Apple finally fixes DNS bug

posted Sep 15th 2008 2:24pm by
filed under: iphone hacks, macs hacks, news, security hacks

With today’s release of Security Update 2008-006 Apple has finally addressed this summer’s DNS bug. In their previous update they fixed BIND, but that only affects people running servers. Now, they’ve updated mDNSResponder. Clients are no longer susceptible to DNS cache poisoning attacks thanks to the inclusion of source port randomization.

The Security Update addresses some other interesting bugs. Time Machine was saving sensitive logs without using the proper permissions, so any user could view them.

[photo: edans]



4 Responses to Apple finally fixes DNS bug

  • psychcf says:
    September 15, 2008 at 2:58 pm

    *golf claps*

    Reply Report comment
  • Steve Shockley says:
    September 15, 2008 at 4:13 pm

    Clients are less susceptible to DNS cache poisoning with source port randomization, but not completely immune.

    Reply Report comment
  • cow says:
    September 15, 2008 at 4:43 pm

    Because it’s on the iPhone it must be important!

    Grow up, get a phone that works.

    Reply Report comment
  • Private Label Rights says:
    September 1, 2009 at 4:53 pm

    Def some good info here – keep it coming

    Reply Report comment

    • Leave a Reply

    XHTML: You can use these tags: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <pre> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Hack a Day serves up fresh hacks each day, every day from around the web as well as hacking related news.

    Send us your hacks










         



    Hacks

    Resources