• Hey Guest!
    British Car Forum has been supporting enthusiasts for over 25 years by providing a great place to share our love for British cars. You can support our efforts by upgrading your membership for less than the dues of most car clubs. There are some perks with a member upgrade!
    **Upgrade Now**
    (PS: Upgraded members don't see this banner, nor will you see the Google ads that appear on the site.)

internet "flaw"

Share this page

NutmegCT

NutmegCT

Great Pumpkin
Bronze
Offline
internet "flaw"

For folks who run websites:

In case you hadn't heard about this - I just read it this morning.

A "flaw" in the DNS system (identified in March 2008) can lead to browsers hitting totally bogus servers even if the alpha URL is entered correctly. Seems that phishing may get a whole lot easier.

https://news.bbc.co.uk/2/hi/technology/7525206.stm

Hope this helps you server-type guys.

Tom
 
Re: internet "flaw"

This <span style="text-decoration: line-through">will</span> could affect you if your provider's DNS servers are vulnerable to DNS cache poisoning. You can check your own provider's DNS servers by going here:

www.dnsstuff.com

<span style="font-weight: bold"><span style="font-size: 14pt">PLEASE READ:</span></span> The free test for DNS vulnerability to this issue is <span style="font-weight: bold">NOT</span> the test in the big blue box in the middle of the page. SCROLL DOWN and find the for boxes labeled "Our Most Popular Free Tools". The box on the left is titled <span style="text-decoration: underline">DNS Vulnerability Check</span>. Click the button in that box to run that test on YOUR provider's DNS servers.

Basil
 
Re: internet "flaw"

...and you <span style="font-style: italic">can</span> specify what DNS servers you use. You aren't (or shouldn't be) limited to your ISP's, or other vulnerable DNS servers. I've been using different ones for years (bellsouth's have sometimes had pretty poor performance). opendns.org seems to have decent servers that aren't vulnerable. Their website explains how to change your setup and the dns server IPs to use.
 
Re: internet "flaw"

aerogTheir website explains how to change your setup and the dns server IPs to use. [/quote said:
Scott, I could not find that. Were did you see those instructions?
Click to expand...
 
Re: internet "flaw"

go to https://opendns.org/ and click the "get started" button. I admit I didn't look closely at their "instructions", I just use their dns servers - numbers 208.67.222.222 and 208.67.220.220.

All you really need to do is either update the dns IPs in your router (if you're set up with DHCP), or in your tcp/ip set-up in windows.

ISPs that have custom pre-programmed modems might have more hoops to jump through, but I'd think if you set up tcp/ip manually it shouldn't be hard to change the dns addresses.
 
Re: internet "flaw"

Oh - PS... this may annoy some people, and frankly I'm still undecided about it: opendns.org is supposedly "secure", but if you try to get to a nonexistent address it will refer you to their own search engine.

For example: you try to get to the website "britishcarforums.net" (which doesn't exist), and it refers you to this page.
 
Re: internet "flaw"

I misunderstood, I thought you meant that dnsstuff would allow you to test any DNS server other than the one you are using.
 
Back
Top