Major internet security flaw

testas

Aku baru dapat email dari bos aku... and security expert baru discover this issue.. to all system administrator please take proper action... pada aku security issue kali ni paling worst and paling dangerous sekali.. link



By JORDAN ROBERTSON, AP Technology WriterThu Aug  7,  6:46 AM ET
                                                                                                        
A newly discovered flaw in the Internet's core infrastructure notonly permits hackers to force people to visit Web sites they didn'twant to, it also allows them to intercept e-mail messages, theresearcher who discovered the bug said Wednesday.
Considering the silent nature of the attack and the sensitive natureof a lot of electronic correspondence, the potential for damage fromthis second security flaw is high. But there's no evidence yet thatthis method of targeting e-mail has been used in a successful attack.
Dan Kaminsky of Seattle-based security consultant IOActive Inc.exposed a giant vulnerability in the Internet's design that, in onecase, allowed hackers to reroute some computer users in Texas to a fakeGoogle.com site loaded with automated advertisement-clicking programs,a scam to generate profits for the hackers from those clicks.
The flaw wasn't in the site itself, it was in the back-end machines responsible for guiding computers to that site.
The vulnerability Kaminsky found is especially insidious because itallows criminals to tamper with machines whose reliability andtrustworthiness is critical for the Internet to function properly.
Kaminsky, who spoke Wednesday at the Black Hat hacker conference inLas Vegas, has given few details publicly about the vulnerability hefound in the Domain Name System (DNS), a network of servers used toconnect computers to Web sites.
He remained tightlipped so that Internet providers would have timeto fix their machines. Many have done that, but others have delayed,leaving some people at risk.
Major vendors like Microsoft Corp., Cisco Systems Inc., SunMicrosystems Inc. and others have issued patches