Domain Name System (DNS) under attack

... Content suppressed by ://URLFAN, for full article visit source ...

Here’s a brief explanation of what is involved. When you enter something like “www.microsoft.com” into your browser, you are not entering the real Internet address of Microsoft. Actual Internet addresses are numbers and the URLs that we humans use are for convenience since they are much easier to remember than a bunch of numbers. Thus when your browser sends off “www.microsoft.com” to your ISP, the URL has to be translated into the actual numerical address. All ISPs have computers especially dedicated to this task, called domain name servers.

Unfortunately, it was discovered that there are bad security flaws in the way that DNS works and ISPs have been urged to fix their servers for some time. The process is not trivial and there are fears that many domain name servers remain unpatched. The New York Times describes the problem:

... Content suppressed by ://URLFAN, for full article visit source ...

Check with your ISP to make sure that it has updated the DNS servers. You can also run a check at this link to see if your DNS is patched. This site belongs to Dan Kaminsky who was the discoverer of the DNS problem. He has news on his site of recent developments.

In fact, you do not have to use the DNS servers from your ISP but can switch to any other server that will allow you. If you are using a router, it is fairly easy to change the DNS. The exact details depend on your particular router.One well-known free service is OpenDNS. I became dissatisfied with the responsiveness of Verizon’s DNS long ago and have been happily using OpenDNS for some time. This service has applied the security patches.