http://teodesian.net//posts/e65907b0-13f4-11ec-bdd7-a34a78efdb03?format=xml teodesian.net : /posts/e65907b0-13f4-11ec-bdd7-a34a78efdb03 en 2026-04-30T16:42:06 2026-04-30T16:42:06 /favicon.ico http://teodesian.net 32 32 teodesian.net favicon http://teodesian.net/posts/e65907b0-13f4-11ec-bdd7-a34a78efdb03 A back of the envelope analysis shows that it should be possible to write correctly formed DNS responses with attacker controlled payloads that will penetrate a DNS cache hierarchy and therefore allow attackers to exploit machines behind such caches. So, comprehensively spoof DNS. I'll bet governments love this one, just like the last big DNS bug. Which means it won't get fixed; they'll deliberately keep the roots out of date.]]> doge http://teodesian.net/posts/e65907b0-13f4-11ec-bdd7-a34a78efdb03 2016-02-21T09:49:20 http://teodesian.net/posts/1456048160 A back of the envelope analysis shows that it should be possible to write correctly formed DNS responses with attacker controlled payloads that will penetrate a DNS cache hierarchy and therefore allow attackers to exploit machines behind such caches. So, comprehensively spoof DNS. I'll bet governments love this one, just like the last big DNS bug. Which means it won't get fixed; they'll deliberately keep the roots out of date.]]> doge http://teodesian.net/posts/1456048160 2016-02-21T09:49:20