'Critical'에 해당되는 글 2건

  1. 2009.03.25 DNS Record Manipulation by CEOinIRVINE
  2. 2008.12.22 Biden to be working families czar by CEOinIRVINE

DNS Record Manipulation

IT 2009. 3. 25. 07:37

The DNS infrastructure of the Internet plays a critical role in resolving host and domain names into IP addresses. A great deal of effort has gone into ensuring that DNS works efficiently and is resilient in the face of server failures, incorrect data, or malicious attempts to disrupt the system. But even with these safeguards in place, the system is still subject to attack.

The potential benefit for someone involved in Internet fraud is huge. If you can change the DNS records for a major bank so that they point to your fake site, then you can potentially capture the account numbers and passwords of anyone who logs into the system. This approach sidesteps the need to send out email messages that try to get users to log in, but it does require a high level of technical sophistication. Two approaches have been used: DNS Poisoning and Pharming .

DNS servers around the Internet keep their tables updated by querying other more authoritative servers. The structure is a hierarchy with the network root servers at its origin. In a DNS poisoning attack, DNS servers are manipulated to fetch updated, incorrect DNS records from a server that has been set up by the attacker. This is a sophisticated type of attack to which modern DNS servers are largely immune. But successful attacks do still take place, usually by exploiting bugs in the server software. In March 2005, the SANS Internet Storm Center reported one such attack in which users were redirected to sites that contained spyware, which was then downloaded to users' computers. A detailed report on this attack can be found at http://isc.sans.org/presentations/dnspoisoning.php.

Pharming is somewhat of an umbrella term for several different approaches to manipulating DNS records. Rather than going after DNS servers directly, an attacker may try to con a domain registrar into changing the authoritative DNS record for a domain to point to their fake site. Examples of this form of social engineering have included someone simply calling a registrar on the phone and persuading them that they represent the owner of the target domain.

One example of this involved the New York-based Internet service provider Panix. In January 2005, an attacker was able to transfer control of its DNS records to a server in the United Kingdom, with all company email being redirected to a server in Canada. Even though the problem was spotted quickly, the impact on the company and its customers was substantial.

Another form of attack takes advantage of the fact that most operating systems have a local file of hostname-to-IP-address mappings that will be queried before making a remote DNS query. If such a file contains a match, then that address will be used without any further lookups. This has been exploited by a computer virus called the Banker Trojan. In addition to logging user keystrokes, it adds lines to the end of a host file on a Windows system that will redirect users to fake bank sites. Many variants of this trojan have been found.

DNS is fundamental to the operation of the Internet and usually works so well that people take it for granted. Attacks like these are a reminder that all components of the Internet are vulnerable.

Posted by CEOinIRVINE
l
Before he accepted Barack Obama's offer to join his presidential ticket, Joe Biden got a promise from Obama: that he would be there for "every critical decision," Biden said in an interview broadcast Sunday.
Vice President-elect Joe Biden will chair a new task force aimed at helping working families.

Vice President-elect Joe Biden will chair a new task force aimed at helping working families.

Speaking to ABC's "This Week," Biden said he believes the vice president's role is to provide "the best, sagest, most accurate, most insightful advice and recommendations he or she can make to a president to help them make some of the very, very important decisions that have to be made."

When Obama talked to him about the vice-presidential slot, Biden recalled, "I said, 'I don't want to be picked unless you're picking me for my judgment. I don't want to be the guy that goes out and has a specific assignment. ... I want a commitment from you that in every important decision you'll make, every critical decision, economic and political, as well as foreign policy, I'll get to be in the room.'"

Biden said President-elect Obama has kept the promise, having Biden in the room for all of his decisions about who will fill key posts in the administration.

Biden will have a specific assignment as the new administration gets under way, however. Come Inauguration Day, he will be the working families czar, so to speak.

On Sunday, Obama's transition team announced the new "White House Task Force on Working Families" -- a major initiative targeted at "raising the living standards of middle-class, working families in America."

The initiative will be chaired by Biden.

Other members of the task force will include the secretaries of labor, health and human services, and commerce, as well as the directors of the National Economic Council, the Office of Management and Budget, and the Domestic Policy Counsel, and the chair of the Council of Economic Advisors.

In an interview with ABC's "This Week," Biden said it's a "discrete job that's going to last only for a certain period of time."

"The one thing that we use as a yardstick of economic success of our administration: Is the middle class growing? Is the middle class getting better? Is the middle class no longer being left behind? And we'll look at everything from college affordability to after-school programs, the things that affect people's daily lives. I will be the guy honchoing that policy," he said.

Biden said he will have the authority to get a consensus among the task force -- but will use his relationship with the president if a consensus isn't reached.

"If in fact there is no consensus, [I'd] go to the president of the United States and say, 'Mr. President, I think we should be doing this, cabinet member so-and-so thinks that. You're going to have to resolve what it is we think we should do.' "

Obama has set up several key goals for the task force, including expanding education and training; improving work and family balance; a focus on labor standards, including workplace safety; and protecting working-family incomes and retirement security.

So what power will the new task force have in shaping policy?

According to the transition team, Biden and other members "will expedite administrative reforms, propose Executive orders, and develop legislative and public policy proposals that can be of special importance to working families."

"My administration will be absolutely committed to the future of America's middle-class and working families. They will be front and center every day in our work in the White House," said Obama in a statement. "And this Task Force will be one vehicle we will use to ensure that we never forget that commitment."

And in line with the Obama team's pledge of full transparency, the task force will issue annual reports, available online to the public.

Anna Burger, chairwoman of Change To Win -- a group made up of seven unions -- hailed the announcement.

"[It] shows that President-elect Obama is committed to middle class families and change truly is coming to Washington. Working people finally have an administration that is willing and eager to take action to address their needs," she said in a statement. "The White House Task Force on Working Families is a vital first step toward restoring our economy and making government work for working people again."

In what ABC billed as Biden's first interview as vice president-elect, Biden also discussed the role he played in helping Sen. Hillary Clinton decide to accept Obama's offer to serve as his secretary of state.

"She's one of my close friends. And when this came forward, I did talk to her. She sought me out. I sought her out as well, to assure her that this was real," he said, adding that "there was a lot swirling around" at the time.

Biden said he does not know whether he played a "key" role in helping Clinton make her decision. "It wasn't so much convincing, but I -- they wanted to know my perspective, and I gave my perspective."

Biden also said that the nation's economy "is in much worse shape than we thought it was in," and the immediate goal is to pass another stimulus package to prevent it from "absolutely tanking."

"There is going to be real significant investment," Biden said. "Whether it's $600 billion or more, or $700 billion, the clear notion is, it's a number no one thought about a year ago.

"... The single most important thing we have to do as a new administration -- to be able to have impact on all of the other things we want to do, from foreign policy to domestic policy -- is we've got to begin to stem this bleeding here and begin to stop the loss of jobs in the creation of jobs," said Biden, who also said he had spoken with members of Congress from both parties about a new stimulus.

Obama, meanwhile, has decided to increase his goal for creating new jobs after receiving economic forecasts that suggest the economy is in worse shape than had been predicted, two Democratic officials told CNN Saturday. Video Watch what Obama has to say about the economy »

The officials said Obama is increasing his goal from 2.5 million to 3 million jobs over the next two years after receiving projections early this week that suggest the recession will be deeper than expected.





Posted by CEOinIRVINE
l