the Kaminsky DNS flaw
loresecuritynetworking
The 2008 discovery by Dan Kaminsky of a fundamental weakness in DNS resolution that made cache poisoning practical at internet scale - an attacker could plant a forged answer and redirect a whole domain's traffic, undermining every trust decision layered on top of names.
The response became the model for coordinated disclosure: Kaminsky assembled vendors and implementers in secret at Microsoft's campus, they shipped a synchronised patch across the entire industry on one day in July 2008, and only then did he explain the bug on stage at Black Hat and DEF CON. It also gave DNSSEC its strongest argument. Kaminsky, who died in 2021, is remembered as much for how he handled the finding as for the finding itself.
Also known as: dan kaminsky, dns cache poisoning 2008, the great dns patch