• :
  • Member Center
  • :
  • Make This Your Home Page
  • :
  • Special Offers




Computer Corner

Comments | Recommended

Scrambling to fix an Internet security hole

02:27 PM CDT on Wednesday, August 6, 2008

By WALT ZWIRKO / WFAA.com

Computer Corner

There's a big (and mostly hidden) problem with the Internet that you should be aware of.

While it's kind of technical, it is important that you understand how it works so you can guard against its consequences.

Let's look at what happens when you go to our Web site:

First, you type "wfaa.com" into the address bar of your browser. This is only a request that doesn't actually take you directly to WFAA.com.

It goes instead to a computer on the Internet called a domain name server. Think of it as a big computerized phone book that translates your request into the actual Web address of WFAA.com (or any other Web site), which is actually a series of numbers:

• 147.136.250.33

The name server consults its phone book and points your browser to the numeric address that leads to WFAA.com.

All this happens almost instantaneously, but what happens if hackers intercept your request and instead redirect you to their own site?

And what they design it to look just like WFAA.com with the intent of stealing your personal information?

That may be a bit far-fetched, but there are more attractive targets for malicious hackers — like bank and credit card sites. These are places where a skilled but evil programmer can intercept account numbers and passwords.

About a month ago, Dan Kaminsky, a researcher at Seattle-based security firm IOActive , revealed that he had found a weakness in many Internet name servers that makes this doomsday scenario possible.

On his personal blog , Kaminsky even offers a tool that lets you instantly check whether the name server that your computer is connected to right now is vulnerable to malicious activity.

• LINK: Dan Kaminsky's DNS checker

The good news is that the companies that operate the Internet's backbone are on their way to fixing this problem. But what can you do to protect yourself in the meantime?

The best way is to make sure you have the latest version of your Internet browser. For most, that means Internet Explorer 7 from Microsoft or Firefox 3 from Mozilla. Both are free downloads.

You can check to see which version you're using now by clicking on "Help" and then "About" in the tool bar at the top of your browser..

These new-generation browsers are equipped with updated technology that color-codes the address bar to let you know when you are sending personal information to a verified Web site.

Green is OK; red means danger.

That's not all these updated browsers will do for you. Internet Explorer 7 will pop up a warning screen whenever you connect to a site that may be "phishing" for your personal information.

Firefox 3 displays this warning when it intercepts a suspected "attack" site.

Firefox 3 will issue warnings for both "phishing" sites and other known "attack" Web sites.

These features are free and invaluable ways to maintain safe surfing.

So you may be asking: If it's been a month since this Internet security problem was first revealed, is it close to being fixed?

Dan Kaminsky said there is evidence that the "name servers" directing Internet traffic around the globe are in the process of being patched by the vendors of the hardware.

Kaminsky said 84 percent of those servers were vulnerable when he first observed the problem; the total is down 31 percent now.

But the Internet is a moving target, and you can be sure that malicious hackers are even now looking for the next way to weasel their way to your personal information.

Watch Computer Corner every week on News 8 Midday at noon Wednesdays, or online any time.

E-mail askwalt@wfaa.com

Popular Stories