[FoRK] Poisoned DNS on the increase

[Udhay Shankar N]

Udhay Shankar N wrote: [ on 02:17 PM 2/18/2008 ]

>* (having a poisoned DNS server + trojans to change settings on 
>victim machines) could get you, for example, access to a victim's 
>banking transactions.
>
>* if you're running an open wireless AP with poisoned DNS servers, 
>you don't even need control of the victim's box.

As somebody else pointed out upthread, control of any of the routers 
upstream of a victim is enough. Here's another interesting attack:

http://www.news.com/8301-10784_3-9878655-7.html?tag=nl.e498

Udhay

-- 
((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com))