Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Daniel Kalchev
On 23.10.13 22:17, Haya Shulman wrote: Sorry for the brief description earlier, fyi, a slightly more elaborate design: The idea is to replace a single middle fragment, e.g., given n fragments, for n>2, we replace some fragment, s.t., 1< i < n. Assume n=3 (and also assume, for simplicity, that

Re: [dns-operations] Microsoft

2013-10-23 Thread Noel Butler
Just a quick followup After reading Vernon's suggestion back when this thread was current, I enacted TXT :v=DMARC1;p=none;pct=100: finally, taken nearly a month, but they have stopped :) On Mon, 2013-09-30 at 08:06 +1000, Noel Butler wrote: > On Sun, 2013-09-29 at 03:53 -0400, Jim Popovitch wro

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Vernon Schryver
> From: Haya Shulman > > I'm puzzled by the explanation of Socket Overloading in > > https://sites.google.com/site/hayashulman/files/NIC-derandomisation.pdf > > I understand it to say that Linux on a 3 GHz CPU receiving 25,000 > > packets/second (500 bytes @ 100 Mbit/sec) spends so much time in >

Re: [dns-operations] It's begun...

2013-10-23 Thread Bill Woodcock
On Oct 23, 2013, at 1:11 PM, Rick Wesson wrote: > Does ICANN have a root-zone announce list? I remember hearing about it being > developed, but can't locate the list subscribe. Here's how I found out about it: http://blog.icann.org/2013/10/first-new-gtlds-get-the-green-light-for-delegation/

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Haya Shulman
> I'm puzzled by the explanation of Socket Overloading in > https://sites.google.com/site/hayashulman/files/NIC-derandomisation.pdf > I understand it to say that Linux on a 3 GHz CPU receiving 25,000 > packets/second (500 bytes @ 100 Mbit/sec) spends so much time in > interrupt code that low level

Re: [dns-operations] It's begun...

2013-10-23 Thread Phil Regnauld
Kim Davies (kim.davies) writes: > For the root zone, it would be good to get some feedback on what level of > granularity of notifications would be most useful. There is a spectrum of > notifications possible — we could notify of every change in the root zone and > root zone database, which woul

Re: [dns-operations] It's begun...

2013-10-23 Thread Kim Davies
On Oct 23, 2013, at 1:11 PM, Rick Wesson mailto:r...@support-intelligence.com>> wrote: Does ICANN have a root-zone announce list? I remember hearing about it being developed, but can't locate the list subscribe. We don't have a list yet, partly because we have a number of new notification ser

Re: [dns-operations] It's begun...

2013-10-23 Thread Peter Koch
On Wed, Oct 23, 2013 at 04:01:09PM -0400, Edward Lewis wrote: > My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added > between 1800 and 1900 UTC. -. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2013102300 1800 900 604800 86400 +.

Re: [dns-operations] It's begun...

2013-10-23 Thread SM
Hi Ed, At 13:01 23-10-2013, Edward Lewis wrote: My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC. http://blog.icann.org/2013/10/first-new-gtlds-get-the-green-light-for-delegation/ Regards, -sm _

Re: [dns-operations] It's begun...

2013-10-23 Thread Jothan Frakes
Rick- This also may be helpful from an advanced preparation standpoint, which may be more practical for yours and others on the list purposes: http://mm.icann.org/pipermail/gtldnotification/ ​They send an announce upon contracting so that folks can get an advance notice on upcoming strings pre-de

Re: [dns-operations] It's begun...

2013-10-23 Thread Michele Neylon - Blacknight
Edward Yes - they've been delegated: http://blog.blacknight.com/new-tlds-almost.html Regards Michele -- Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Domains http://www.blacknight.co/ http://blog.blacknight.com/ http://www.technology.ie Intl. +353 (0) 59 9183072 Locall: 1850 9

Re: [dns-operations] It's begun...

2013-10-23 Thread Joe Abley
On Oct 23, 2013, at 16:11, Rick Wesson wrote: > Does ICANN have a root-zone announce list? I remember hearing about it being > developed, but can't locate the list subscribe. I don't believe it does, although I remember Kim Davies telling me it was on his list of things to set up. Signalling

Re: [dns-operations] It's begun...

2013-10-23 Thread Dan York
Ed, ICANN put up a blog post about this earlier today at: http://blog.icann.org/2013/10/dawn-of-a-new-internet-era/ after putting one up on Monday saying the delegation had been requested: http://blog.icann.org/2013/10/first-new-gtlds-get-the-green-light-for-delegation/ ICANN also issued a new

Re: [dns-operations] It's begun...

2013-10-23 Thread McTim
ICANN blogged about this and made the announcement in Bali at the IGF very early this a.m. They weren't there when I looked earlier, thanks for the heads up! On Wed, Oct 23, 2013 at 4:01 PM, Edward Lewis wrote: > My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added > betwe

Re: [dns-operations] It's begun...

2013-10-23 Thread Rick Wesson
Does ICANN have a root-zone announce list? I remember hearing about it being developed, but can't locate the list subscribe. -rick On Wed, Oct 23, 2013 at 1:01 PM, Edward Lewis wrote: > My sensors show 4 new gTLDs in the last hour or so...IDN, > non-ccTLD...added between 1800 and 1900 UTC. >

[dns-operations] It's begun...

2013-10-23 Thread Edward Lewis
My sensors show 4 new gTLDs in the last hour or so...IDN, non-ccTLD...added between 1800 and 1900 UTC. Anyone else see this? -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis NeuStarYou can leave a voice message at +1-571-43

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Haya Shulman
> > I see I'm stupid for not seeing that in the first message. I did search > for 'http' but somehow didn't see the URL. But why not simply repeat > the URL for people like me? Why not the URL of the paper at the > beginning instead of a list of papers? > https://sites.google.com/site/hayashulman/f

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Haya Shulman
Nice work Brian and the CZ folks! Although you and me talked about this at CNS, but it was too stressed in time, so I have few questions: 1. Which resolvers (and versions) did you run the attack against? 2. Which responses' type (and records) did you try to poison? e.g., referral, answer, NXDOMAIN

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Haya Shulman
On Tue, Oct 22, 2013 at 11:15 PM, Paul Vixie wrote: > Haya Shulman wrote: > > > >> > > so if i add "first weaponized by Haya Shulman" this would settle the >> > > matter? >> > >> > Thank you, can you please use Amir Herzberg and Haya Shulman (I >> > collaborated on this attack together with my p

Re: [dns-operations] summary of recent vulnerabilities in DNS security.

2013-10-23 Thread Dickson, Brian
Paul Vixie wrote: Haya Shulman wrote: > > so if i add "first weaponized by Haya Shulman" this would settle the > > matter? > > Thank you, can you please use Amir Herzberg and Haya Shulman (I > collaborated on this attack together with my phd advisor Amir Herzberg). it shall be done. Thank you.