DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke
Robert Stucke (bobhex)1 HN recommender · recommended in 1 month, 2013-2016
20K views · 13 years ago · talk · evergreen
A DEFCON 21 talk by Robert Stucke on DNS errors caused by single-bit flips, which lead to requests for misspelled domains. It shows real-world data on bitsquatting.
Cited in threads on ECC memory, CPU reliability, and bitsquatting as evidence that bit flips cause real DNS misdirection.
45:14DEFCON 19: Bit-squatting: DNS Hijacking Without Exploitation (w speaker)
Christiaan008
24K views • 14 years ago
45:14DEF CON 19 - Artem Dinaburg - Bit-squatting: DNS Hijacking Without Exploitation
DEFCONConference
4K views • 13 years ago
48:47Massscanning the Internet - Defcon 22 (2014)
vissago
109K views • 12 years ago
24:32Defcon 20 - Dan Tentler - Drinking from the caffeine firehose we know as shodan
vissago
182K views • 14 years ago
48:29DEF CON 30 - Sam Bent - Tor - Darknet Opsec By a Veteran Darknet Vendor
DEFCONConference
557K views • 4 years ago
1:09:16Defeating Ssl Using Sslstrip (Marlinspike Blackhat)
TheSecurityTube
61K views • 14 years ago
42:36Defcon 21 - The Secret Life of SIM Cards
HackersOnBoard
708K views • 12 years ago
1:41:27Defcon 21 - Decapping Chips The Strike Easy Hard Way
HackersOnBoard
69K views • 12 years ago
50:56DEFCON 20: Hacker + Airplanes = No Good Can Come Of This
Christiaan008
226K views • 13 years ago
29:01Netanel Rubin: The Perl Jam: Exploiting a 20 Year-old Vulnerability
media.ccc.de
8K views • 11 years ago
46:04DEF CON 26 - Christopher Domas - GOD MODE UNLOCKED Hardware Backdoors in redacted x86
DEFCONConference
86K views • 8 years ago
52:59David Kriesel: Lies, damned lies and scans
Free and Open Source Software Conference (FrOSCon) e.V.
58K views • 11 years ago
53:09DEF CON 23 - Zoz - And That's How I Lost My Other Eye...Explorations in Data Destruction (Fixed)
DEFCONConference
533K views • 11 years ago
52:43DEFCON 19: Introduction to Tamper Evident Devices
Christiaan008
352K views • 15 years ago
49:47DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
14K views • 9 years ago
50:59DEF CON 22 - Adrian Crenshaw- Dropping Docs on Darknets: How People Got Caught
DEFCONConference
219K views • 11 years ago
43:40DEF CON 29 - Richard Henderson - Old MacDonald Had a Barcode, E I E I CAR
DEFCONConference
18K views • 5 years ago
44:29Breaking the x86 Instruction Set
Black Hat
381K views • 9 years ago
33:41OffensiveCon19 - Alex Ionescu - Keynote - Reversing Without Reversing
OffensiveCon
20K views • 7 years ago
5:22Lest We Remember: Cold Boot Attacks on Encryption Keys
pucitp
749K views • 18 years ago
4 comments from Hacker News
>We have registered all possible domains that are one bit flip away from ubuntu.com and debian.org. We would like to hand these domains over to the correct authority. Please get in touch if you think you are one. Aha! link is a talk about "bitsquatting" along the same lines. I'm sure I've seen a newer talk about it too Edit: ▶ this video is the other video, which also looks at the behaviour of various clients
This cannot possibly be right. There was a DC21 talk regarding DNS request misfires due to bit flips in non-ECC DRAM, and the researcher was able to collect a surprisingly large number of requests on the basis of this. Edit: found it: ▶ this video
It was posted here on HN a few days ago, but you might find the DEFCON talk on single bit domain errors relevant: ▶ this video In summary, some data centers are run hotter than recommended, which leads to a lot of mostly ignored domain resolution errors, which leads to a security risk.
The homoglyph attack is a very old and often abused technique. A related, though not identical one, is bit flipping where a single character is swapped in a domain name and you prey on those who make misspellings. It turns out, however, that it isn't even necessary for someone to make a blatant error like that... ▶ this video [DEFCON 21: DNS May Be Hazardous To Your Health]