Talks to Watch

DEFCON 21 - DNS May Be Hazardous to Your Health - Robert Stucke

20K views · Oct 30, 2013 · 37:02 · 1 HN recommender · 4 mentions · discussed 2013–2016

A DEFCON 21 talk by Robert Stucke on DNS errors caused by single-bit flips, which lead to requests for misspelled domains. It shows real-world data on bitsquatting.

Why Hacker News points people here: Cited in threads on ECC memory, CPU reliability, and bitsquatting as evidence that bit flips cause real DNS misdirection.

“you might find the DEFCON talk on single bit domain errors relevant”HN comment, 2013

What Hacker News said 4

RecommendsaimhbDec 2013

“you might find the DEFCON talk on single bit domain errors relevant”

Talk on single-bit domain errors from hot data centers.

Full comment

It was posted here on HN a few days ago, but you might find the DEFCON talk on single bit domain errors relevant: this video In summary, some data centers are run hotter than recommended, which leads to a lot of mostly ignored domain resolution errors, which leads to a security risk.

in “CPU reliability – Linus Torvalds (2007)” · view on HN
Cites itvezzy-fnordDec 2013

DEFCON talk on bit-flip domain misspellings.

Full comment

The homoglyph attack is a very old and often abused technique. A related, though not identical one, is bit flipping where a single character is swapped in a domain name and you prey on those who make misspellings. It turns out, however, that it isn't even necessary for someone to make a blatant error like that... this video [DEFCON 21: DNS May Be Hazardous To Your Health]

Cites itvox_mollisNov 2015

Talk showing DNS misfires from non-ECC bit flips.

Full comment

This cannot possibly be right. There was a DC21 talk regarding DNS request misfires due to bit flips in non-ECC DRAM, and the researcher was able to collect a surprisingly large number of requests on the basis of this. Edit: found it: this video

Cites itvoltagex_Aug 2016

Talk on bitsquatting and client behaviour.

Full comment

>We have registered all possible domains that are one bit flip away from ubuntu.com and debian.org. We would like to hand these domains over to the correct authority. Please get in touch if you think you are one. Aha! link is a talk about "bitsquatting" along the same lines. I'm sure I've seen a newer talk about it too Edit: this video is the other video, which also looks at the behaviour of various clients

in “Flip Feng Shui: A new cross-VM exploitation vector” · view on HN