Web Hack List

Collected research

Black Ops 2008: It's The End Of The Cache As We Know It

Kaminsky's Black Hat Japan keynote on the 2008 DNS cache-poisoning bug: birthday-race spoofing across sibling names, plus in-bailiwick NS/CNAME referrals that let a won race for 83.foo.com steal www.foo.com. Extends it to poisoning com itself, MX intercept, forgot-my-password takeover, CA domain validation, SSL VPNs and autoupdate.

Record

Researcher
Dan Kaminsky
Published by
blackhat.com
Format
Whitepaper
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Dan Kaminsky, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .