Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Verisign Hijack
view: topics flat text 
Post a:

Comments on news posted 2003-09-16 14:00:38: Verisign isn't particularly popular this week among network administrators after the company changed the DNS system yesterday to take advantage of typing mis-cues. The company yesterday decided to add wildcard DNS records to managed .com and . ..

page: 1 · 2 · 3

nklb
Premium
join:2000-11-17
Ann Arbor, MI
clubs:

This is going WAY too far.

I usually dont voice my opinions about the actions of companies, but this one has me truly in a rage. Verisign is clearly abusing their powers as root dns, and very clearly we the community need to do something to stop them.

Please, any dns server admins, BLOCK OUT THEIR IP.

This amazingly blatant action that verisign has taken is just beyond anything I have ever seen a company do.

I, for one, will be protesting this to the full extent of my ability. FORTUNATELY I run my own DNS server, so can handle this better than some users who are forced to use their schools or ISP's.

Please Verisign, stop this nonsense
--
for all your Linux questions
pierce2

join:1999-09-22
Santa Cruz, CA

Re: This is going WAY too far.

how would a DNS server 'block an IP' ??

you would have to hack the source code to your DNS server to ignore wildcard lookups, or to treat any IP that returns that specific IP as a 'invalid'.

you could block that IP via a firewall or router filter rule, I suppose. thats not quite the same thing (you'd get a valid IP back from a query, but then get a 'site not reachable' type error.

panth1
The Coyote

join:2000-12-11
Boca Raton, FL

Anti-competitive?

I think this is anti-competitive to the other domain registers and hope ICANN takes a good look at this.

How about them collecting stats on what people are typing in and then selling this data? I'm sure porn sites would love to register the most common typos?

Also RR dns is not doing this. Just not updated yet?
--
ISP: Road Runner/Powerlink
Status: Road Runner

statemachine
Premium
join:2001-01-21
Si Valley
clubs:

Complaint form goes to InterNIC

The link to the complaint form in this article is a link to InterNIC and not ICANN. If you want to complain to ICANN, then send e-mail to icann@icann.org.

Agent 86

Re: Complaint form goes to InterNIC

Complain to ICANN? Surely you're joking. ICANN IS THE PROBLEM!

statemachine
Premium
join:2001-01-21
Si Valley
clubs:

Verisign (650)-961-7500

(650)-961-7500

Here's Verisign's corporate phone number.

(650)-961-7500

The operator will say she will only route by name, but if you ask for CEO Stratton Sclavos, she will refuse to put you through and instead give you to someone else's voicemail.

(650)-961-7500

But hassle them anyway, and make them stay on the phone for a long time. Maybe several thousand irate phone calls will help toward getting the wildcard abomination removed.

(650)-961-7500

TheSaint

join:2002-01-25
Hanover Park, IL
clubs:

For the Network professionals...

For the Network professionals that browse BBR:

Who do you recommend for website management such as DNS servers, domain name hosting and renewal etc.?

LC8290
Ms. Croft 2 U

join:2003-04-30
Cleveland, TX


produce a complaint letter

Can someone produce a complaint letter that we can all send...that would be nice. I'd email every 10 minutes.

I sent my own email. I wonder if I'll get any replies. Fill their boxes!!
--
"I can't use what I can't abuse."

-Garbage, "Vow"

[text was edited by author 2003-09-16 16:05:16]

[text was edited by author 2003-09-16 16:30:03]

winky
Turn Left At The Moon

join:2001-02-11
Saint Louis, MO

I knew I didn't like those guys

About two years ago or so Verisign did something to piss me off but I can't remember what it was, at least now they did something I can remember. Seems like any company will do anything they think they can get away with and then act like they're doing you a favor, scum must rise to the top where all the decisions are being made.


robnelle
Blowing Kisses To You All
Premium
join:2001-12-05
Indianapolis, IN
clubs:

I found this article about Verisign's activities

More interesting details.

»www.cbronline.com/latestnews/d04···0018be8b

Article dated 9/9/03.
--
My website

LC8290
Ms. Croft 2 U

join:2003-04-30
Cleveland, TX

Re: I found this article about Verisign's activities

quote:
VeriSign Inc is testing changes to its domain name system services, which could generate tens of millions in revenue a year for itself and partners, and which would impact the way almost every internet user surfs the web.
Funny, that's the story behind almost everything today...money.
--
"I can't use what I can't abuse."-Garbage, "Vow"

Agent 86

Complaining to Versign or ICANN will do nothing

You should write your political representatives. It's time to shut down ICANN and place the domain system under democratic control.

Bobcat
Premium
join:2001-02-04
Bedminster, NJ
·Verizon Online DSL

Some more details

From Verisign (both are PDF files):

Implementation - »www.verisign.com/resources/gd/si···tion.pdf

Recommendations - »www.verisign.com/resources/gd/si···ices.pdf

cprgolds
Woof Woof
Premium
join:2000-12-22
Portland, OR

More Typical NSI Behavior!

Network Solutions is one of the most dishonorable companies that I have ever dealt with.

Do bad things ever happen to bad people?

NOVA_Guy
Obama- Commander in Thief
Premium
join:2002-03-05
·VOIPo

Has anybody...

...considered contacting the BBB and filing a complaint about unethical or anticompetitive business practices? There has to be some category that this type of behavior can fall into for complaining.

Just imagine what several hundred-- or even a few thousand-- complaints against a company with the BBB could do to their reputation.

I also like the idea of setting up mail servers to send complaint letters to Network Solutions every 10 minutes. If enough people did this, at least they might have to start paying attention to these complaints, right?
--
Cox cable: the hallmark questionable business practices and lousy cable service!

LC8290
Ms. Croft 2 U

join:2003-04-30
Cleveland, TX


biggest concern

Incorrect url redirecting isn't high on my list. But the fight against spam and other things related to email addresses should be enough incentive for Verisign to revoke this action.

I say we keep sending emails to Verisign until their inboxes explode.
--
"I can't use what I can't abuse."

-Garbage, "Vow"

[text was edited by author 2003-09-16 18:44:39]

ctgreybeard
Old dogs can learn new tricks
Premium
join:2001-11-13
Bethel, CT
clubs:
·AT&T Yahoo

Did the relent?

I tried, at random, »xyzzxzzzzzy.com/ [perhaps the older souls can recognize xyzzy.com in there ... which turns out to be a valid site!] and I got a The page cannot be displayed error. Perhaps they have relented and turned off the wildcards?????

One can only hope. It sounds like a really, really bad idea!

Bill W
--
Old dogs can learn new tricks!
IceNineJon

join:2003-05-21
Woodland Hills, CA

Re: Did the relent?

No, I get the same thing at work but at home, I get redirected to their site. Perhaps the DNS records haven't propogated to your ISP yet.

LC8290
Ms. Croft 2 U

join:2003-04-30
Cleveland, TX

if...

If you think it's a bad idea (which is it ) then send them mail! call them on the phone. register complaints with the BBB, anything will help.
--
"I can't use what I can't abuse."-Garbage, "Vow"

retro128

@65.119.x.x

Completely asinine

It's only been a day since Verisign has done this and already I'm seeing implications from it...One of the things being email sent to an incorrect address. For instance, I tried sending mail to an obviously fake domain and have yet to get a bounceback. It could be assumed that this is because their server has been completely flooded by worldwide domain misspellings and general abuse from pissed off people like me.

This is a major, major problem. This means that MX servers all over the world no longer can tell you if the domain is invalid because they are getting a valid MX record returned. That mail is then sent to Verisign where they do god-knows-what with it. At best we must rely on THEM to tell us the domain does not exist.

This unilateral action by them is insane...I really am speechless.

strategy

@rr.com

Verisign Complaint Form

I have setup a website to allow people to e-mail all of the Executives and Board of Directors for Verisign in one fell swoop. No idea if the e-mails actually get through, but it's worth a try.

»www.visualstructures.com/verisign.php

Enjoy.

hijacked

@4.42.x.x

Re: Verisign Complaint Form

If you don't want to send you IP,
just email these guys:
SSclavos@verisign.com
gHaddad@verisign.com
aBalogh@verisign.com
devan@verisign.com
bfasig@verisign.com
qgallivan@verisign.com
rkorzeniewski@verisign.com
virvin@verisign.com
rlewis@verisign.com
jlin@verisign.com
wmitchell@verisign.com
julam@verisign.com
akawashima@verisign.com
growley@verisign.com
fstieger@verisign.com
jbidzos@verisign.com
wchenevish@verisign.com
kcompton@verisign.com
skriens@verisign.com
rmoore@verisign.com
greyes@verisign.com
cbs228
Geeks Of The World, Unite

join:2000-09-04
Saint Louis, MO

Illegal!?

IANAL, but what VeriSign has done is of questionable legality. Think about this: It's not only HTTP requests that get served via DNS-- it's everything, including... email.

Yes, that's right. If you misspell "joebloggs@aol.com" as "jogbloggs@aop.com", guess what happens? The name doesn't exist, but in absence of a clarifying "name lookup failed" message, the message instead gets bounced to VeriSign's DNS-mistype-trap server.

An HTML coder could get careless and mistype the ACTION statement on a METHOD="POST" form, and again, VeriSign gets the POST arguments.

VeriSign is obviously intercepting communications which are not intended for them. They are misrepresenting themselves to the user's application and network, presenting themselves as another party. When you dial a wrong number, you generally expect the person on the other end to say that it is a wrong number, instead of misrepresenting themselves as another party as VeriSign is doing.

Wasn't there a case recently over someone (inadvertently?) intercepting electronic mails destined for some newspaper (The New York Times, I believe) because the DNS name was similar, and the defendant was forced to surrender the name? If so, this is obvious precedent.
--
"If you stare too long into the abyss the abyss stares back at you." -Nietzsche

GENERAL FAILURE READING ©: DRIVE
(A)bort, (R)etry, (F)rivolous Lawsuits, (B)ribe Congress?

todayiammyself

@direcpc.com

But wait... theres more!

Just wait until the time comes when someone at verisign figures out how much cash they can make by selling that redirect "feature" to someone like Microsoft. Imagine every case of fat thumbs bringing you to MSN. Ugh.

newview
Ex .. Ex .. Exactly
Premium
join:2001-10-01
Parsonsburg, MD

ISC to Cut Off VeriSign's Site Finder

quote:
VeriSign's controversial "typo-squatting" Site Finder service is about to be bypassed by an emergency software patch to many of the Internet's backbone computers.

The Internet Software Consortium, a nonprofit that publishes BIND, the software that runs many of the Net's domain name servers, is about to release an emergency patch to block VeriSign's new Site Finder service.

VeriSign's Site Finder, launched on Monday, has drawn heated criticism for hijacking mistyped Web addresses. Instead of getting an error message, Web surfers who mistype ".com" and ".net" Web addresses are redirected to the Site Finder service, which then offers a list of likely alternatives, some of which are paid-placement links. Critics complain the new service gives VeriSign too much control over online traffic and allows it to profit from an essential monopoly over ".com" and ".net" names. VeriSign is charged by the U.S. government with running the ".com" and ".net" domains, and directs much of the traffic on the Internet.

However, the ISC is about to undercut the Site Finder service with a patch to its BIND software.

BIND runs on about 80 percent of the Internet's domain name servers -- the machines that translate human-readable Web addresses like www.wired.com into machine-readable Internet addresses used by the Internet's vast network of computers.

The patch will be released by the end of Tuesday, said Paul Vixie, ISC's president.

"The phone has been ringing off the hook with deeply unhappy customers," he said. "We don't have a political ax to grind. Whether VeriSign should or should not have done this is not for us to decide. But we have to respond to our customers who are demanding it."

Vixie said that ISC's customers -- typically ISPs and large enterprises -- needed a fix because VeriSign's Site Finder broke their spam filters.

Vixie said a lot of spam spoofs the "from" domain, and that many ISP-level spam filters check whether incoming e-mail is from a valid domain or not. Instead of generating errors, the spam filter checks are instead being rerouted to the Site Finder service, and therefore appear to originate from a legitimate domain.

Vixie said the ISC's customers aren't too concerned with advertising. "They don't want to help spammers. It's the lack of a viable spam-detection mechanism they're worried about. They are concerned about spam, not advertising," Vixie said.

VeriSign did not respond requests for comment.
»www.wired.com/news/technology/0,···,00.html

--
The Rules of Spam | Maryland's New Anti-Spam Law
Where are we going? And what's with the hand basket?

HiVolt
30
Premium
join:2000-12-28
Toronto, ON
clubs:

!@#$

I bet someone will release a damn virus that will just keep typing in bogus random addresses. Verisign's servers will crumble to a halt. That shoudl teach those buggers.

Jmartz

join:2000-07-20
Tenafly, NJ

Re: !@#$

Whenever I enter random letters and numbers into my browser and try to get to the site... it brings me to Google.
Forums » Verisign Hijackpage: 1 · 2 · 3


Tuesday, 01-Dec 18:08:33 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF