Pope Kaminsky I

Encyclical

"Nomen Venenatum". Dan Kaminsky found that poisoning the cache of nearly every DNS resolver had become trivial, and instead of talking right away he quietly gathered the vendors. On 8 July 2008 BIND, Microsoft, Cisco and many others shipped patches together, adding source-port randomisation. It was the largest coordinated fix seen up to then, and the model for responsible disclosure in the years to come.

Saint page: Saint Kaminsky bug

Cardinals

Windows Server service RPC overflow (MS08-067, Conficker) · Debian OpenSSL predictable PRNG (weak keys)