News & Notes from the OpenDNS team

'Security' Posts

A few months ago we told you about a major milestone for the Domain Tagging system and the OpenDNS community - an impressive 5 million unique domains submitted into the system. And today I’m excited to tell you about another milestone. We officially now have 1 million domains verified in the system. That means they’ve been submitted, tagged, voted on and confirmed. (This is in addition to the millions of domains in the seven Adult categories from our friends at St. Bernard Software.)

When we introduced you to the Domain Tagging system, which powers our Web content filtering service, we explained it was better than any other filtering system for three reasons:

1. It’s more comprehensive. The system has more than 50,000 people submitting and voting on sites. This is in stark contrast to a mere handful of people employed for this job by security companies offering Web content filtering.

2. It’s faster-moving. New Web sites and changes to existing Web sites are constantly being published to the Internet. Other Web content filtering systems update only once nightly, or even less frequently, and therefore fail to catch and categorize everything right away. The OpenDNS community is always adding and tagging sites, so you benefit from real-time updates.

3. It’s free to use. No longer are you forced to pay top dollar to keep your network safe and secure.

I talk to you, our customers and our community, every day and hear how much you value a Web content filtering system that works reliably and keeps the people on your network safe online. Whether it’s businesses, school districts, Managed Service Providers (MSPs), hospitals or households, everyone appreciates the service our community powers and OpenDNS provides.

In the coming months, we’ll be working be working on improvements to the Domain Tagging System that encourage more voting. Perhaps even some prizes for the most active and accurate voters… But in honor of this milestone, take a few minutes today and vote on some domains. :)

No Comments | Filed in Security, Community, OpenDNS at school, Milestones, OpenDNS at Work, General

Here at OpenDNS we’ve spent the past several months working to keep you safe from the Conficker worm. Using the OpenDNS service is widely considered to be one of the easiest and most guaranteed ways to protect your network. And today we roll out a free Conficker detection tool to give you actionable insight into whether or not you have Conficker on your network.

As David mentioned here, we’re in a unique position as your DNS provider of choice to block the worm at the DNS level and prevent it from phoning home. We’re also in a unique position to tell you, based on DNS queries coming from your account, if your network has been infected with Conficker. Log into your OpenDNS account now and you’ll see a banner indicating you either have Conficker or you don’t. This is a tremendously valuable service, and representative of a key innovation on the DNS. If you have friends or colleagues not using OpenDNS yet, we urge you to recommend the service.

Even though we prevent the worm from phoning home, we advise everyone with Conficker to run the disinfection tool. Microsoft offers a great one here.

Also today we’re sharing data about geographic distribution of the worm’s C-varient to date. This information is based on OpenDNS data alone, so is not necessarily representative of overall geographic Conficker distribution.

Conficker

We’ll continue blocking Conficker for all of our users, through our on-by-default Botnet Protection feature. And we’ll keep you posted with updates about the virus, if/when we have them, on this blog.

33 Comments | Filed in Conficker, Security, Announcements, General

By now you’ve likely heard the speculation that April 1, April Fools Day, is the date Conficker kicks into action. And unfortunately this isn’t a joke. The virus, also known as Downadup, leverages a known vulnerability in the Windows OS and has the potential to do some serious damage. Some estimates for number of machines infected so far are as high as 15 million. The Internet is abuzz with news about the virus and predictions about what it will do.

As your DNS provider of choice, we’re in a unique and advantageous position to help keep our users safe. OpenDNS has kept our users safe from Conficker for the past several months by blocking the domains it uses to phone home. (We’ve seen lots of you start using our service to protect your networks from the worm.)

The latest variant of Conficker is now churning through 50,000 domains per day in an attempt to thwart blocking attempts. Consider this: at any given time we have filters that hold well over 1,000,000 domains (when you combine our phishing and domain tagging filters). 50,000 domains a day isn’t going to rock the boat.

So here’s our update: OpenDNS will continue to identify the domains, all 50,000, and block them from resolving for all OpenDNS users. This means even if the virus has penetrated machines on your network, its rendered useless because it cannot connect back to the botnet. If you want to disinfect your computer we recommend you check out the tools from our friends over at Kaspersky Lab.

If you’re already using OpenDNS, you’re all set. We’re protecting you automatically. If you’re not yet, simply set up a free account here and secure your network.

59 Comments | Filed in Conficker, Security, General

David Ulevitch on the future of DNS security at RSA

by Allison Rhodes on Jan 23rd, 2009

OpenDNS Founder and CTO David Ulevitch has been invited to speak about the future of DNS security at RSA 2009 in San Francisco. This is big news for a few reasons - first because more than 2,800 very well-qualified people submitted to speak for only 240 slots, and second because DNS security is arguably one of handful of network security priorities for 2009.

We talked a bit a few months ago about the fact that so many networks remain vulnerable to the DNS hole Dan Kaminsky discovered. Some estimates are as high as 25%, which is amazing given the potential damage the vulnerability represents. Reasons given for the failure to take action are simple — people just don’t know how to patch, or that something as simple as setting up OpenDNS will secure their network.

That’s precisely why David’s talk is so important, and likely why RSA wants him to be there. If you’re planning to be at RSA, David’s talk is one not to be missed. Check it out on Friday, April 24 at 9 a.m. More details here.

5 Comments | Filed in Conferences, Speaking, Security, David

News Feed: Facebook became a fan of OpenDNS.

by Allison Rhodes on Dec 16th, 2008

Facebook

This week Facebook recommended OpenDNS on its Security Page, the place Facebook users are encouraged to go to learn how to stay safe on Facebook and on the Internet. OpenDNS is recommended because it takes the guesswork out of identifying phishing scams for you. Even if you click a suspicious link sent to you in a message by your Facebook friend, or posted on your wall, we’ll still prevent you from being fooled by showing you a warning. That’s a lot of incentive to use OpenDNS.

Like other social networks, Facebook seems to be working hard to eliminate phishing on its site. The more popular a site becomes, the more phishers are inclined to use it for phishing and saying Facebook has been gaining in popularity as of late is an understatement.

While Facebook has been growing its global user base we’ve been growing ours, and a big part of the reason people choose OpenDNS is our anti-phishing service. PhishTank.com has identified and verified more than 300,000 individual phishing scams, all of which are blocked for our users.

We’re thrilled Facebook recommends our service. :)

15 Comments | Filed in Security, Community, Facebook, PhishTank, Phishing, General

Subscribe

RSS Feed

Get email updates:

Most Recent Posts

Search

OpenDNS Button

Use OpenDNS

Use this button on your site!

Archives

Categories