OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup

From: dumdidumdideldey (user05kyberwelt.de)
Date: Wed Apr 12 2006 - 22:39:57 CDT


hi

A.L.M.Buxeylboro.ac.uk wrote:
> hi,
>
> ...makes me wonder what happens if/when they need to change the
> IP address of go.microsoft.com
>
> many many people have already been burnt by the hardcoding of
> addresses/IPs into their applications.

thats the point. its not the ip which is hardcoded. its the
fqdn which is extempted from being lookud up in the local
hosts-file.
DaveK is absolutely right with his expressions about this behaviour.
i neither do believe this is an attempt to prevent some malware
from interrupting ms-autoupdate. you see ... even microsoft
would never be that shortsighted!!! (errm ... at least i hope so)

virtual

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/