Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

unauthorized DNS zone in North Dakota = $50,000

  • 08-03-2009 07:07PM
    #1
    Capt'n Midnight
    Moderators, Recreation & Hobbies Moderators, Science, Health & Environment Moderators, Technology & Internet Moderators Posts: 94,366 Mod ✭✭✭✭


    http://www.spamsuite.com/node/351
    . On February 27, 2005, David Ritz ("Ritz") connected to Sierra's DNS server. In the course of that connection, he issued a host -l command which requested a zone transfer from Sierra's DNS server. Sierra's server responded with a full zone transfer, providing Ritz with the network map showing all of Sierra's private domain names, private host names, and internal non-routable IP addresses.
    ...
    The literature available on the subject all refers to access attempts such as the host -l command issued by Ritz under the circumstances of this case as "unauthorized." Microsoft itself, as well as various other, authorities all refer to zone transfers conducted by an individual other than the network administrator or an authoritative name server as "unauthorized."
    Just interested in peoples take on this, apart from the obvious why was their server granting requests to the interweb ?

    Sierra ? well that's another story/


Comments

  • #2
    Black Swan
    Moderators, Category Moderators, Science, Health & Environment Moderators, Society & Culture Moderators Posts: 47,829 CMod ✭✭✭✭Black Swan


    Has the Kaminsky DNS attack been completely solved with patches and whatnot, or are there still some vulnerabilities?


  • #3
    Martyr
    Closed Accounts Posts: 1,567 ✭✭✭Martyr


    Just interested in peoples take on this, apart from the obvious why was their server granting requests to the interweb ?

    did they deliberately configure their DNS to allow unauthorised transfers? in the hope they could bring David to court for "hacking" ?


Advertisement