Why Is My Cat Using Baidu? And Other IoT DNS Oddities
Long-time Slashdot reader UnderAttack writes: IoT devices are often stitched together from various odd libraries and features. The SANS Internet Storm Center has a story about a cat feeder that not only appears to reach out to Baidu.com every five minutes but also uses a vulnerable DNS library that uses repeating query ids allowing for simple spoofing not seen since the early dark years of DNS The article, by a SANS.edu dean of research, concludes that "Some networking libraries use 'baidu.com' for internet connectivity checks. Even if the DNS lookup succeeds, there is no actual outbound connection in this case. The device is happy as long as an IP address is returned."
from Slashdot https://ift.tt/gGXRaUm
Read more of this story at Slashdot.
from Slashdot https://ift.tt/gGXRaUm
0 Response to "Why Is My Cat Using Baidu? And Other IoT DNS Oddities"
Post a Comment