Researcher Dan Kaminsky today will show attendees of the RSA security conference how a Web-based attack can be used to seize control of routers, notes PC World. Kaminsky has spent the past year studying how browser design flaws allow someone to abuse the Domain Name System (DNS) in order to get around firewalls. According to Kaminsky, the “DNS rebinding attack” (so far just theory never demonstrated in the real world) should work on many major routers and some printers:

Of course changing your default router password might just be a good idea, you think?

OpenDNS today is supposed to offer users of its free service an easy way to prevent this type of attack.
read comment(s)