BugTraq
[Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Apr 13 2006 05:29PM
Dave Korn (davek_throwaway hotmail com) (2 replies)
Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Apr 14 2006 12:13AM
Joachim Schipper (j schipper math uu nl) (1 replies)
RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Apr 19 2006 03:56PM
Mario Contestabile (marioc computer org) (1 replies)
RE: Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Apr 20 2006 08:04AM
Nick FitzGerald (nick virus-l demon co uk)
Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Apr 13 2006 05:36PM
Brandon S. Allbery KF8NH (allbery ece cmu edu) (2 replies)
Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Apr 13 2006 06:59PM
Stan Bubrouski (stan bubrouski gmail com)
On 4/13/06, Brandon S. Allbery KF8NH <allbery (at) ece.cmu (dot) edu [email concealed]> wrote:
>
> On Apr 13, 2006, at 1:29 , Dave Korn wrote:
>
> > Hey, guess what I just found out: Microsoft have deliberately
> > sabotaged
> > their DNS client's hosts table lookup functionality.
>
> I thought this was part of avoiding malware attempts to block Windows
> Update.

How bypassing blocking of go.microsoft.com affects windowsupdate I
don't know. Been a while since I looked at windows update at all, but
doesn't it download files from mirrors anyways? And even if it didn't
are the files actually downloaded from go.microsoft.com? Either way
it appears Dave is right, which makes me wonder if there isn't another
greater purpose aside form WMP updates. Like assured tracking of
users for other nefarious and monopolistic purposes.

Best Regards,
sb

>
> --
> brandon s. allbery [linux,solaris,freebsd,perl]
> allbery (at) kf8nh (dot) com [email concealed]
> system administrator [openafs,heimdal,too many hats]
> allbery (at) ece.cmu (dot) edu [email concealed]
> electrical and computer engineering, carnegie mellon university
> KF8NH
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus