PDA

View Full Version : Online Armor: Protect against DNS spoofing

Escalader
May 27th, 2008, 09:57 AM
For information on how and why OA protects against DNS spoofing please see the following:

http://www.tallemu.com/dns_checker.html

IMHO, these days this as important as any feature in our security setups. More so than a fancy GUI even;D
Mrkvonic
May 27th, 2008, 02:21 PM
Hello,
And if the trusted third-party server gets owned?
It's a neverending cycle... You're as good as you can get with your ISP.
Mrk
Escalader
June 8th, 2008, 12:41 PM
-{ Quote: "Hello,
And if the trusted third-party server gets owned?
It's a neverending cycle... You're as good as you can get with your ISP.
Mrk" }-

Hello Mrk:

Yes, if that happens the card deck folds!

Not to justify it but I use it selectively only on banking and updater sites.

Users can go wacko with this stuff! It's a cottage industry!

My policy as you know is to throw traps in the baddies way. Why make it easy for them.?

Mean while keep that clean image ready!

BTW did you try xp sp3 or are you Linux 100%
Mrkvonic
June 8th, 2008, 01:14 PM
Hello,

Tried SP3 on a test machine and on another comp at work. Home, no problems, at work, SP3 didn't like some legacy IBM applications.

I'm not 100% Linux, I'm enjoying the best of both worlds, that's the beaty. I usually use Windows for casual tasks and Linux for geeking. Since I'm writing a book, I'm quite a lot in front of the CentOS 5 terminal...

Mrk

P.S. The only way to avoid DNS spoofing is to use IPs, but then there's no guarantee the site hasn't changed the IP or been hacked ... it's a neverending cycle ... so relax ...
Escalader
June 8th, 2008, 05:33 PM
-{ Quote: "Hello,

Tried SP3 on a test machine and on another comp at work. Home, no problems, at work, SP3 didn't like some legacy IBM applications.

I'm not 100% Linux, I'm enjoying the best of both worlds, that's the beaty. I usually use Windows for casual tasks and Linux for geeking. Since I'm writing a book, I'm quite a lot in front of the CentOS 5 terminal...

Mrk

P.S. The only way to avoid DNS spoofing is to use IPs, but then there's no guarantee the site hasn't changed the IP or been hacked ... it's a neverending cycle ... so relax ..." }-

Hey Mrk!

I AM RELAXED!!!!!!!:o :-X :-X 8) ;D