[LINK] Web sites 'stolen' by hackers

Eric Scheid eric.scheid@ironclad.net.au
Fri, 2 Jun 2000 13:28:14 +1000


From: Saliya Wimalaratne <saliya@hinet.net.au> (2/6/2000 11:10 AM)

>Most likely, the processes involved in delegating a domain or server at a
>particular registrar have been subverted. This is *probably* the
>registrar's fault.

Reading the article suggests that this is a classic case of DNS spoofing, 
where the fault falls squarly onto whoever is responsible for serving the 
stolen.com domain name, not the registrar.

Its estimated that a third of all domain name servers are vulnerable to 
this hack. It doesn't even need to be this blatent ... this weakness can 
be exploited in a manner such that all email between two domains goes via 
your mail servers for your inspection.

Read more here:

http://www.menandmice.com/infobase/mennmys/vefsidur.nsf/index/6.1.1998.11

e.

______________________________________________________________________
eric@ironclad.net.au                 i r o n c l a d   n e t w o r k s
information designer                       http://www.ironclad.net.au/