OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq Archives: Re: Anyone can take over virtually any domain

Re: Anyone can take over virtually any domain on the net...


Subject: Re: Anyone can take over virtually any domain on the net...
From: root (rootTHINKTANK.DHS.ORG)
Date: Fri Jan 14 2000 - 22:43:03 CST


> You make a pretty huge assumption that the administrator of
> that domain will miss the response from network solutions or will do
> nothing about it, both of which are not very good assumptions.

Many domains have contacts that use free email services like HotMail, and
with the long string of problems services like that have with security it
isn't hard to gain access to thoes addresses. I can't remember where, but
I have heard of people flooding the contacts email address with a few
thousand emails in hopes the person will just clear the mail box. Or of
course someone could exploit the mail server. Besides it takes around 24
hours to set the records straight again, and most defaced pages don't stay
up that long anyways.

 - Billy Cobin



This archive was generated by hypermail 2b27 : Mon Jan 17 2000 - 14:45:32 CST