Comment by tyoma
13 years ago
Hi,
Author of the article here. Was happily surprised to find it linked on the front page of HN.
I can try to answer any questions that you may have have.
I'm also in the midst of writing another blog post, this time talking about the bit-error distribution in the DNS query type field. Spoiler: its not uniform.
Part 3 is now up: http://blog.dinaburg.org/2012/11/bitsquatting-pcap-analysis-...
The part about the flip being mostly on a single bit reminded me of [1], I wonder if we're seeing the same cause in two different ways?
[1] http://mina.naguib.ca/blog/2012/10/22/the-little-ssh-that-so...