hey I hope you all upgraded your DNS
 

Thanks for the heads up :thumbsup

i dont understand, what is this.. too technical to even bother to read it

You can read the Wired down version of what's going on here.

O brother.

This is a rare day indeed.

thanks for the update spanno

I've been reading about this for a month now. It is truly worrying.

It would be nice to hear about security measures being taken from major hosting companies about this !!!

Come on WEBAIR, MOJO, PHAT, ISPRIME, PR and all other I forgot to mention !!!....

Yep, would be nice to hear

sounds pretty fucked

The world fall apart yet? No?? Okay then.... keep moving folks...

Bind security holes? What's next? a problem with sendmail!?

LOL that made me laugh, but this doesn't have to do with BIND but with the way DNS was designed as the others name daemons are also vulnerable.

Patches have been out for about a month. If it wasn't patched then your hosting co probably knows less than you about anything.

you would wait for the world to fall apart before fixing it ?

:helpme:helpme:helpme

Hello,
As I see some of our clients sent us questions about this issue, guided by this particular thread.
Just want you to know that we actually have this covered for a while.
This vulnerability is not new and is the reply to many of those interesting '302 errors' webmasters experiences sometimes.
While dnssec is the reply for this problem this isn't something widely spread.
What most sysadmins are doing right now, is raise the range of ports used to reply the queries making the guessing harder.
This happens for a while and exploits for this have been running the internet for about two years or so.

Thanks, one of the many reasons I am with you guys....:thumbsup

ISPRIME doesnt use bind. Thus no security issues :)

NEXT!

Just that it's not only bind :)
Any caching server that is open to recursive queries is vulnerable.
But I'm pretty sure isprime got that covered as well:)

thanks good read

thanks 4 the heads up!! :thumbsup

We have been aware of this vulnerability as it is not new.
Webair does not use bind and this does not impact any of our clients or services. :thumbsup

It doesn't just affect bind. :warning

lol this isnt a bug in bind this is a bug in the design of dns just about every maker has been effected.

dns posining isnt a bind thing, every dns daemon has some vuln to it