Thursday, August 7, 2008

BlackHat Day 1 -- DNS: Dan Kaminsky and Research Persistence

Black Ops 2008: Its The End Of The Cache As We Know It
Dan Kaminsky

I just have to say how happy I am that Dan Kaminsky found this vuln and handled it the way he did. This guy has playfully danced all over DNS for much of his career and finding a problem like this gets to the heart of how the Internet works. This just might even top streaming video over DNS! The amazing thing about DNS is that's it's highly resistant to change, so it hasn't exactly been evolving rapidly. Anyhow, this talk had the normal level of Dan enthusiasm and was packed -- standing, sitting, in the aisles. Dan exhaustively demonstrated what can happen when you can own DNS at the highest levels. When you think about it, it's really insane. He also went into depth about the massive patch orchestration effort that went on behind the scenes. Kudos to everybody involved for making it all happen.

0 comments: