North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: News of ISC Developing BIND Patch

  • From: Iljitsch van Beijnum
  • Date: Wed Sep 17 08:12:44 2003 
On Wed, 17 Sep 2003, Simon Waters wrote:

> As such any root server operator can potentially hijack a significant
> amount (majority?) of Internet traffic, at least if no one notices
> something odd, and figures out what is going on too quickly. This is DNS
> security 101...

> A single rogue root server could be very messy to cleanup after if the
> person in control of the rogue server were skilled in the art (and root
> server operators are suppose to be so skilled to get the job).

Fortunately people will start noticing within minutes if not seconds. A
quick manual purge of the resolver cache should suffice for cleanup once
the problem itself has been fixed.