A lot has been written about the recently discovered DNS vulnerability (including this article we wrote three weeks ago.) But it seems that plenty of DNS servers haven’t been updated. This means that many Internet users are still at risk from this flaw, and you simply won’t know when you type a URL or choose a bookmark whether it’s going to the correct site. If you’re trying to go to a bank, PayPal, eBay or another site where you may need to enter sensitive personal information, you may get hijacked with potentially serious consequences.
Security researcher Dan Kaminsky, who uncovered this vulnerability, runs a blog where he discusses this and other issues, but also offers a way to check your DNS server. To test your DNS server, just click the Check My DNS button in the right-hand column of the site.
In most cases, this server is run by your ISP; if it turns out there’s a problem, you should contact your ISP and prod them to patch their server. At least, if your DNS server is at risk, don’t visit any site where you need to enter sensitive information.
