Wednesday, December 10, 2008

the shell game of websites

This is one of those more advanced issues. If you know all about how individuals' browsers can find a website - just skip to the link

Otherwise - consider your computer is like you when you want to find out a phone number, or an address for a business you've heard of - but don't know the details about. As an individual, you trust the phone book to give you a correct number. As a computer, you trust the dynamic name space (DNS) lookup to give you the right address. For computers, this is the IP (internet protocol) address - looking something like 209.131.36.158 (this is the address for www.yahoo.com - if you go to your command window and type "ping www.yahoo.com" you'll see it along with the response time)

SO now that you know how the computer finds websites ... what would be the harm if a fraudster was to change the IP address? well - you could type in www.yahoo.com and instead of going to the correct address - you could be re-routed to a "yahoo" looking site hosted only by the badguys. ... not good!

for more of the details - read below!


New trojan in mass DNS hijack • The Register

No comments: