of the DNS query. The DNS server will then respond to that query by sending the answer to the spoofed IP…
Where could we find more information about those 13 servers? Why are there only 13 of them?
does this mean, that even if we typed the IP address of a site, we would get an error? i'm not sure how all the protocols work, so any clarification would be great.
No, you could still get to the site with just an IP address, if you have it.
Most interesting bit : The principle is simple; a flaw that uses forged UDP packets is to be used to trigger a rush of DNS queries all redirected and reflected to those 13 IPs. The flaw is as follow; since the UDP protocol allows it, we can change the source IP of the sender to our target, thus spoofing the source of the DNS query. The DNS server will then respond to that query by sending the answer to the spoofed IP…
Where could we find more information about those 13 servers? Why are there only 13 of them?