Internet Security Patch Has Flaws
- 0
- Add a Comment
When is a patch really a patch? The patch for the internet security issue identified by Dan Kaminsky is flawed:
“SAN FRANCISCO — Faced with the discovery of a serious flaw in the Internet’s workings, computer network administrators around the world have been rushing to fix their systems with a cobbled-together patch. Now it appears that the patch has some gaping holes.
On Friday, a Russian physicist demonstrated that the emergency fix to the basic Internet address system, known as the Domain Name System, is vulnerable and will almost certainly be exploited by criminals.”
link: Patch for Web Security Hole Has Leaks of Its Own
This seems like an open challenge for phishing schemes to exploit this flaw. The crux of this problem is rather daunting. Basically, the system is not design to protect and verify identity.
Catherine Forsythe