Hacker News Reader

Before we all freak out, this affects Windows DNS servers. Those are relatively rare, and are (hopefully) well maintained with patches, especially today which is the second Tuesday of the month. Nothing in the advisory suggests it affects normal Windows desktops.

View on HN

Agreed.

I will say Windows DNS servers are much more common on LANs, since they're a core part of Active Directory. But on the internet, I'd agree they're uncommon.

Aren't domain controllers likely to run DNS services?

Very likely, but also typically not exposed to the internet. So there's definitely plenty of risk here, but an adversary would likely have to be within your network to query your DC.

“Within your network” could include anything from “using the guest wifi” to “got someone with an account to click on the wrong link / look at the wrong media file”.

Yes, it's not a worm. That doesn't mean it's not a big deal for a lot of people, particularly if they've already had a minor compromise by someone waiting for this kind of exploit to escalate.

And that's assuming you can't exploit it by controlling an upstream/authoritative nameserver or via DNS poisoning.

Reply on news.ycombinator.com