Slashdot Mirror

← Back to Stories (view on slashdot.org)

BIND Strikes Back Against VeriSign's Site Finder

Posted by timothy on from the checks-and-balances dept.

BrunoC writes "Following the story about VeriSign's new Site Finder, the Internet Software Consortium promises to release a patch to its (in)famous BIND that will block the controversial Site Finder. Wired News has full coverage of the ISC initiative against this name resolving atrocity."

11 of 582 comments (clear)

  1. Internet standards humor alert by mwise · · Score: 5, Funny

    "VeriSign did not respond requests for comment."

    Isn't that what caused the problem in the first place?

    Thanks, I'll be here all week!

    1. Re:Internet standards humor alert by AndroidCat · · Score: 5, Funny

      "VeriSign did not respond requests for comment." Strange that requests for comment didn't end up at 64.94.110.11.

      --
      One line blog. I hear that they're called Twitters now.
  2. Re:Good for BIND by Anonymous Coward · · Score: 5, Funny

    At least they could have directed us to some decent pr0n instead.

  3. Re:Yeah, only SPAM, sure. by AKnightCowboy · · Score: 4, Funny
    So BIND blocks this won't Verisign just make another "patch" and fix the glitch?

    Not if they make it in a configurable way to let you choose what IP Verisign is redirecting to. Then again, Verisign is a bunch of Dope Smoking Pedophiles, as referenced by this Internet Web site they have registered. Let's not forget they're also a bunch of Clueless DNS whores. Oh yes, and I heard Verisign supports terrorists at this page: here...

    Verisign needs to be shut down for these un-American and clearly criminal web sites. Someone notify John Ashcroft, quickly!

  4. Re:Yeah, only SPAM, sure. by dm(Hannu) · · Score: 5, Funny
    Transposing letters is not (and never has been) the 'Slashdot effect'.

    Exactly. The correct term for this is Sldahost efcfet

  5. Re:Advice on switching to another registrar by jlusk4 · · Score: 4, Funny

    Good point, they *do* already have your money. Stay with Verisign (until your registration expires), but make a lot of support calls. (After all, you've paid for their sterling support.) Especially about this wildcard thing. I'm already forgetting exactly what it is, maybe you are, too. I'm sure they'd be happy to explain it to you, and why it's not bad. And if you forget again after a month or two, they'll be happy to discuss it with you again. And any other questions you might have, like how to set up a mail server alias thingy.

    John.

  6. It's a trick... by mseeger · · Score: 5, Funny
    Hi,

    this is just a trick. They just want to get rid of all those obsolete BIND-versions out in the internet.

    So they did this to goat all admins into patching their bind.

    Tricky they are...

    Regards, Martin

  7. Google by Spazmania · · Score: 4, Funny

    And not to be outdone by Verisign, Google has added a default route to the global BGP table which brings any formerly unroutable web traffic to their search engine.

    NOT!

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  8. Office of Homeland Insecurity by inputsprocket · · Score: 4, Funny
    .....and from Verisign's Terms and Conditions:

    "2.4 Monitoring and Communication
    VeriSign actively monitors all traffic associated with Site Finder, including DNS queries matching the wildcard entries in .com and .net and associated responses, and all traffic sent to the response server. This traffic is correlated and monitored in real time, 24 hours a day, seven days a week, by VeriSign's Network Operations Centre... complete traffic stream to the .com and .net name servers and the response server, as well as rolled up statistics, are stored for analysis."

    Ehm, well I don't agree to your Terms and Conditions, thank you very much. Please stop storing my typo data Please.

  9. Re:Yeah, only SPAM, sure. by platypus · · Score: 5, Funny

    Interesting that it rejects the first recipient, but accepts the second, then bomb on the DATA stage.
    You are thinking too complex for verisign standards ;)

    $ telnet spam.aasfgsdafgsdf.com 25
    Trying 64.94.110.11...
    Connected to spam.aasfgsdafgsdf.com.
    Escape character is '^]'.
    220 snubby4-wceast Snubby Mail Rejector Daemon v1.3 ready
    gfsdfg
    250 OK
    sdfgsdgf
    250 OK
    sdfgsdgf
    550 User domain does not exist.
    sdfgsdgf
    250 OK
    sdgfdsg
    221 snubby4-wceast Snubby Mail Rejector Daemon v1.3 closing transmission channel

    Connection closed by foreign host.

  10. Re:I am glad you're not patching by mccalli · · Score: 4, Funny
    Yes, strangely enough those who dedicate their lives to network adminning and writing BIND in the first place came up with a better patch than I managed to in the ten seconds it took to reply to a Slashdot post.

    You'll forgive me if I don't exactly hang my head in shame.

    Cheers,
    Ian