Quote:
Originally posted by kad
Versign is Wildcarding .com and .net.
You used to be able to do something like this before Verisign steped in. The best way to describe it is in a geeky conversation..
Client Machine (looking for www.gofuckyourself.com) : Hello ns1.gofuckyourself.com, do you happen to know where www.gofuckyourself.com is?
Server (ns1.gofuckyourself.com): Well yes i do! Its at 64.88.blah.blah. Hey, while your here, did you know that I can also resolve any domains for . ? Pretty cool huh?
Client Machine : Wow. Ill remember that. Thanks.
End of conversation.
Anyhow, when the client doesnt get a response from its primary NS, it now remembers "Fuck, ns1.gofuckyourself.com might be able to help out". So it asks ns1.gfy and it ALWAYS responds "Yep, micr0s0ft.com resolves to 64.64.55.11". Now ns1.gfy has control of all your type ins.
Ive seen this work, one of my co-workers at another company I used to work for did this by accident. Fun until people complain 
Im pretty sure noone will understand what im rumbling on about, but I feel good that I got this out of my system.
|
Yes, this was possible.
But only on people running a certain broken version of the Windows NT domain server.
So most ISP users were not affected.