Posts by sthen2 posts • joined Saturday 5th May 2007 10:28 GMT
Reducing TTL on the proper records won't help; caching of the incorrect results will be down to whatever TTL the hackers' DNS server returns with the A records (but typically a name resolver will cap the TTL to a certain value if it's excessive).
OpenBSD has had an easy-to-use option to encrypt the swap partition since 1999, and it's been enabled by default for the last 2 years. Much safer than writing and wiping (and since processor speed has increased more rapidly than disk speed, it can be faster too).
