u/speckzin r/netsec • Recommends
▶ DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke - YouTube
0:00 / 0:00
DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke
Robert Stucke (bobhex)
67 subscribers • 1 video on Hallway
- Recommended by 3 people: 1 on Hacker News and 2 in engineering communities.
- Presented by Robert Stucke
Intermediate. Assumes working knowledge.
20K views13 years ago3 recommendations
SecurityDistributed systemsNetworking and protocolsExploits and vulnerabilitiesWeb and application security
Robert Stucke explains how single-bit flips in memory lead to DNS queries for misspelled domains, enabling bitsquatting attacks.
The uploader added no description.Why it's here
3 people recommend thisWhat people say. Recommended for its real-world data on bitsquatting and how hardware memory errors impact DNS security.
u/karnariusin r/netsec • Recommends
DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke
aimhbon Hacker News • Recommends
On “CPU reliability – Linus Torvalds (2007)”
It was posted here on HN a few days ago, but you might find the DEFCON talk on single bit domain errors relevant: link to this video In summary, some data centers are run hotter than recommended, which leads to a lot of mostly ignored domain resolution errors, which leads to a security risk.
vezzy-fnordon Hacker News • Mentions
On “Is Unicode Safe?”
The homoglyph attack is a very old and often abused technique. A related, though not identical one, is bit flipping where a single character is swapped in a domain name and you prey on those who make misspellings. It turns out, however, that it isn't even necessary for someone to make a blatant error like that... link to this video DEFCON 21: DNS May Be Hazardous To Your Health
vox_mollison Hacker News • Mentions
On “To ECC or Not to ECC”
This cannot possibly be right. There was a DC21 talk regarding DNS request misfires due to bit flips in non-ECC DRAM, and the researcher was able to collect a surprisingly large number of requests on the basis of this. Edit: found it: link to this video
voltagex_on Hacker News • Mentions
On “Flip Feng Shui: A new cross-VM exploitation vector”
>We have registered all possible domains that are one bit flip away from ubuntu.com and debian.org. We would like to hand these domains over to the correct authority. Please get in touch if you think you are one. Aha! link is a talk about "bitsquatting" along the same lines. I'm sure I've seen a newer talk about it too Edit: link to this video is the other video, which also looks at the behaviour of various clients