Comments on: Upgrade forcers, and DNS http://enthusiasm.cozy.org/archives/2008/07/upgrade-forcers-and-dns Ben Hyde Tue, 31 Jan 2012 13:18:45 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: James http://enthusiasm.cozy.org/archives/2008/07/upgrade-forcers-and-dns/comment-page-1#comment-1014 James Sat, 12 Jul 2008 07:46:42 +0000 http://enthusiasm.cozy.org/?p=1707#comment-1014 That last post was prompted by <a href="http://www.lemis.com/grog/product-reviews/ausweb.php" rel="nofollow">a bearded BSD hacker's issues with a DNS server that claimed it was authoritative for a domain it wasn't</a>, which is basically a replay attack. That last post was prompted by a bearded BSD hacker’s issues with a DNS server that claimed it was authoritative for a domain it wasn’t, which is basically a replay attack.

]]> By: James http://enthusiasm.cozy.org/archives/2008/07/upgrade-forcers-and-dns/comment-page-1#comment-1016 James Sat, 12 Jul 2008 07:35:39 +0000 http://enthusiasm.cozy.org/?p=1707#comment-1016 DNSSEC actually looks like the <a href="http://www.cs.arizona.edu/people/justin/packagemanagersecurity/attacks-on-package-managers.html" rel="nofollow">signed packages mirror replay attack</a> - one source of information that needs to be mirrored/cached widely for performance but be secure against tampering. What's Google's internal naming service called? Ah, <a href="http://labs.google.com/papers/chubby.html" rel="nofollow">Chubby</a>, which was designed as a lock service. DNSSEC actually looks like the signed packages mirror replay attack – one source of information that needs to be mirrored/cached widely for performance but be secure against tampering.

What’s Google’s internal naming service called? Ah, Chubby, which was designed as a lock service.

]]> By: bhyde http://enthusiasm.cozy.org/archives/2008/07/upgrade-forcers-and-dns/comment-page-1#comment-1015 bhyde Thu, 10 Jul 2008 02:20:51 +0000 http://enthusiasm.cozy.org/?p=1707#comment-1015 James - You have a point there. But yet it would still be pervasive. James – You have a point there. But yet it would still be pervasive.

]]> By: James http://enthusiasm.cozy.org/archives/2008/07/upgrade-forcers-and-dns/comment-page-1#comment-1013 James Thu, 10 Jul 2008 02:11:54 +0000 http://enthusiasm.cozy.org/?p=1707#comment-1013 "Fixing" DNS with DNSSEC makes it no longer light weight. “Fixing” DNS with DNSSEC makes it no longer light weight.

]]>