Apple plugs iTunes Ghost Click hole Apple has updated its iTunes software to correct a security shortcoming that offered the potential for miscreants to mount man-in-the-middle attacks and appears to have played a central role in the infamous Ghost Click botnet scam. iTunes 10.5.1, released on Monday, is a cross-platform update that addresses a flaw that's most …
I find it odd that ISPs don't block DNS queries at their border (except those to and from their own servers obviously). It'd save the ISPs bandwidth (and thus money) and help protect users.
You'd get 7 ppl complaining they couldn't use their preferred DNS server, but it wouldn't affect VPN users and any "normal" users.
I'm not saying bot herders couldn't get around it, but it'd make it cost them more time/money which makes you less of a target.
On a second note, why are Apples patches *always* so freaking large?! Are they patches, or are they actually just the whole binary?
The minute an ISP starts arbitrarily blocking DNS queries is the minute I leave said ISP, and I think the number would be greater than 7. Many of their DNS servers are rather shaky to say the least and basic to boot. My entire family have been put onto OpenDNS specifically to use their blocking services. You're forgetting that the simplest way to tamper with a DNS lookup is via the hosts files, which limiting the DNS server wouldn't prevent.
Quite how much bandwidth you think that DNS queries take, I've no idea, but in the grand scheme of things I'd be amazed if it were even a tenth of a percent.
Does this latest version finally support concurrent copies of iTunes running on a Windows machine so that if my girlfriend has left it running on her account, I can run it when I switch user accounts to mine?.. Checks... nope, what a surprise.
Though to be fair, it's only a 55MB download, not 120MB. But still, Lord forbid they do incremental hotfixes like they've finally figured out how to do on iOS.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
