Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

Thus said Jeff King on Thu, 05 Mar 2009 03:09:48 EST:

> I don't know how many packets in a poisoning attempt is "too much". It
> is my understanding that since Kaminsky's talk, there have been actual
> exploits of unpatched  BIND in the wild. So clearly  there is a number
> that is "too little to be noticed", at least for some sites.

It would appear that Dan had  already warned that these kinds of attacks
were possible even as early as 2001:

http://cr.yp.to/djbdns/forgery.html

Andy
-- 
[-----------[system uptime]--------------------------------------------]
  9:02pm  up  2:11,  1 user,  load average: 1.12, 1.29, 1.16