Throwback: Remember when Dan Kaminsky secretly coordinated the entire tech industry to patch a DNS flaw without telling anyone what it was? (2008)

Throwing it back to 2008 when security researcher Dan Kaminsky pulled off one of the most impressive feats of responsible disclosure in internet history.

Kaminsky found a DNS vulnerability so catastrophic that he knew releasing details would immediately break the internet. So instead of publishing, he did something unprecedented - he secretly got Microsoft, Cisco, Sun, and basically every major vendor to coordinate patches for July 8, 2008, without revealing what they were fixing.

The security world went absolutely nuts trying to figure out what this mystery bug was. Kaminsky would give these cryptic talks hinting at how serious it was but wouldn't spill the beans. The fact that EVERYONE patched simultaneously told people it had to be apocalyptic.

Only after most systems were secured did he reveal it at Black Hat - a cache poisoning attack that could redirect any website traffic to attacker-controlled servers.

This Wired longform from November 2008 captured the whole saga perfectly and really shows what a wild time this was in cybersecurity.

RIP Dan Kaminsky (2021) - a legend who literally saved the internet by keeping his mouth shut at the right time.

Source: The Wired deep dive from 2008