News for hackers. Stuff that matters.

A comment on Hijack of Amazon’s domain service used to reroute web traffic for two hours. Parent comment

Re:Hijack of Amazon’s domain service used to reroute web tra... by technion on Wednesday April 25, 2018 @06:07PM (#16926729)
Yes, but they weren't routing traffic for that web server to their own server. They were routing the IP of the DNS servers to their own server, and then just handing out the DNS address that suited them.

In turn, if your own DNS wasn't configured to use a DNS server with a poisoned fraudulent address, a web server based verification landed on the valid server, not the attackers.

[ Parent | on HN ]
Re:Hijack of Amazon’s domain service used to reroute web tra... by kchr on Thursday April 26, 2018 @02:00AM (#16929180)
Okay, thanks for clarifying!
[ Parent | on HN ]