Re: FIX for ZoneAlarm & KB951748 issue released
On Fri, 18 Jul 2008 16:00:03 -0700, Stinger wrote:
<snip for brevity>
>
> And I've yet to see anyone answer the most important question, you include
> Kerry..
> "Why was the patch even produced by MS if there wasn't a "problem" with the
> OS?"
> Windows has to be changed to work with the new protocol? So either there
> was something wrong with Windows before or after the new protocol was
> invoked...which is it? Can't have it both ways. If everything was fine
> before the new DNS protocol was invoked, we're right back to my question
> above. You don't need to have technical expertise to see when people dance
> cokmpletely around a subject folks.
This may clarify things:
http://securosis.com/2008/07/08/dan-kaminsky-discovers-fundamental-issue-in-dns-massive-multivendor-patch-released/
"Dan Kaminsky was finally successful in getting the security research
community to back his claims to the design flaw with DNS."
http://tech.blorge.com/Structure: /2008/07/11/skepticism-relieved-with-dns-bug/
Happy reading 