MelbourneIT Lapse Permitted Panix Hijack

McSpew writes "Netcraft reports MelbourneIT's CTO, Bruce Tonkin, has admitted the Panix domain hijacking occurred because of a loophole in MIT's domain transfer process. He doesn't go into detail about what that loophole was, or how it was closed. As a Panix user, I'd like more detail, and I'd like to know what can be done to stop this sort of nonsense happening to other domains."

Comments

Meh

[Anonymous Coward]

Unless it runs on MacOS or will be available in a smaller form factor of varying stylish colors, I fail to see how this is postworthy on Slashdot.

whatever you do...,

[Anonymous Coward]

just dont panix!

The is simple

[crunk]

There was an error in the checking process prior to initiating the transfer

Someone screwed up.

The loophole that led to this error has been closed.

And they fired the guy.

Re:The is simple

[SteeldrivingJon]

The guy who put the CEO's cellphone on the web has been sacked.

The CEO is not to be disturbed when he's cooking up Vegemite on the barbie.

Re:Overworked

[nzkbuk]

You'll never stop this sort of stuff, there is always someone smarter and more determined to find loopholes than the overworked, caffeine addicted guy paid to write the code.

You're joking right ? If my experiance in the IT sector is anything to go by the guy who wrote the code while most probably overworked and caffeine addicted, is almost certainly NOT paid to write this code.

More than likely he's paid to do something else and has had to put this together in an afternoon between other projects.

In A Word...

[ackthpt]

He doesn't go into detail about what that loophole was, or how it was closed. As a Panix user, I'd like more detail, and I'd like to know what can be done to stop this sort of nonsense happening to other domains."

In a word - Fosters.

Translation of Translation of corporate speak

[ackthpt]

Melbourne IT, which sells its domains through Yahoo and many other hosting firms, defended its claim of 24/7 customer service for resellers and technical contacts (although not retail customers), but said it will evaluate whether it can improve.

Translation: We won't commit to doing a damn thing, and frankly we're only interested in the people who pay us to fuck up. Nonethless, we're attempting to put it nicely, so be grateful.

Translation: We are committed to solutions which enhance your whole internet experience and lifestyle. Please see our website if you have any questions concerning customer service.

404 - Page not found

Clearly, MIT has it's priorities.

[Saeed al-Sahaf]

Panix CEO Alex Rosen said. "I didn't find useful 24-hour NOC-type info anywhere. MIT apparently has no weekend support at all; I finally located their CEO's cellphone in an investor-relations web page."

Clearly, MIT has it's priorities.

Re:Clearly, MIT has it's priorities.

[SteeldrivingJon]

I expect that is the loophole they have fixed. The CEO's contact info is probably completely gone, now.

Re:The weekend rule

[philovivero]

In a recent terrorism trial the suspect could not contact anyone on a weekend to report a bomb plot - in 2002.

Those Aussie terrorist suspects are a lot more polite than the Muslim and American ones. If all terrorist suspects would call in bomb plots, the authorities' jobs would be a lot easier.

"Yes officer, if you cut the red wire directly after the green one, you should have the bomb defused and be home by tea time."

Re:Not very surprised

[SteeldrivingJon]

They also have all the integrity to be expected of the major ".cx" registrar.

I expect that within the year they'll change their name to GoatseIT.

Re:Overworked

[Anonymous Coward]

My father registered a domain name with them under the company name " Brothers Inc." But on the form mispelled Brothers as Borthers...

... before i could take contral of the domain

Ahh, evolution at work. Go genes go!