With all the brouhaha surrounding the DNS flaw that Dan Kaminsky has hinted
at and others have 'accidentally' disclosed or stumbled upon, what kind of
advice would you be giving to home users?

Obviously the whole push is towards patching and trying to do that before
the evil ones work out how to create an exploit(maybe they already have
<shrug>).
But, that means home users are left to wonder whether their ISP has patched.
What should they do? Ask their ISP? Try and run an exploit against their
ISP's DNS?(joke...I'm joking..sheesh, lighten up).

I've tried explaining it to some people here and used a simplified version
of the deli ticket thing but people's eyes still glaze over. So...is it even
worth me worrying? Is this a rhetorical post...?
Yes, I know that the hole has been there for a long time and no-one
(really)worried about it before etc etc.

[ reply ]