dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
5305

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

Name Game to Steve

Premium Member

to Steve

Re: GoDaddy DNS Outage takes out 1000s of sites+email

GoDaddy has moved the nameservers of godaddycom back to themselves from Verisign.
Name Game

Name Game to Noah Vail

Premium Member

to Noah Vail
Earthquake in Argentina, Anonymous claims resposibility ???

»current.com/community/89 ··· aarp.htm

NormanS
I gave her time to steal my mind away
MVM
join:2001-02-14
San Jose, CA
TP-Link TD-8616
Asus RT-AC66U B1
Netgear FR114P

NormanS to Name Game

MVM

to Name Game
said by Name Game:

Since GoDaddy is the authority record for all the domains in their DNS zone that is a big hit..53 million ?

What makes you think the GoDaddy DNS zone is authoritative for all 53 million names they have registered?
WHOIS information for aosake.net:***
 
[Querying whois.verisign-grs.com]
[whois.verisign-grs.com]
Whois Server Version 2.0
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
   Domain Name: AOSAKE.NET
   Registrar: GODADDY.COM, LLC
   Whois Server: whois.godaddy.com
   Referral URL: http://registrar.godaddy.com
   Name Server: A.AUTH-NS.SONIC.NET
   Name Server: B.AUTH-NS.SONIC.NET
   Name Server: C.AUTH-NS.SONIC.NET
 
Registrar need not be the DNS authority.

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

Name Game

Premium Member

Did not..that is why the question mark and Thomas explained it all Thanks.

»Re: GoDaddy DNS Outage takes out 1000s of sites+email
Name Game

Name Game to Noah Vail

Premium Member

to Noah Vail
Feds Warn of Zombie Apocalypse! Buy emergency kit, but you might be a terrorist if...

How do you kill a zombie? No, not a zombie process killed via command line, but the brain-eating kind.

»www.networkworld.com/com ··· de/81356

Triple Helix
DNA
Premium Member
join:2007-07-26
Oshawa, ON

Triple Helix to Noah Vail

Premium Member

to Noah Vail
Who's lying about the GoDaddy outage?

»betanews.com/2012/09/11/ ··· eed+-+BN

TH

Name Game
Premium Member
join:2002-07-07
Grand Rapids, MI

Name Game

Premium Member

and within the hour publicly posted what supposedly is GoDaddy "source code and database".

Faked by anon.."No point, it is fake: open source project from 2010: »code.google.com/p/ttpyth ··· Fgodaddy … This is where he got that code.

»code.google.com/p/ttpyth ··· Fgodaddy

»twitter.com/AnonymousOwn ··· 20293889
Name Game

Name Game to leibold

Premium Member

to leibold
said by leibold:

said by Name Game:

Since GoDaddy is the authority record for all the domains in their DNS zone that is a big hit..53 million ?

I have trouble understanding what you are trying to say.

With "authority record" are you referring to the SOA (start of authority) record in each DNS zone file or do you mean something else (perhaps DNSSEC related which also has the concept of authorities) ?

I have similar difficulty with "all the domains in their DNS zone".

If you what you trying to say is that all of GoDaddy's customers lost their DNS service then that is clearly not the case. Anybody that is only using GoDaddy as a domain registry and uses his/her own servers for web, email and dns will not be effected by this (other then the inability to make any changes to their accounts).

Nevertheless this is a big deal and a lot of GoDaddy's clients are likely using them not just as domain registry but also as DNS provider.

GoDaddy goes down, Anonymous member takes credit

Popular domain name registrar and Web and email hosting provider GoDaddy is experiencing a severe outage, one that appears to have taken out not only its hosted services, but even those websites that have registered their domain names through GoDaddy.
Background

Users started noticing the troubles in the late morning Eastern Time. Customers with GoDaddy-hosted email accounts and websites noticed the outage, as did at least some users who had registered their domain names with GoDaddy, even though their sites are actually hosted elsewhere. When pinged, websites registered with GoDaddy receive only a "ping request could not find host," message. The GoDaddy.com site itself went offline.

GoDaddy claims to be the world's largest domain name registrar. The company reportedly manages more than 48 million domain names and serves more than 9.3 million customers.

»www.pcworld.com/business ··· dit.html

norwegian
Premium Member
join:2005-02-15
Outback

2 edits

norwegian to Noah Vail

Premium Member

to Noah Vail
I understand they were down, but has anyone verified it was anon, or even a member of the organization, as it seems to me it was someone acting on their own just before 9/11 (on that note - My sympathy goes out to the families involved).......does anyone wonder if there is more to be published if there is a network hole in GoDaddy, or we will all be seeing lock down on the Internet due to terrorist activity?

Don't get me wrong, but this one is one of the weirdest Internet issues to date. Mass hysteria with no real back bone...call me skeptical until the juice is out of the bottle.

It is already a very sensitive time for so many.

AVD
Respice, Adspice, Prospice
Premium Member
join:2003-02-06
Onion, NJ

AVD to lorennerol

Premium Member

to lorennerol
said by lorennerol:

said by Trel:

Only to people who don't understand IT.

Can't count how many times we've had clients ask, "Shouldn't we put that on The Cloud?"

I've taken to responding by asking them what they think the cloud actually is. To-date, not a one has even tried to answer the question.

I think our IT guys are soliciting bids from cloud providers.

leibold
MVM
join:2002-07-09
Sunnyvale, CA
Netgear CG3000DCR
ZyXEL P-663HN-51

1 recommendation

leibold to norwegian

MVM

to norwegian
said by norwegian:

I understand they were down, but has anyone verified it was anon, or even a member of the organization,

The who and how is hard to know with certainty for anybody other then those who actually caused the incident (regardless whether it is was accidental or a deliberate act).
said by Noah Vail:

said by Name Game:

GoDaddy's 77 name servers all have IP addresses in AS26496

So maybe he's got some kind of BGP poisoning going on.

Name Game See Profile pointed out that all the GoDaddy nameservers are in the same AS and Noah Vail See Profile correctly replied that BGP poisoning (or any other kind of BGP problem) could be responsible for making all of them unreachable at the same time.
For those that don't know it, BGP stands for Border Gateway Protocol and is used in peering routers. Unlike LAN routers who tend to make routing decisions primarily on target IP address alone, border routers tend to use AS numbers in their routing policies with each AS (autonomous system) representing one or more IP address blocks. While this grouping of IP address blocks greatly reduces the number of policy rules and makes the router more efficient it also has the potential to spread the effect of a single incorrect entry to many separate IP blocks (in this case all locations of GoDaddy's nameservers).

This lends credibility to GoDaddy's statement that a corrupt routing table was responsible for the outage.
jst3751
Premium Member
join:2004-07-08
Rowland Heights, CA

jst3751

Premium Member

The fact that this was an internal problem (if it was) actually gives GoDaddy a bigger black eye than if they were hacked.

bitemeboy
join:2005-04-06
Otego, NY

bitemeboy

Member

Well, they apologized to me and, ARE YOU READY, gave me a one month's extension on my account. So there

jimkyle
Btrieve Guy
Premium Member
join:2002-10-20
Oklahoma City, OK

jimkyle

Premium Member

I got that email also, but my filters didn't let their button make it through. Are you certain that it was legitimate? I suspected (and still do) that it could well be a phishing attempt, since I never click links received in unsolicited email...

norwegian
Premium Member
join:2005-02-15
Outback

norwegian to leibold

Premium Member

to leibold

I do not know enough on networks, so generally speaking this could be a hardware/software related issue? The person publicizing himself or herself saying they will have to do it again to force GoDaddy's hand to tell the truth maybe just an internal employee looking for a minute of fame?

I guess we will only find out if facts are presented, but to save face as a business, GoDaddy may never want the factual truth published.

leibold
MVM
join:2002-07-09
Sunnyvale, CA
Netgear CG3000DCR
ZyXEL P-663HN-51

leibold

MVM

said by norwegian:

I do not know enough on networks, so generally speaking this could be a hardware/software related issue?

Assuming that the cause was a bad routing table a partial list of possible reasons includes:

- a bad memory module in the router (hardware)
- a software bug in the router software
- a software bug in GoDaddy's network management software (pushing a bad policy update to one or more routers)
- a GoDaddy employee making a typo and changing the wrong routing policy (or wrong change to the right policy)
- a disgruntled GoDaddy employee intentional making a harmful change to the routing policies
- an outside attacker gaining controlling access to either the router directly or to GoDaddy's network management system

A lot of possibilities and very difficult for an outsider to prove one or the other.

AVD
Respice, Adspice, Prospice
Premium Member
join:2003-02-06
Onion, NJ

1 recommendation

AVD

Premium Member

said by leibold:

said by norwegian:

I do not know enough on networks, so generally speaking this could be a hardware/software related issue?

Assuming that the cause was a bad routing table a partial list of possible reasons includes:

- a bad memory module in the router (hardware)
- a software bug in the router software
- a software bug in GoDaddy's network management software (pushing a bad policy update to one or more routers)
- a GoDaddy employee making a typo and changing the wrong routing policy (or wrong change to the right policy)
- a disgruntled GoDaddy employee intentional making a harmful change to the routing policies
- an outside attacker gaining controlling access to either the router directly or to GoDaddy's network management system

A lot of possibilities and very difficult for an outsider to prove one or the other.

either 3 or 4/5
4 and 5 are one in the same except a hacker would need to penetrate GoDaddy security while a malicious employee would have access already.

It is not impossible that is was unintentional, but where is the drama in bad QC these days?