DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke
Robert Stucke (bobhex)1 HN recommender · recommended in 1 month, 2013–2016
talk · intermediate · evergreen · 2013–2016 on HN
A DEFCON 21 talk by Robert Stucke on DNS errors caused by single-bit flips, which lead to requests for misspelled domains. It shows real-world data on bitsquatting.
Cited in threads on ECC memory, CPU reliability, and bitsquatting as evidence that bit flips cause real DNS misdirection.
Up next
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
9 mo on HN28c3: The Science of Insecurity
28c3
9 HN recommender · 2012–2024
8 mo on HNDEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome
DEFCONConference
11 HN recommender · 2017–2023
7 mo on HNElevator Hacking: From the Pit to the Penthouse
DeviantOllam
9 HN recommender · 2014–2026
7 mo on HNCompiling C to printable x86, to make an executable research paper
suckerpinch
8 HN recommender · 2018–2023
7 mo on HNBreak Me00 The MoVfuscator Turning mov into a soul crushing RE nightmare Christopher Domas
Adrian Crenshaw
6 HN recommender · 2017–2026
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
7 mo on HN27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
8 HN recommender · 2011–2024
7 mo on HNFrank Abagnale | Catch Me If You Can | Talks at Google
Talks at Google
8 HN recommender · 2018–2023
4 comments from Hacker News
It was posted here on HN a few days ago, but you might find the DEFCON talk on single bit domain errors relevant: ▶ this video In summary, some data centers are run hotter than recommended, which leads to a lot of mostly ignored domain resolution errors, which leads to a security risk.
>We have registered all possible domains that are one bit flip away from ubuntu.com and debian.org. We would like to hand these domains over to the correct authority. Please get in touch if you think you are one. Aha! link is a talk about "bitsquatting" along the same lines. I'm sure I've seen a newer talk about it too Edit: ▶ this video is the other video, which also looks at the behaviour of various clients
This cannot possibly be right. There was a DC21 talk regarding DNS request misfires due to bit flips in non-ECC DRAM, and the researcher was able to collect a surprisingly large number of requests on the basis of this. Edit: found it: ▶ this video
The homoglyph attack is a very old and often abused technique. A related, though not identical one, is bit flipping where a single character is swapped in a domain name and you prey on those who make misspellings. It turns out, however, that it isn't even necessary for someone to make a blatant error like that... ▶ this video [DEFCON 21: DNS May Be Hazardous To Your Health]