To those of you who are currently stuck as patch monkeys like me, hell, to everyone, this is HUGE!
Over on the
Network Security Podcast, Dan talks about how he got the cooperation of damn near every vendor out there and developed the patches that were simultaneously released today (including MS08-037) patching a "gaping hole in the DNS protocol."
He basically states that on August 6 at BlackHat Vegas, he'll be releasing proof of the vulnerability.
To prove how rediculously huge this is, when have you ever seen all the competitors work on something together
AND keep it secret?
(The
CERT advisory Word doc lists all the vendors)
GCIH - GIAC Certified Incident Handler : Passed my GCIH
