Kaminsky on Conficker

Ars Technica wrote of containing Conficker:

Based on what we've seen today, the answer is a very cautious "maybe." Conficker is awake and has been seen "in the wild" as various infected systems reached out to the control servers for data. New scanning technologies developed by Dan Kaminsky at Dox Para in cooperation with Felix Leder and Tillmann Werner have made it possible to detect a Conficker-infected system based on how it responds to certain queries.

Also on Dan Kaminsky:

http://ipbiz.blogspot.com/2008/08/flaw-in-domain-name-system-dns.html