4 ms·
I love hacks for DNS, but this one feels a little bit of a stretch. The absolute lack of security is probably the biggest one. Now one can troll DNS for a use
by axaxs 6y ago
I love hacks for DNS, but this one feels a little bit of a stretch. The absolute lack of security is probably the biggest one. Now one can troll DNS for a user who has access to a resource.
- tiernano 6y agoDoesn't necessarily have to be public dns. Could be internal to just your servers...
- michaelmcmillan 6y agoAuthentication != Authorisation. You wouldn't use this to determine if the user really is who he says he is. But in determining what a user has access to, DNS is pretty slick. The DNS server doesn't need to be public either.