Slashdot Mirror

No kidding... I searched for "fuck verisign and fuck the horse it screwed my dns with", and the first four results were from slashdot... bizarre.

Verisign's Developer's Guide to DNS Wildcards

(from )
At any time VeriSign may modify or terminate these terms of use...Your continued use of the VeriSign Services constitutes your agreement to all such terms, conditions, and notices.
So, essentially, typos now enter everyone into a license?

If you really want to make sure Verisign hears you, try some of my suggestions from other posts, duplicated below.

A list of contact information is here. The Verisign main number is 1-877-438-8776, which gives you a long list of options. Depending on what you pick, you'll probably end up talking to a Network Solutions guy. Tell him you're distressed about the SiteFinder service, ask about what your options are, and ask if there's anyone else to talk to. They probably won't be much help, but write down everything they tell you, get their employee ID, and keep track of date/time for calls as well as time on hold (might be helpful).

After some lengthy conversation, I found out that I should be talking to the Verisign Global Registry, but that they can't give me a phone number, because (supposedly) NSI doesn't even have a phone number. However, I did get an e-mail address -- sitefinder@verisign-grs.com, which is routed to someone's inbox (as in, a person, not a support center), which currently yields an "Out-of-office reply" that gives out a cell phone number (!). I don't think I'm going to call it, but at least I have more contact information on file now and an e-mail that will get read.

Additionally, you might want to try calling the office of Russel Lewis, who's the VP of the Verisign directory services. He's at the Virginia office (1-703-742-0400), but I got disconnected instead of transferred and haven't called a second time (yet). If you try this number, you'll probably get a secretary, to whom you should explain that the standard procedures for communicating with Verisign have failed, that you are "very disappointed" and that you "want to make things right". (It works better if you're actually a Verisign customer.) If you're nice about it -- knowing that the secretary probably doesn't know anything about it and can't do anything anyway -- you can probably get routed to someone in the directory services division, where you can register further complaints.

[...]

I have been unable to raise the Chicago local office by phone, and when I went to visit, the visitor center couldn't even get a hold of them. Weird.

I called their headquarters in CA a few times now. I was hung up on, randomly transferred to someone's voice mail (I'm not sure who), and finally talked to a particularly helpful representative who passed my queries to his manager. They said that SiteFinder was run by NSI, to which I responded that NSI said that SiteFinder was run by Verisign, to which I added that Verisign (as a global registry) is the only organization with the power to do something like that. He went to talk to his manager, told me that they were promised more information on SiteFinder by the end of today (9/17), and promised me a call-back in 24 hours.

Updates to follow.

If you really want to make sure Verisign hears you, try some of my suggestions from other posts, duplicated below.

A list of contact information is here. The Verisign main number is 1-877-438-8776, which gives you a long list of options. Depending on what you pick, you'll probably end up talking to a Network Solutions guy. Tell him you're distressed about the SiteFinder service, ask about what your options are, and ask if there's anyone else to talk to. They probably won't be much help, but write down everything they tell you, get their employee ID, and keep track of date/time for calls as well as time on hold (might be helpful).

After some lengthy conversation, I found out that I should be talking to the Verisign Global Registry, but that they can't give me a phone number, because (supposedly) NSI doesn't even have a phone number. However, I did get an e-mail address -- sitefinder@verisign-grs.com, which is routed to someone's inbox (as in, a person, not a support center), which currently yields an "Out-of-office reply" that gives out a cell phone number (!). I don't think I'm going to call it, but at least I have more contact information on file now and an e-mail that will get read.

Additionally, you might want to try calling the office of Russel Lewis, who's the VP of the Verisign directory services. He's at the Virginia office (1-703-742-0400), but I got disconnected instead of transferred and haven't called a second time (yet). If you try this number, you'll probably get a secretary, to whom you should explain that the standard procedures for communicating with Verisign have failed, that you are "very disappointed" and that you "want to make things right". (It works better if you're actually a Verisign customer.) If you're nice about it -- knowing that the secretary probably doesn't know anything about it and can't do anything anyway -- you can probably get routed to someone in the directory services division, where you can register further complaints.

[...]

I have been unable to raise the Chicago local office by phone, and when I went to visit, the visitor center couldn't even get a hold of them. Weird.

I called their headquarters in CA a few times now. I was hung up on, randomly transferred to someone's voice mail (I'm not sure who), and finally talked to a particularly helpful representative who passed my queries to his manager. They said that SiteFinder was run by NSI, to which I responded that NSI said that SiteFinder was run by Verisign, to which I added that Verisign (as a global registry) is the only organization with the power to do something like that. He went to talk to his manager, told me that they were promised more information on SiteFinder by the end of today (9/17), and promised me a call-back in 24 hours.

Updates to follow.

I can't believe how this thing will redirect a web page. You would think that a domain like slashdot.org would resolve correctly. But check this out...
Linky

-Lucas

here is the original message i sent:
Verisign has continually been abusing the power that has been handed out to them. Two such examples are its mailing of false renewal notices, and its most recent exploit: sitefinder.verisign.com. Now, nearly all mistyped names will be sent to Verisign where they can do whatever they like to the unwitting user. There are even categories on sitefinder.verisign.com where one can browse and go to sites which are undoubtedly paying Verisign for the space. Please take this, and the hundreds or thousands of e-mails you will receive, into consideration, and exercise the power that ICANN has. Verisign has continually been abusing and tricking people through deceptive business practices, and this should be the last straw. Verisign should not only be removed from it's post, but it should also be fined for its numerous escapades designed to make money. Sincerely, Jay Taylor

here are the replies so far:
enterprise-pkisupport@verisign.com
Site Finder Service
VeriSign's Site Finder service improves the web browsing experience when the user has submitted a query for a nonexistent second-level domain name in the .com and .net top-level domains. Before this service was implemented, when a user entered a URL containing a nonexistent (e.g., unregistered) domain name ending in .com or .net, their web browser returned an error message that contained no useful information. With the introduction of Site Finder, users now receive a helpful web page offering links to possible intended destinations, related categories, and the ability to conduct additional searches immediately. For more information, please email: sitefinder@verisign-grs.com

CustomerService@NetworkSolutions.com
Dear Mr. Taylor,
Thank you for contacting Network Solutions.
We apologize for the inconvenience you are experiencing.
Much to our regret, we may not be able to assist you with your concern, as what you are encountering is a system recently applied by the Global Registry.
Site Finder is a new service offered by the VeriSign Global Registry. For more information, please contact VeriSign at sitefinder@verisign-grs.com
Please know that your inquiry is important to us, and we value your business.
Best regards,
Edwin001 Network Solutions, Inc.

improves the web-browsing experience my ass...abuses a monopoly is more like it. oh ya, they forgot to mention how much extra revenue it would generate for them. sLeAzEy.
:( what has the world come to. sad.

also- here is the list of emails that i sent the msg to:
authenticode-support@verisign.com; billing@verisign.com; channel-partners@verisign.com; clientpki@verisign.com; consultingsolutions@verisign.com; dbms-support@verisign.com; dcpolicy@verisign.com; digitalbranding@verisign.com; dnssales@verisign.com; enterprise-pkisupport@verisign.com; enterprise-sslsupport@verisign.com; info@verisign-grs.com; internetsales@verisign.com; IR@verisign.com; jobs@verisign.com; mss@verisign.com; objectsigning-support@verisign.com; paymentsales@verisign.com; practices@verisign.com; premiersupport@networksolutions.com; press@verisign.com; privacy@networksolutions.com; renewal@verisign.com; support@verisign.com; verisales@verisign.com; vps-support@verisign.com; vts-csrgroup@verisign.com; vts-mktginfo@verisign.com; webhelp@verisign.com; websitesales@verisign.com; websitesupport@verisign.com

A wildcard entry in a zone affects DNS responses for that zone. For existing applications that do not contemplate the effects of wildcard entries, application developers should consider taking appropriate corrective actions.

Great fun. A little tweaking and it works again.

Verisign contact information page

Gee, look at all of those toll free numbers.

-

Actually, I've made several support calls, and plan to visit to their Chicago office in a few hours. (No one was answering the phone, so I guess I have to walk in there before I can talk to someone.)

A list of contact information is here. The Verisign main number is 1-877-438-8776, which gives you a long list of options. Depending on what you pick, you'll probably end up talking to a Network Solutions guy. Tell him you're distressed about the SiteFinder service, ask about what your options are, and ask if there's anyone else to talk to. They probably won't be much help, but write down everything they tell you, get their employee ID, and keep track of date/time for calls as well as time on hold (might be helpful).

After some lengthy conversation, I found out that I should be talking to the Verisign Global Registry, but that they can't give me a phone number, because (supposedly) NSI doesn't even have a phone number. However, I did get an e-mail address -- sitefinder@verisign.com, which is routed to someone's inbox (as in, a person, not a support center), which currently yields an "Out-of-office reply" that gives out a cell phone number (!). I don't think I'm going to call it, but at least I have more contact information on file now and an e-mail that will get read.

Additionally, you might want to try calling Russel Lewis, who's the VP of the Verisign directory services. He's at the Virginia office (1-703-742-0400), but I got disconnected instead of transferred and haven't called a second time (yet). If you try this number, you'll probably get a secretary, to whom you should explain that the standard procedures for communicating with Verisign have failed, that you are "very disappointed" and that you "want to make things right". (It works better if you're actually a Verisign customer.) If you're nice about it (knowing that the secretary probably doesn't know anything about it and can't do anything anyway), you can probably get routed to someone in the directory services division, where you can register further complaints.

I'll post more information as I get it.

Actually, I've made several support calls, and plan to visit to their Chicago office in a few hours. (No one was answering the phone, so I guess I have to walk in there before I can talk to someone.)

A list of contact information is here. The Verisign main number is 1-877-438-8776, which gives you a long list of options. Depending on what you pick, you'll probably end up talking to a Network Solutions guy. Tell him you're distressed about the SiteFinder service, ask about what your options are, and ask if there's anyone else to talk to. They probably won't be much help, but write down everything they tell you, get their employee ID, and keep track of date/time for calls as well as time on hold (might be helpful).

After some lengthy conversation, I found out that I should be talking to the Verisign Global Registry, but that they can't give me a phone number, because (supposedly) NSI doesn't even have a phone number. However, I did get an e-mail address -- sitefinder@verisign.com, which is routed to someone's inbox (as in, a person, not a support center), which currently yields an "Out-of-office reply" that gives out a cell phone number (!). I don't think I'm going to call it, but at least I have more contact information on file now and an e-mail that will get read.

Additionally, you might want to try calling Russel Lewis, who's the VP of the Verisign directory services. He's at the Virginia office (1-703-742-0400), but I got disconnected instead of transferred and haven't called a second time (yet). If you try this number, you'll probably get a secretary, to whom you should explain that the standard procedures for communicating with Verisign have failed, that you are "very disappointed" and that you "want to make things right". (It works better if you're actually a Verisign customer.) If you're nice about it (knowing that the secretary probably doesn't know anything about it and can't do anything anyway), you can probably get routed to someone in the directory services division, where you can register further complaints.

I'll post more information as I get it.

Actually, I've made several support calls, and plan to visit to their Chicago office in a few hours. (No one was answering the phone, so I guess I have to walk in there before I can talk to someone.)

A list of contact information is here. The Verisign main number is 1-877-438-8776, which gives you a long list of options. Depending on what you pick, you'll probably end up talking to a Network Solutions guy. Tell him you're distressed about the SiteFinder service, ask about what your options are, and ask if there's anyone else to talk to. They probably won't be much help, but write down everything they tell you, get their employee ID, and keep track of date/time for calls as well as time on hold (might be helpful).

After some lengthy conversation, I found out that I should be talking to the Verisign Global Registry, but that they can't give me a phone number, because (supposedly) NSI doesn't even have a phone number. However, I did get an e-mail address -- sitefinder@verisign.com, which is routed to someone's inbox (as in, a person, not a support center), which currently yields an "Out-of-office reply" that gives out a cell phone number (!). I don't think I'm going to call it, but at least I have more contact information on file now and an e-mail that will get read.

Additionally, you might want to try calling Russel Lewis, who's the VP of the Verisign directory services. He's at the Virginia office (1-703-742-0400), but I got disconnected instead of transferred and haven't called a second time (yet). If you try this number, you'll probably get a secretary, to whom you should explain that the standard procedures for communicating with Verisign have failed, that you are "very disappointed" and that you "want to make things right". (It works better if you're actually a Verisign customer.) If you're nice about it (knowing that the secretary probably doesn't know anything about it and can't do anything anyway), you can probably get routed to someone in the directory services division, where you can register further complaints.

I'll post more information as I get it.

See http://www.verisign.com/corporate/about/contact/in dex.html

for plenty of toll-free (in US) contact numbers.

white paper

Just look at what you can do now !

verisign sucks
alternative to verisign
domain hosting -verisign
trust betrayal broken internet verisign"
bind patch

Just look at what you can do now !

verisign sucks
alternative to verisign
domain hosting -verisign
trust betrayal broken internet verisign"
bind patch

Just look at what you can do now !

verisign sucks
alternative to verisign
domain hosting -verisign
trust betrayal broken internet verisign"
bind patch

Just look at what you can do now !

verisign sucks
alternative to verisign
domain hosting -verisign
trust betrayal broken internet verisign"
bind patch

Just look at what you can do now !

verisign sucks
alternative to verisign
domain hosting -verisign
trust betrayal broken internet verisign"
bind patch

We didn't find: "www.verisign.com"

IANAL, but "ye, right!" (unless your in the USA or other anti-liberal countries (where it may be binding)). May Verislime burn in hell, oh, and have their powers removed. SIGN THE PETITION TO ICANN NOW: http://www.petitiononline.com/icanndns/

Here

Take this, verisign!

It gets better! (not safe for work)

Now when I get to the sitefinder, I'll know it!

Try this link: http://sitefinder.verisign.com/lpc?url='%3E%3Cfont %20size=+5%20color=%23FF0000%3EVERISIGNSUCKS%3C/fo nt%3E

Has anyone tried calling/contacting verisign directly?

VeriSign Worldwide Headquarters 487 East Middlefield Road Mountain View, CA 94043 Phone: 650-961-7500 FAX: 650-961-7300
Atlanta Area Office 3740 DaVinci Court 3rd Floor Norcross, GA 30092 Phone: 770-248-1005 Toll Free: 888-777-4313

Boston Area Office 401 Edgewater Place, Suite 280 Wakefield, MA 01880-6206 Phone: 781-245-6996 FAX: 781-245-6006

Kansas Office 7400 West 129th St Overland Park, KS 66213 Phone: 913-814-6200 FAX: 913-814-6501

Chicago Area Office 500 W. Madison Street Chicago, IL 60661 Phone: 312 660-7800

Baltimore Office - Federal Markets Phone: 650-426-5115 E-mail: verisales@verisign.com

Virginia Office 21355 Ridgetop Circle Dulles, VA 20166 Phone: 703-742-0400

Georgia Office 222 W Oglethorpe Ave Savannah, GA 31401 Phone: 912-234-8899

Seattle Area Office 4501 Intelco Loop SE PO Box 2909 Olympia, WA 98507 Phone: 360-493-6000

DNS Assurance Solutions Phone: 650-426-5310 E-mail: dnssales@verisign.com

Has anyone tried calling/contacting verisign directly?

VeriSign Worldwide Headquarters 487 East Middlefield Road Mountain View, CA 94043 Phone: 650-961-7500 FAX: 650-961-7300
Atlanta Area Office 3740 DaVinci Court 3rd Floor Norcross, GA 30092 Phone: 770-248-1005 Toll Free: 888-777-4313

Boston Area Office 401 Edgewater Place, Suite 280 Wakefield, MA 01880-6206 Phone: 781-245-6996 FAX: 781-245-6006

Kansas Office 7400 West 129th St Overland Park, KS 66213 Phone: 913-814-6200 FAX: 913-814-6501

Chicago Area Office 500 W. Madison Street Chicago, IL 60661 Phone: 312 660-7800

Baltimore Office - Federal Markets Phone: 650-426-5115 E-mail: verisales@verisign.com

Virginia Office 21355 Ridgetop Circle Dulles, VA 20166 Phone: 703-742-0400

Georgia Office 222 W Oglethorpe Ave Savannah, GA 31401 Phone: 912-234-8899

Seattle Area Office 4501 Intelco Loop SE PO Box 2909 Olympia, WA 98507 Phone: 360-493-6000

DNS Assurance Solutions Phone: 650-426-5310 E-mail: dnssales@verisign.com

Contact VERISIGN NOW! Contact their _sales_ department and tell them you will no longer be using any of their products until they get this fixed. Probably the person on the other end of the phone won't have a clue what you're talking about, but be aware, if this goes through the sales channels, it WILL be heard by upper management.

The phone number to use is 877-438-8580, pulled from
http://www.verisign.com/corporate/about/contact/in dex.html?sl=060104.

If they get enough of these, they'll stop.

Try it!.

And directly from the Terms of Use posted on the site when I tried to access http://ssslllaaassshhhdddooottt.net

Sole Remedy.
Your use of the Verisign Services is at your own risk. If you are dissatisfied with any of the materials, results or other contents of the Verisign Services or with these Terms and Conditions, our Privacy Statement or other policies, your SOLE REMEDY is to discontinue use of the Verisign Services on our site.

Converted to lowercase by author to pass through the lameness filter...

Good luck actually doing this! BTW: Did anyone else notice that the site is slow as molassas. Did they under estimate the number of pages they would be serving or is it just me?

I can verify that these numbers are from verisign, not some spam for another company.

Look under verisign's contact page, under product sales information, 2nd column 5th paragraph.

as noted in some other post, it is possible to dump malicious scripts using the verisign link. For ex, try to navigate to verisign using this link

I'm not sure what the mystery is here.. they explain in their implementation whitepaper how sitefinder responds to the various network protocols as well as the filtering on certain ports. It wouldn't be surprising if later they added other services as "useful" responses are discovered.

• Did you notice that, by mis-typing some URL, you implicitly agreed with their Terms of Service agreement?
  
• How long would you trust a fine, upstanding monopoly company like Verisign to continue to provide this useful service pro bono? Did you read that TOS after all? Notice where they explicitly state "The information ... may be supplied by VeriSign's commericial licensors, advertisers or others" Hmm... what *could* they possibly be planning here?
  
• Would you mind if every domain-spoofing spam email that you bounced from your email went directly to Verisign, who would be free to do with it what they wish? Legally, you would have just sent them an email, and they'd be more than happy to harvest as much info from it as possible. And, by the way, Verisign has plenty of experience selling people's personal data for profit.
  
• How is the end result any different from the recent cases of "typo-squatting" that have been found illegal in various courts?
  

Have fun!

The VIA EPIA CL-Series Mini-ITX Mainboard is an ultra compact x86 dual LAN platform with unprecedented expandability and versatility for today's demanding networking applications. Measuring a mere 17 x 17 cm, the VIA EPIA CL enables space and power saving systems with minimal moving parts that are ultra reliable for 24/7 operation in a once-on-always-on network environment. The VIA EPIA CL is compatible with recent Microsoft(R) and Linux operating systems and is available in a variety of configurations, including the fanless VIA Eden(TM) ESP processor for silent system designs and the highly efficient VIA C3(TM) processor for more demanding multimedia applications.

The mainboard is based on the VIA CLE266 chipset featuring an embedded hardware MPEG-2 decoder and integrated VIA UniChrome(TM) 2D/3D graphics for rich digital media performance. With the sizable memory bandwidth of DDR266 SDRAM and the high data transfer speeds of ATA-133, the VIA EPIA CL delivers the increased performance levels required by today's commercial digital video and audio applications.

The latest in high-bandwidth connectivity is supported with up to six USB 2.0 connections, as well as four COM ports and two 10/100 Fast Ethernet ports for extended broadband connectivity. The VIA EPIA CL also offers support for a number of LVDS embedded LCD panels, has one PCI slot for expandability options, and is compatible with a full range of Mini-ITX chassis as well as FlexATX and MicroATX enclosures and power supplies.
VIA EPIA CL-Series Specifications [verisign.com]

Chances are he'll end up in the same position as before

He might come up with something

It sounds like this might be the way to present it.. [verisign.com]

First, I don't have an X-Box, but serious question, wouldn't you just be able to use a router to keep anything coming into your X-Box lan that you didn't want?

I know setting up a DNS service would plug the Dashboard hole.

It sounds like this might be the way to fight it.

Bettar: use style attribute to make it huge

How about this one? Forward it to the Department of Commernce (dont they regulate the DNS?

A fellow SA Goon (thatdog), pointed this out, and it could perhaps be a nice fun tool to screw with them...I'll quote his post over there:

thatdog said:
The most amusing part of this to me is they take whatever is passed in the url parameter and shove it into the html of their page, no questions asked. Remote scripting exploits will be ever so easy!

If you don't get what I'm talking about, just check out this link.

Would be fun to see redirects on major isps and backbones...or even forwarding to an alternate site hosted elsewhere with an explanation.

A great feature: Every verisign insult typed into their "search engine" returns slashdot...

Including classis such as:
f*ck verisign
f*ck verisign up the a$$
verisign owns your mom
verisign execs spend time pushing their moms

Sweet...

A great feature: Every verisign insult typed into their "search engine" returns slashdot...

Including classis such as:
f*ck verisign
f*ck verisign up the a$$
verisign owns your mom
verisign execs spend time pushing their moms

Sweet...

A great feature: Every verisign insult typed into their "search engine" returns slashdot...

Including classis such as:
f*ck verisign
f*ck verisign up the a$$
verisign owns your mom
verisign execs spend time pushing their moms

Sweet...

A great feature: Every verisign insult typed into their "search engine" returns slashdot...

Including classis such as:
f*ck verisign
f*ck verisign up the a$$
verisign owns your mom
verisign execs spend time pushing their moms

Sweet...

(not work safe, you've been warned)

This will make you search google for your cookie. You can modify it to do whatever you want.

I feel so much better now knowing that the geniuses at Verisign have so much power over DNS. For example, notice that their web page has a basic cross site scripting security hole. Idiots!