Net problem to be revealed at conference

[rpm]

Net problem to be revealed at conference

Organisers of next week's Black Hat Europe conference are promising a security presentation that could impact anyone who uses the Internet, but no details have been released yet.

 

[LazyLion]

like that is going to suddenly shut down the internet. But yeah, there are some gaps that need to be fixed. The entire e-mail protocol needs to be overhauled.

 

[adrianx]

<sarcasm> //In case it is not obvious
Oh no! OpenOffice is insecure! Let me rather open that funny .xls file that my bestest friend e-mailed me, about the monkey, in Microsoft™ Office® Excell©. The article says that it is much easier to develop poo-poo documents for OpenOffice. Microsoft™®© Office™®© is frequently abused, but it must be quite difficult... All those nasty hacker people are going to start attacking OpenOffice now. I'm so glad that I always back the winning horse. It makes me feel so secure.
</sarcasm>

 

[<moLe>]

DNS jacking is a serious issue, insecure legacy protocols are way overdue for an overhaul aswell. but then again I'll love to see a really eally secure protocol/encryption. because it seems that these okes can use anything go get at your system...thank got for pfsense though

 

[sn3rd]

DNS jacking is a serious issue, insecure legacy protocols are way overdue for an overhaul aswell. but then again I'll love to see a really eally secure protocol/encryption. because it seems that these okes can use anything go get at your system...thank got for pfsense though

You don't have to look very far for secure encryption.

Protocols? By definition, a security protocol IS secure. It's the various implementations that sometimes cut corners and result in vulnerabilities. Not that ALL protocols are secure from their inception! But security issues are generally dealt with pretty quickly (especially in open-source software).

 

[remybfg10k]

Kaminsky's research prompted a massive, industry-wide effort to patch DNS servers vulnerable to a dangerous attack that could redirect Web surfers to fraudulent Web sites even if the Uniform Resource Locator (URL) was typed in correctly, among other attack scenarios.

Almost sounds like Mwebs highjacking of the DNS for its landing page cr@p