Just got off the phone with the FBI! - GoFuckYourself.com

WebTitan · 03-28-2003, 10:46 AM

had all my non adult domains pointed to an arabic propaganda site when I got up this morning! Not sure how that happened as the site were still on the machine and the DNS looked right, but all the domains were pointing to the same place.

Had to take the machine offline and the tech guys are still tryign to sort it out.

anyone have any ideas on how they could do that?

Wizzo · 03-28-2003, 10:50 AM

Jihad Hackers... They use Voodoo...

digihax · 03-28-2003, 10:50 AM

They used a technique called DNS Posioning. not really sure how it works but some hackers did the same thing to the ja-zeer tv station website in iraq.

asuna · 03-28-2003, 10:50 AM

they hacked verisign or some shit, your not the only one.. wich domains werethey?

DarkJedi · 03-28-2003, 10:54 AM

yeah, and it was damn easy

be afraid

WebTitan · 03-28-2003, 10:54 AM

yeah, looks it it was not just me. just got off the phone with the hsoting comany and it looks like *whatever* happened, it was on just one of thier servers that they had to take off line.

passed the FBI onto them so they could take the heat and deal with it.

LiveDose · 03-28-2003, 12:01 PM

Weapons Of Mass Direction.... It's becoming a serious concern on the net...

stocktrader23 · 03-28-2003, 12:06 PM

A friend had his site hacked and a splash page disagreeing with the war put up. Odd times.

MrPopup · 03-28-2003, 12:09 PM

Quote:

Originally posted by stocktrader23
Odd times.

The truth!

BRISK · 03-28-2003, 12:42 PM

The FBI phoned you about this? Why? Is it illegal to direct people to Arabic propaganda sites?

WebTitan · 03-28-2003, 01:00 PM

it is illegal to hack into a business server and redirect thousands of sites that people pay for.

basicly, I woke up this morning with a bunch of messages from people i have done some non adult work for wondering what happened to thier business websites. checked them out and sure enough, they appeared to be gone and an arabic site protesting the war with photos of dead kids and such was in its place, with thier URL in the address bar. they contacted me, then they got wind of similar things happening to other sitesn(from CNN or something) and were told in the news report to contact the authorities if it happend to them. Then, me being thier main contact gave my info to the Feds and they called me thinking trying to get a copy of the site. BUT it was not like they hacked into the server and deleted the companies pages and uploaded thier own, they just got onto the DNS machine of the host and did some redirecting or something. Not real sure how it happened. Just know the host has taken that machine completly offline to try and get it sorted out.

NBDesign · 03-28-2003, 01:01 PM

I'll never tell my secrets.

funkmaster · 03-28-2003, 01:09 PM

"anyone have any ideas on how they could do that?"

... magic pixi dust !

Triple 6 · 03-28-2003, 01:17 PM

Quote:

Originally posted by funkmaster
"anyone have any ideas on how they could do that?"

... magic pixi dust !

you can get it from IBM I hear

rossiya2 · 03-28-2003, 01:38 PM

The name server most people use is a combination of two incompatable services. Since BIND loads queries from other name servers your records can be at risk.

Splitting unchanging authorized settings from the goo loaded from other dubious name servers is key to any security model.

03-28-2003, 10:46 AM	#1
WebTitan Confirmed User Join Date: Mar 2003 Location: Western NY Posts: 5,114	Just got off the phone with the FBI! had all my non adult domains pointed to an arabic propaganda site when I got up this morning! Not sure how that happened as the site were still on the machine and the DNS looked right, but all the domains were pointing to the same place. Had to take the machine offline and the tech guys are still tryign to sort it out. anyone have any ideas on how they could do that?

03-28-2003, 10:50 AM	#2
Wizzo 2011 GFY Hall of Fame! Industry Role: Join Date: Nov 2000 Location: Back in Texas! Posts: 15,224	Jihad Hackers... They use Voodoo... __________________ Looking for Opportunity!

03-28-2003, 10:50 AM	#4
asuna Confirmed User Join Date: May 2002 Location: Montreal Posts: 8,743	they hacked verisign or some shit, your not the only one.. wich domains werethey? __________________

03-28-2003, 12:01 PM	#7
LiveDose Show Yer Tits! Industry Role: Join Date: Feb 2002 Location: Somewhere Out there... Posts: 25,792	Weapons Of Mass Direction.... It's becoming a serious concern on the net... __________________ Scammer Alert: acer19 acer [email protected] [email protected] Money stolen using PayPal

03-28-2003, 12:06 PM	#8
stocktrader23 Let's do some business. Industry Role: Join Date: Jan 2003 Location: The dirty south. Posts: 18,781	A friend had his site hacked and a splash page disagreeing with the war put up. Odd times. __________________ Hands Free Adult - Join Once, Earn For Life "I try to make a habit of bouncing my eyes up to the face of a beautiful woman, and often repeat “not mine” in my head or even verbally. She’s not mine. God has her set aside. She’s not mine. She’s His little girl, and she needs me to fight for her by keeping my eyes where they should be."

03-28-2003, 10:50 AM	#3
digihax So Fucking Banned Join Date: Feb 2003 Posts: 349	They used a technique called DNS Posioning. not really sure how it works but some hackers did the same thing to the ja-zeer tv station website in iraq.

03-28-2003, 10:54 AM	#5
DarkJedi No Refunds Issued. Industry Role: Join Date: Feb 2001 Location: GFY Posts: 28,300	yeah, and it was damn easy be afraid

03-28-2003, 12:42 PM	#10
BRISK Too lazy to set a custom title Join Date: Feb 2003 Posts: 12,240	The FBI phoned you about this? Why? Is it illegal to direct people to Arabic propaganda sites? __________________ I post on GFY so that when people ask me what I do, I can tell them that I work with the mentally retarded.

03-28-2003, 01:00 PM	#11
WebTitan Confirmed User Join Date: Mar 2003 Location: Western NY Posts: 5,114	it is illegal to hack into a business server and redirect thousands of sites that people pay for. basicly, I woke up this morning with a bunch of messages from people i have done some non adult work for wondering what happened to thier business websites. checked them out and sure enough, they appeared to be gone and an arabic site protesting the war with photos of dead kids and such was in its place, with thier URL in the address bar. they contacted me, then they got wind of similar things happening to other sitesn(from CNN or something) and were told in the news report to contact the authorities if it happend to them. Then, me being thier main contact gave my info to the Feds and they called me thinking trying to get a copy of the site. BUT it was not like they hacked into the server and deleted the companies pages and uploaded thier own, they just got onto the DNS machine of the host and did some redirecting or something. Not real sure how it happened. Just know the host has taken that machine completly offline to try and get it sorted out.

03-28-2003, 01:01 PM	#12
NBDesign Confirmed User Join Date: Jan 2003 Location: The other side of Hell Posts: 5,814	I'll never tell my secrets. __________________ Use Lensman's program and get the most for your hard earned traffic. Get Heidi for your site Here. Lots of sets to choose from. She makes a great Addition to any site. Grab one Grab All.

03-28-2003, 01:09 PM	#13
funkmaster So Fucking Banned Join Date: Sep 2001 Location: shell beach Posts: 7,938	"anyone have any ideas on how they could do that?" ... magic pixi dust !

03-28-2003, 01:38 PM	#15
rossiya2 Confirmed User Join Date: Nov 2002 Posts: 287	The name server most people use is a combination of two incompatable services. Since BIND loads queries from other name servers your records can be at risk. Splitting unchanging authorized settings from the goo loaded from other dubious name servers is key to any security model. __________________ <a href="mailto:[email protected]">sales@cologroup. com</a> \| 52027820 \| <a href="http://www.cologroup.com">www.cologroup.com</a>