Leaks in Patch for Web Security Hole

Published: August 8, 2008

SAN FRANCISCO — Faced with the discovery of a serious flaw in the Internet’s workings, computer network administrators around the world have been rushing to fix their systems with a cobbled-together patch. Now it appears that the patch has some gaping holes.

On Friday, a Russian physicist demonstrated that the emergency fix to the basic Internet address system, known as the Domain Name System, is vulnerable and will almost certainly be exploited by criminals.

The flaw could allow Internet traffic to be secretly redirected so thieves could, for example, hijack a bank’s Web address and collect customer passwords.

Full Article: http://www.nytimes.com/2008/08/09/technology/09flaw.html?_r=1&em&oref=slogin