<div dir="ltr"><div><div dir="ltr" class="m_-7432709282589158538gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<table class="m_-7432709282589158538backgroundTable" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="left" valign="top">
<table cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="border-top:0px solid rgb(0,0,0);border-bottom:1px solid rgb(255,255,255);background-color:rgb(255,255,255);text-align:center" align="center"><span style="font-size:10px;color:rgb(96,96,96);line-height:200%;font-family:verdana;text-decoration:none">Email not displaying correctly? <a href="http://www.oplin.org/4cast/" style="font-size:10px;color:rgb(0,0,255);line-height:200%;font-family:verdana;text-decoration:none" target="_blank">View it in your browser.</a></span></td>
</tr>
<tr>
<td style="border-top:0px solid rgb(51,51,51);border-bottom:0px solid rgb(255,255,255);background-color:rgb(255,255,255)">
<center><a><img id="m_-7432709282589158538editableImg1" src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/4cast_email_header.png" title="OPLIN" alt="OPLIN 4Cast" align="middle" border="0"></a></center>
</td>
</tr>
</tbody>
</table>
<table style="width:763px;height:877px" bgcolor="#ffffff" cellpadding="20" cellspacing="0">
<tbody>
<tr>
<td style="font-size:12px;color:rgb(0,0,0);line-height:150%;font-family:'Gothic Sans',sans-serif" bgcolor="#ffffff" valign="top">
<p> <span style="font-size:20px;font-weight:bold;color:rgb(0,0,0);font-family:arial;line-height:110%">OPLIN 4Cast #630: Hacking the Internet's Phonebook</span><br>
<span style="font-size:11px;font-weight:normal;color:rgb(102,102,102);font-style:italic;font-family:arial">January 23rd, 2019</span></p>
<p style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><img align="left" class="m_-7432709282589158538alignleft m_-7432709282589158538size-full m_-7432709282589158538wp-image-6101" src="https://4cast.oplin.org/wp-content/uploads/2019/01/115476901_s.jpg" alt="Close-up of writing fingers of hacker, spy or censor. Detail of a book with Secure DNS lettering on background. Digitization and cyber security" width="130" height="94" style="padding-right:14px;padding-top:4px;padding-bottom:4px"> There are two big breaking stories about exploits involving DNS -- Domain Name Service, the "<a href="https://www.cloudflare.com/learning/dns/what-is-dns/" target="_blank">phonebook of the internet</a>." One involves a type of spamming attack facilitated by a vulnerability in how organizations manage their internet domains, specifically at GoDaddy. <br><br>(Moral: make sure <em>all</em> your domains, including the "parked" ones that you bought <em>just in case</em>, are fully configured on your DNS host. Hopefully it goes without saying to not let them expire.) <br><br>The other big DNS story stems from <a href="https://www.fireeye.com/blog/threat-research/2019/01/global-dns-hijacking-campaign-dns-record-manipulation-at-scale.html" target="_blank">a FireEye report</a> on a global DNS hacking campaign affecting "dozens of domains belonging to government, telecommunications and internet infrastructure entities across the Middle East and North Africa, Europe and North America." <br><br>(Moral: use strong passwords and authentication, and don't re-use them across different services. Be particularly careful of the password that controls your agency's name on the internet.)</p><ul>
<li style="list-style-type:none">
</li><li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://arstechnica.com/information-technology/2019/01/godaddy-weakness-let-bomb-threat-scammers-hijack-thousands-of-big-name-domains/" target="_blank">GoDaddy weakness let bomb threat scammers hijack thousands of big-name domains</a> [<em>Ars Technica</em>] "The company responded with the following statement: <em>After investigating the matter, our team confirmed that a threat actor(s) abused our DNS setup process. We’ve identified a fix and are taking corrective action immediately</em>."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://krebsonsecurity.com/2019/01/bomb-threat-sextortion-spammers-abused-weakness-at-godaddy-com/" target="_blank">Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com</a> (<em>Krebs on Security</em>) "Experts warn this same weakness that let spammers hijack domains tied to GoDaddy also affects a great many other major Internet service providers, and is actively being abused to launch phishing and malware attacks...."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://www.wired.com/story/iran-dns-hijacking/" target="_blank">A Worldwide Hacking Spree Uses DNS Trickery to Nab Data</a> (<em>Wired</em>) "DNS hijacking is a relatively easy way to still access internal data without ever needing to actually get inside an organization’s systems."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://boingboing.net/2019/01/22/dhs-dns.html" target="_blank">DHS issues security order after DNS hijack attacks from Iran, 6 agency domains already affected</a> (<em>Boing Boing</em>) "DHS says managers need to audit DNS records for unauthorized edits, update their passwords, and turn on multi-factor authentication for all accounts through which DNS records could be altered. Agencies have two weeks to implement the directives."</li>
</ul>
<div style="text-align:left"> </div>
<p style="text-align:left;font-size:20px;font-family:arial;line-height:110%"><small><strong><em>From the <a href="http://ohioweblibrary.org" target="_blank">Ohio Web Library</a>:</em></strong></small><br>
</p>
<div style="text-align:justify;font-size:16px;font-family:arial;line-height:110%">
<ul>
<li>Preimesberger, Chris. “<a href="http://proxy.oplin.org:2054/login.aspx?direct=true&db=voh&AN=134090336" target="_blank">Six Things Enterprises Should Know About Securing Their DNS</a>.” <em>EWeek</em>, Jan. 2019, p. N.PAG</li>
<li>Robertson, Jordan. “<a href="https://proxy.oplin.org:2111/login.aspx?direct=true&db=buh&AN=112541447&site=ehost-live" target="_blank">E-Mail Spam Goes Artisanal</a>.” <em>Bloomberg Businessweek</em>, no. 4461, Feb. 2016, pp. 30–31. </li>
<li>Guidry, Martin. "<a href="https://www.lynda.com/PowerShell-tutorials/Overview-DNS/432862/496469-4.html" target="_blank">Overview of DNS</a>." <em>Building Your Technology Skills</em>. Lynda.com, Mar. 16, 2016.</li>
</ul>
</div>
<div style="text-align:left"> </div>
</td>
</tr>
<tr>
<td valign="top" width="760"><span style="font-size:10px;color:rgb(96,96,96);line-height:100%;font-family:verdana"> <hr>
<div style="text-align:justify">The <strong><em>OPLIN 4cast</em></strong> is a weekly compilation of recent headlines, topics, and trends that could impact public libraries. You can subscribe to it in a variety of ways, such as: <br>
</div>
<div style="text-align:left"> </div>
<ul>
<li style="text-align:justify"><strong>RSS feed.</strong> You can receive the OPLIN 4cast via RSS feed by subscribing to the following URL: <a href="http://www.oplin.org/4cast/index.php/?feed=rss2" target="_blank">http://www.oplin.org/4cast/index.php/?feed=rss2</a>.</li>
<li style="text-align:justify"><strong>Live Bookmark.</strong> If you're using the Firefox web browser, you can go to the 4cast website (<a href="http://www.oplin.org/4cast/" target="_blank">http://www.oplin.org/4cast/</a>) and click on the orange "radio wave" icon on the right side of the address bar. In Internet Explorer 7, click on the same icon to view or subscribe to the 4cast RSS feed.</li>
<li style="text-align:justify"><strong>E-mail.</strong> You can have the OPLIN 4cast delivered via e-mail (a'la OPLINlist and OPLINtech) by subscribing to the 4cast mailing list at <a href="http://lists.oplin.org/mailman/listinfo/OPLIN4cast" target="_blank">http://lists.oplin.org/mailman/listinfo/OPLIN4cast</a>.</li>
</ul> </span> </td>
</tr>
<tr>
<td style="text-align:center;font-family:'Century Gothic',sans-serif;border-top:0px solid rgb(255,255,255);background-color:#2c4587;color:#fff" valign="top" width="760">© 2018 Ohio Public Library Information Network<br> <a href="http://www.slideshare.net/oplin" title="Find us on Slideshare" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/slideshare3.png" alt="Find us on Slideshare"></a> <a href="http://www.facebook.com/oplin.org" title="Find us on Facebook" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/facebook_0.png" alt="Find us on Facebook"></a> <a href="https://plus.google.com/107751358238995507967" title="Find us on Google+" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/google+.png" alt="Find us on Google+"></a> <a href="http://www.twitter.com/oplin" title="Find us on Twitter" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/twitter_0.png" alt="Find us on Twitter"></a> </td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div></div></div></div></div></div></div></div>