We've been getting a number of comments and emails questioning our recent article on UiTM's website being 'defaced' over the weekend. So we've decided to clear up our stand on it. We belive we knew exactly what happened, but chose not to disclose it  as it might cause more havoc as other might attempt to exploit the loophole.

 

We say loophole, and not vulnerability because the actual servers are not compromised. A lot of comments we received have blamed MYNIC for the attack, as the DNS records for the domain were mysteriously pointing to the defaced page. Granted that the UiTM servers are said to be super secure, the blame had to lie elsewhere.

 

Well, DNS poisoning it was indeed - as mentioned in a number of blogs. However, the fault solely lied with UiTM as it was their DNS servers which were responding to open recursive requests.

 

DNS poisoning has been around since the 90's, but not until recently has it been used to direct users in a malicious way. While this attack might have been more "see what i can do" rather then a "i want to steal your credit card information" type of attack, it time for site administrators to start closing up their DNS servers before someone decides to poison it. TechWorld estimates that there are about 17 million DNS servers around the world vulnerable to DNS poisoning.

 

At the time of writing, UiTM's DNS Servers are still listening to open queries. 

 

Your Name:

Your Email Address:

Your Homepage:

Rate this article:
Poor Great

Comment:

BOLD

"QUOTE"

UNDERLINE