Major DNS security Flaw

AP newswire:
11 charged in connection with credit card fraud

updated 6:26 p.m. ET Aug. 5, 2008
SAN FRANCISCO - A giant vulnerability in the Internet's design is allowing criminals to silently redirect traffic to Web sites under their control. The problem is being fixed, but its extent remains unknown and many people are still at risk.

The gaping security hole enables a scam that targets ordinary people typing in a legitimate Web address. It happens because hackers are now able to manipulate the machines that help computers find Web sites. If the trick is done properly, computer users are unlikely to detect whether they've landed at a legitimate site or an evil double maintained by someone bent on fraud.

Security experts fear an open season for virus attacks and identity-fraud scams!

It's kind of like saying,

A patch has been created for this vulnerability and applied to DNS servers.

My local ISP applied the patch two weeks ago. And my work fixed their DNS servers as soon as the patch came out.

I think this is just a warning to make be sure they are at the correct site before entering any details.

It is a very scary vulnerability thuo. I hope this is the correct UDONMAP web site.

Just how widespread the attacks have been is hard to tell. The evidence of tampering can disappear before an Internet provider even learns there's a problem.

The patching of DNS servers has accelerated. Kaminsky said 84 percent of the servers he tested at the beginning of the process were vulnerable. That has dropped to around 31 percent.