Tag: DNS

  • Worldnic DNS server outage teaches lesson…

    Incidents.org has a post on a DNS server outage for Worldnic. Which effects a number of Network Solutions customers. Apparently they’re aware of the problem and are working on a fix. It doesn’t affect EVERY Network Solutions customer, there are some specifics…

    To clarify the impact to the casual reader:

    Not all customers of Network Solutions are affected.

    No root or TLD servers are known to reside on these machines.

    It’s “just” individual domains that are affected, but it might be a lot of them.

    Only domains that have all their namervers on these machines will have significant impact.

    (more…)

  • Malicious .biz site and browser vulnerabilities

    This from incidents.org as well… A user visited a webpage and got redirected to hxxp://iframebiz.biz/dl/adv443.php (tt changed to xx to protect anyone from getting there…)
    (more…)

  • Sony DRM Rootkit — it’s worse

    I did this as updates to an earlier post, but it probably deserves it’s own post now. The morning brought us the news of SERIOUS flaws in the Uninstaller ActiveX control for Sony’s DRM, then came news of ANOTHER flaw, this one a privilige escalation “attacker can take control of PC” vulnerability in the DRM rootkit (XCP) itself. The other bit of news to come has been the extent of the install base of XCP.

    (more…)

  • Sony discs to be recalled

    It looks as though the uninstaller as claimed last night, does have more serious implications than the original rootkit, in Sony’s continuing DRM nightmare. Basically, the uninstaller will allow any web page to run arbitrary code and or remotely control your pc. Which is sort of the holy grail of remote exploits. The ActiveX control called CodeSupport that is required to get the uninstaller is the culprit here. It remains on system after uninstall and is marked safe for scripting.

    (more…)

  • Pay per click hijacking

    Interesting article at lurhq.com on pay per click hijacking, which is really an extension on old DNS poisoning attacks. Essentially the DNS poisoning attack works like this…
    (more…)

  • Mandrake or Mandriva linux server setup how to

    A good how to has been posted at howtoforge.com, giving some instructions for setting up Mandrake (now Mandriva) 10.2 into a web/email serving platform. (As well as MySQL and FTP, DNS, and a few others.)
    (more…)

  • Linux in city government

    Newforge has a good article about the city of Kenosha Wisconsin and their experience to linux. They started their “test” about 10 years ago starting with a DNS server and or a mailserver. They’ve moved now to a complete server/thin-client setup. They initially saved $100,000 a year with Linux, now that number is higher from reduced staffing costs. They have an IT staff of 1 and 1/2 people (I’ve GOT to see that.) They claim if they had PC’s (Windows I assume), they would have to have twice as many on staff.
    (more…)

  • Migrating Web Applications from Explorer to Mozilla

    One of my pet peeves is web sites that work with only one web browser. (Usually Internet Explorer) and break, sometimes badly with anything else. Recently I ran into this problem at a registrar. When I tried changing DNS data things did not work under Firefox and I had to visit the page with Explorer. IBM’s developer works site has (more…)

  • Busy Evening

    I’ve got all traces of the old cms system off of the server now. (Well there might be a README here or there, but all php scripts from the old CMS are now gone.) At this point I can disclose a bit about the sudden move.
    (more…)