[105793] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DNS and potential energy

daemon@ATHENA.MIT.EDU (Daniel Hagerty)
Tue Jul 1 12:16:29 2008

To: Rob Pickering <rob@pickering.org>
From: Daniel Hagerty <hag@linnaean.org>
Date: 01 Jul 2008 12:16:20 -0400
In-Reply-To: Rob Pickering's message of "Tue, 01 Jul 2008 15:28:56 +0100"
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org

Rob Pickering <rob@pickering.org> writes:

> Or .com. Oddly enough I just now found a Windows box and typed 
> "command.com" in a browser URL bar and it did what I expected, when I 
> typed the same thing at a cmd prompt it did something different and I 
> expected that too.

1. Copy \windows\system32\cmd.exe to the desktop.

2. Run internet exploder.

3. Type "cmd.exe" in the address bar and observe what happens.

I don't know about you, but given ie's default download location, and
your (apparently common) erroneous expectation, this looks ripe for
social engineering to me.


home help back first fref pref prev next nref lref last post