cleveridiot.com » the clever bit » idle chat
 Print Thread
URGENT!!
mrbreckles
This has been circling around the internet for some time. I have ignored, but just a while ago I decided to read a bit about it...

It's critical, and everyone should take the time to make sure their ISP is secure.

The problem in summary: If your ISP has not fixed their DNS servers. Somebody can in less then 5 mins insert fake information in it. They can change the IP of ANY website in the DNS's server cache. When the customers of that ISP ask for a site like google.com or a bank, they could be going somewhere else.

That somewhere else can be a phishing site, which is a site that looks like the original but tries to steal your account. If faked correctly, It could steal your account and then take you to the original website so you will never notice.

The site could also just have a lot of web browser exploits, and try to find all known means to get a virus into your computer. Example: if your browser is not up-to-date, it could take advantage of that.

Now we all know people visit bad sites by mistake all the time. eg: They get an email from "the bank" with a link they have to click. This link is obviously wrong and points to another website (not the bank). But with this new DNS attack it DOES NOT matter if you type it correctly or have the website in your favorites. It's your ISP that will take you to the wrong place.

You can check your DNS vulnerabilty at http://www.doxpar... (right sidebar) and http://entropy.dn....net/test/
 
Jump to Forum