Black Ops Of Dns, Part Deux presented at ShmooCon 2005

by Dan Kaminsky (Doxpara ),

Tags: DNS


Summary : DNS is a routing, caching, globally deployed overlay network on top of the Internet. Last year's Black Ops of DNS discussed rudimentary mechanisms for manipulating that network to achieve low bandwidth but insidiously firewall-penetrating connectivity anywhere and everywhere. This year, we expand this research to show how extensive, bandwidth amplifying routes can be deployed across the two million DNS servers out there -- and demonstrate an aggressively loss tolerant protocol that can extract high speed connectivity from what's usually considered to be the lowest capacity protocol on the Internet.