proper friendly URL still leading to phishing mimic?

[Nick Levinson]

The BBC, good at news reporting but not known for computer expertise, said a recently-discovered vulnerability in the Internet would allow a user to type the correct friendly name for a site into their browser but still be misdirected to a phishing site, and that the problem had something to do with the translation from a friendly name to an IP for the destination. It also said that software companies had been working in secret for two months to develop patches.

Does this affect Fedora, including Linux and Firefox, for users?

The Web had articles about this, but one was at least a year old, suggesting that a different problem was being discussed. Apparently, the problem centers around BIND 9 in DNS servers. But that's if the description is correct. And I didn't see anything new on this in Bruce Schneier's blog. Maybe it's too soon.

Does anyone know about this?

Thanx.

--
Nick

[Nokia]

1: IF you address a vulnerable/infected DNS server, it doesn't matter what kind of OS you use. It might be even your mobile phone, FWIW.

2: The vulnerability you address is being ironed out globally as we speak. If you get your (security)news from a certain blog - whoever that person may be - there's a slim chance to get proper announcements in due time.

3: Take a look at might signature.

[Evil_Bert]

The issue was raised here.