In case you, like me, were a bit skeptical of the big DNS protocol flaw announcement, and thought "well, they're just over-hyping as usual" - I guess maybe not? I run djbdns, so I'm generally fine, but the big vocal blog-o-scoffs have started retracting after talking to the big Dan K, so now I kind of wish I could see the preso at BlackHat (though, no, I don't really wish I were going to BH, especially this year with the baby due around the same time). More info is now available at:
http://www.matasano.com/log/1093/patch-your-non-djbdns-server-now-dan-was-right-i-was-wrong/
http://taosecurity.blogspot.com/2008/07/thoughts-on-latest-kaminski-dns-issue.html
http://securosis.com/2008/07/09/more-on-the-dns-vulnerability/