3 ms·

It's simply one more step in an attack chain. Again, all of the examples mentioned upthread involve compromising the zone's registrar accounts (through old-fash

It's simply one more step in an attack chain. Again, all of the examples mentioned upthread involve compromising the zone's registrar accounts (through old-fashioned 'spear-phishing', which works regardless of DNSSEC, DANE, 2FA, or whatever -- otherwise, we wouldn't be reading about it!). The argument "well, they were able to compromise BGP, but DANE surely would have stopped them" is not only unsupported, but not particularly likely either.

phicoh 2y ago
Where do you find an attack on a registrar account in the following attack: https://freedom-to-tinker.com/2022/03/09/attackers-exploit-fundamental-flaw-in-the-webs-security-to-steal-2-million-in-cryptocurrency/ https://freedom-to-tinker.com/2022/03/09/attackers-exploit-f... I can't find it.
- PreInternet01 2y ago
  I can't find it either, but that's just because I don't read Korean and can't deep-dive into the actual attack details, hidden behind the summary you posted. But let me pose a counterfactual: I am the owner of example.nl, and I publish the memoirs of one YA, which the .nl government desperately wants to suppress, for, eh, reasons. The .nl zone requires DNSSEC by default, but I cleverly host my zone on CloudFlare and disable DNSSEC. I also use LetsEncrypt to secure my site, which is only available via HTTPS. In response, the .nl government instructs all ISPs in the entire EU to route all CloudFlare traffic to its middlebox, and it obtains an SSL certificate in example.nl's name from Diginotar, a notably reputable SSL vendor. It uses all that power to host an alternative version of YA's memoirs. Which percentage of Internet users will actually see that alternative version? And how many millions of Euros will I be able to collect from the lawsuits afterwards? Bonus question: how much will it cost to replace the melted-down middlebox?
  - effie 2y ago
    Wait, is this for real, or an hypothetical example? Where can I read the memoirs?

phicoh 2y ago

Where do you find an attack on a registrar account in the following attack: https://freedom-to-tinker.com/2022/03/09/attackers-exploit-fundamental-flaw-in-the-webs-security-to-steal-2-million-in-cryptocurrency/ https://freedom-to-tinker.com/2022/03/09/attackers-exploit-f... I can't find it.

PreInternet01 2y ago
I can't find it either, but that's just because I don't read Korean and can't deep-dive into the actual attack details, hidden behind the summary you posted. But let me pose a counterfactual: I am the owner of example.nl, and I publish the memoirs of one YA, which the .nl government desperately wants to suppress, for, eh, reasons. The .nl zone requires DNSSEC by default, but I cleverly host my zone on CloudFlare and disable DNSSEC. I also use LetsEncrypt to secure my site, which is only available via HTTPS. In response, the .nl government instructs all ISPs in the entire EU to route all CloudFlare traffic to its middlebox, and it obtains an SSL certificate in example.nl's name from Diginotar, a notably reputable SSL vendor. It uses all that power to host an alternative version of YA's memoirs. Which percentage of Internet users will actually see that alternative version? And how many millions of Euros will I be able to collect from the lawsuits afterwards? Bonus question: how much will it cost to replace the melted-down middlebox?
- effie 2y ago
  Wait, is this for real, or an hypothetical example? Where can I read the memoirs?