[33866] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Microsoft spokesperson blames ICANN

daemon@ATHENA.MIT.EDU (Scott Gifford)
Wed Jan 24 21:02:03 2001

To: "Stephen J. Wilcox" <steve@opaltelecom.co.uk>
Cc: nanog@merit.edu
From: Scott Gifford <sgifford@tir.com>
Date: 24 Jan 2001 19:41:37 -0500
In-Reply-To: "Stephen J. Wilcox"'s message of "Wed, 24 Jan 2001 21:59:19 +0000 (GMT)"
Message-ID: <m3k87kh39a.fsf@sghome.tir.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Errors-To: owner-nanog-outgoing@merit.edu


"Stephen J. Wilcox" <steve@opaltelecom.co.uk> writes:

> Out of interest.. does anyone happen to know why rs.internic.net reports
> the following of microsoft.com?
> 
> [rs.internic.net]
[ ... ]
> MICROSOFT.COM.HACKED.BY.HACKSWARE.COM
[ etc... ]

That's a fairly recent trick (which has been discussed here before);
the default Whois search is a substring search.  Since anybody with a
domain can register their DNS servers with any registrar, the smartass
owner of 'hacksware.com' just named their nameserver:

    MICROSOFT.COM.HACKED.BY.HACKSWARE.COM

which is a legitate name for a nameserver, and contains the substring
microsoft.com.

You can work around it by only searching domains (not nameservers):

    whois 'domain microsoft.com'

Either funny or disturbing, depending on how you look at it.  Perhaps
both . . .

-----ScottG.


home help back first fref pref prev next nref lref last post