Friday, July 25, 2008

[The Hacker's Nightmare] The Internet DNS threat (REPEAT)

------------------------------------------------------------------
As a subscriber to one of Bill Hely's books or services you are
eligible to receive his occasional notices on topics of interest.

TO CHANGE THE E-MAIL ADDRESS...
for delivery of this publication, please click the link for
"unsubscribe or change subscriber options" at page bottom, then
look for the "Change Details" link.
------------------------------------------------------------------


Affiliate, we're getting a lot of requests for a repeat of
my original article about the Internet DNS threat, so here is the
relevant section of that newsletter edition...

-------------------------- Extract Starts ------------------------

** THIS IS VERY SERIOUS -- IGNORE AT YOUR PERIL **

If you don't follow the technology press you may be unaware of
this, as it has been largely ignored by the popular news media.

I won't go into a lot of detail, but in brief this doesn't relate
to any sort of an attack in the normal sense. Rather, a potentially
very serious flaw has been discovered in the underlying
architecture of the Internet.

I know, sounds like an April Fool's joke, right? But I assure you
it's no such thing.

Fortunately for the billions of us who use the Web, the problem was
discovered by a good guy first. For a change the bad guys were
beaten to the punch and, so long as you do your small part, they
are forever locked out of using it against you.

Readers of The Hacker's Nightmare should be very familiar with the
various aspects of a phishing scam. In a way the end result of this
problem is similar, in that you can be taken to a website that is a
fake copy of the one you think you're visiting. For that type of
phishing scam to work you have to be tricked into following a link
that, for example, you think will take you to your online banking
site, whereas in reality it takes you to the scammer's copy of the
real site, where the scumbag can extract your login credentials
from you.

One excellent precaution against that sort of ploy is to type your
bank's URL into the browser's address line, rather than follow a
link to get there.

This recently discovered problem is much worse, in that online
criminals could completely control the flow of Internet traffic, so
that even typing your target URL into the browser would be no
defense. No matter what you typed into your browser you would be
taken to wherever the crims wanted you to end up.

It's no exaggeration to say that, left un-fixed, the resulting
chaos would effectively ruin the Internet as a useful resource.

Unbeknown to us all, this problem was discovered some six months
ago, and a small group of experts has been working feverishly and
in secret ever since to fix the problem before the black hats got
wind of it.

Now they've done their bit, it's up to you...

***********************************************
YOU ABSOLUTELY MUST APPLY ALL AVAILABLE UPDATES
TO YOUR OPERATING SYSTEM IMMEDIATELY.
***********************************************

As a subscriber to this newsletter, that means you must apply the
patches now available from Microsoft. The recovery team that has
been working on the fix has supplied the necessary information to
all Operating System vendors, who in turn have produced the
necessary patches that will nullify this threat.

The Hacker's Nightmare contains everything you need to know about
patching, so don't delay -- bring your Operating System up to date
NOW.

If you want to know more of the story just do a Google search for
the phrase:
Internet critical DNS flaw

Just like that, don't enclose in quotes. You'll get plenty of
articles but they'll all read much the same.

-------------------------- End of Extract ------------------------

Of course, if you have cleaned up your computer with "Seven Steps
to a Clean PC" (freely available in the members area), and then
protected it with the detailed advice from "The Hacker's
Nightmare", you wouldn't need to worry about even occasional
special incidents like this.

You'd already be covered.

Best regards,
- Bill Hely
- Author: "The Hacker's Nightmare"
- "How to keep hackers, worms & other germs out of your PC"

FOR ALL CORRESPONDENCE & SUPPORT PLEASE USE THIS FORM:
http://clicks.aweber.com/y/ct/?l=Ml13p&m=1b8jr.WSOVZTAn&b=brxqruIp9JBfkmRcke4VSA

-------------------------------------------------------
In case you've forgotten... here's a reminder that you
did subscribe to my service. We forward this record to
the service provider whenever a spam report is lodged.
-------------------------------------------------------
Subscription Date : July 4, 2008

-------------------------------------------------------
"Location" is a web server's "best guess" based on
your IP address. It doesn't matter if it's wrong!
-------------------------------------------------------


PO Box 164, Clayfield, QLD 4011, AUSTRALIA

To unsubscribe or change subscriber options visit:
http://www.aweber.com/z/r/?LBzMjKxMtCxM7ByMzCyMtEa0zGxMnAys7A==

No comments: