3 ms·
> The academics who found this flaw – associated with the German National Research Center for Applied Cybersecurity (ATHENE) in Darmstadt – claimed DNS server s
by clwg 3y ago
> The academics who found this flaw – associated with the German National Research Center for Applied Cybersecurity (ATHENE) in Darmstadt – claimed DNS server software makers briefed about the vulnerability described it as "the worst attack on DNS ever discovered."
This seems a bit hyperbolic, the txid[0] randomization bug found by Kaminsky was objectively worse as it would allow you to poison the cache and in the days before encryption was considered standard.
https://www.computerworld.com/article/2534823/dns-researcher-convinces-skeptics-that-bug-is-serious.html https://www.computerworld.com/article/2534823/dns-researcher...