Microsoft temporarily halts IE 5.5 downloads

[xortam]

Let the conspiracies begin ... http://news.cnet.com/news/0-1003-200...html?tag=mn_hd

[paulcs]

They were hacked today.

Paul
paulcs@flashcom.net

[xortam]

Yeah, found interesting stuff on the http://www.icrontic.com/ site. They had their DNS servers mangled Tuesday and now they hit the lone router with DoS attacks. They still had problems after claiming they fixed the network. If you check out whois you'll see the messed up registrars ...

<font face="Verdana, Arial, Helvetica" size="2">Whois info for, microsoft.com:

Whois Server Version 1.3

Domain names in the .com, .net, and .org domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.

Server Name: MICROSOFT.COM.WILL.LIVE.FOREVER.BUT.LUNIX.SUCKS-BYBIRTH.ARTISTICCHEESE.COM
IP Address: 209.191.22.24
Registrar: CORE INTERNET COUNCIL OF REGISTRARS
Whois Server: whois.corenic.net
Referral URL: www.corenic.net

Server Name: MICROSOFT.COM.WILL.BOW.TO.SEANHARDING.COM
IP Address: 216.162.195.124
Registrar: DOTSTER, INC.
Whois Server: whois.dotster.com
Referral URL: http://www.dotster.com/help/whois

Server Name: MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.CO M
IP Address: 207.10.88.13
Registrar: INTERNET DOMAIN REGISTRARS
Whois Server: whois.registrars.com
Referral URL: www.registrars.com

Server Name: MICROSOFT.COM.SE.FAIT.HAX0RIZER.PAR.TOUT.LE.ZOY.OR G
IP Address: 138.12.12.12
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: www.gandi.net

Server Name: MICROSOFT.COM.OWNED.BY.MAT.HACKSWARE.COM
IP Address: 211.63.57.1
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org

Server Name: MICROSOFT.COM.N-AIME.BILL.QUE.QUAND.IL.N-EST.PAS.NU
IP Address: 62.220.128.7
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.MUST.STOP.TAKEDRUGS.ORG
IP Address: 12.5.4.8
Registrar: REGISTER.COM, INC.
Whois Server: whois.register.com
Referral URL: www.register.com

Server Name: MICROSOFT.COM.ISNT.THIS.SILLY.AND.DONT.YOU.WANT.YO UR.OWN.808.ORG
IP Address: 207.211.228.160
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.IS.SOON.GOING.TO.THE.DEATHCORPORATIO N.COM
IP Address: 62.92.244.245
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERROR ISTS.NET
IP Address: 170.1.75.143
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.IS.NOTHING.BUT.A.MONSTER.ORG
IP Address: 213.156.2.27
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.IS.NO.MATCH.FOR.THE.WANNABE.TERRORIS TS.AT.JIMPHILLIPS.ORG
IP Address: 24.240.60.24
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org

Server Name: MICROSOFT.COM.IS.GOD.BUT.LINUX.SUCKS-FOREVER.ARTISTICCHEESE.COM
IP Address: 209.191.99.161
Registrar: CORE INTERNET COUNCIL OF REGISTRARS
Whois Server: whois.corenic.net
Referral URL: www.corenic.net

Server Name: MICROSOFT.COM.IS.BORING.COMPARED.TO.TEENEXTREME.CO M
IP Address: 192.168.134.237
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org

Server Name: MICROSOFT.COM.IS.AT.THE.MERCY.OF.DETRIMENT.ORG
IP Address: 216.229.2.231
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: www.gandi.net

Server Name: MICROSOFT.COM.INSPIRES.COPYCAT.WANNABE.SUBVERSIVES .NET
IP Address: 208.178.101.5
Registrar: DOTSTER, INC.
Whois Server: whois.dotster.com
Referral URL: http://www.dotster.com/help/whois

Server Name: MICROSOFT.COM.HAS.NO.LINUXCLUE.COM
IP Address: 209.208.48.121
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.HACKED.BY.PSYKOJOKO.ON.A.ROOT-NETWORK.COM
IP Address: 193.251.82.2
Registrar: CORE INTERNET COUNCIL OF REGISTRARS
Whois Server: whois.corenic.net
Referral URL: www.corenic.net

Server Name: MICROSOFT.COM.HACKED.BY.HACKSWARE.COM
IP Address: 211.63.57.62
Registrar: TUCOWS.COM, INC.
Whois Server: whois.opensrs.net
Referral URL: www.opensrs.org

Server Name: MICROSOFT.COM.GUTS.NL
IP Address: 212.78.175.7
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.FAIT.VRAIMENT.DES.LOGICIELS.A.TROIS. FRANCS.DOUZE.ORG
IP Address: 138.12.12.42
Registrar: GANDI
Whois Server: whois.gandi.net
Referral URL: www.gandi.net

Server Name: MICROSOFT.COM.ER.IKKE.NO.I.FORHOLD.TIL.LATHANS.NET
IP Address: 62.92.244.246
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com

Server Name: MICROSOFT.COM.AINT.WORTH.SHIT.KLUGE.ORG
IP Address: 216.181.127.195
Registrar: THE NAME IT CORPORATION
Whois Server: whois.nameit.net
Referral URL: www.nameit.net

Domain Name: MICROSOFT.COM
Registrar: NETWORK SOLUTIONS, INC.
Whois Server: whois.networksolutions.com
Referral URL: www.networksolutions.com
Name Server: DNS4.CP.MSFT.NET
Name Server: DNS5.CP.MSFT.NET
Name Server: DNS7.CP.MSFT.NET
Name Server: DNS6.CP.MSFT.NET
Updated Date: 24-jan-2001
</font>

[Ees]

xortam,

That whois info looks cute, but doesn't imply a hack at Microsoft. The problem is the way the whois server (some of them, at least) searches for matching records: by substring.

So it's very easy: register the domain 'artisticcheese.com', create a subdomain 'microsoft.com.will.live.forever.etc.etc.artisticc heese.com', and whois will show it when queried for 'microsoft.com'.

Try some other domains for more reading pleasure: apple.com, whitehouse.gov (bonus question: why does this *only* show "WHITEHOUSE.GOV.HAS.THE.BEST.TERRORISTS.NET"?) , or yahoo.com.

Martin

[Jorden]

Martin, Microsoft told the world they were hacked at the outage. The hackers were sending lots of data back to the servers, thus crashing them. Like Joel said, they must've given the software back after they saw what shit it was

Jord.

[paulcs]

The hack was reported on the cable "news" station, MSNBC, yesterday evening.

Strangely enough, I seem to recall reading a reported denial from a Microsoft spokesperson on CNN's website, but the MSNBC report was pretty convincing.

Paul
paulcs@flashcom.net

[xortam]

Yeah Ees ... its just amusing what they did to the registrars. I don't know the specifics of the hack but I assume they managed to modify the Host Rec A entries in the primary zone DNS servers. I thought it was amusing that MSFT said that pulling the IE 5.5 updates had nothing to do with the hacks but well see.

[paulcs]

Let's hope it's not too amusing. I recentley reinstalled Windows on my primary system, and managed to get through.

Paul
paulcs@flashcom.net

[Ees]

I didn't mean to imply that MS wasn't hacked. I won't even rule out the possibility that their DNS servers were hacked. That's entirely possible.

I just wanted to clarify that the above whois-info doesn't have too much to do with that.

They're in trouble when something like "WE.WERE.HACKED.AT.MICROSOFT.COM" shows up

Martin

[xortam]

It raised my curiosity when I first saw that the updates were being pulled and the timing with the hacks. I thought maybe MSFT was modifying the browser to hardcode the MSFT domain IP addresses for their key websites so the user wouldn't have to rely on the DNS servers. This would be a pain for them to maintain when the IP addresses need to be changed and new key sites are brought on-line. Doubt they would do that but it gets you wondering what their plan is.

BTW, they hit them again. This just goes to show how little MSFT understands about networking. This time it was their IT that bungled it, not development. They've convinced so many companies to go with their solutions and it just chokes when they try to deploy this stuff across an enterprise. So sad to see so many companies suckered in by these suede shoes. If you confront these companies with these problems they only respond ... "Yes, but they'll eventually get it right". They probably will eventually get it right enough, but only after ringing every last penny out of their customers.