Thursday, October 3, 2013

New York Times DNS attack.

"How To Avoid Getting Your DNS Hacked Like The New York Times"


A few weeks ago the New York Times Website suffered from a DNS attack. The hack was done by a militant group in Syria. The attack redirected viewers to the group';s website. Matthew Prince, CEO of CloudFlare, stated that we should expect criminals to use DNS attacks more in the future. The article recommends choosing a domain name registrar with a strong reputation for good security. It also recommends using a strong password for logging on to the registrar and keeping it safe.

The hackers of Times attacked attacked Melbourne IT, which registrars the name for the Times. They were able to overwrite the Times domain name information. This was surprising because Melbourne IT has a strong reputation for security. It is used by other large organizations on the web, including Twitter. Why wasn't Twitter attacked? Twitter had registrar lock in place unlike the Times. Registrar locks are restrictive controls that make it more difficult to make changes in the registrar. Many user avoid using the locks because they are a hassle.


Registrars may have security features available that the users are often not aware of. Some offer two factor authentication such as requiring both a password and a code sent to a cellphone. Another security setup is to allow changes to only be made from one IP address, such as the one from the businesses office.  

No comments:

Post a Comment