Slashdot Mirror


Verisign To Sell DNS Root Server Lookup Data?

An anonymous reader writes "According to an editorial at Domain Name News, Verisign is considering selling partial access to DNS root server lookup data. The data would be made available to registrars, who in turn could use it for 'traffic-tasting' non-existent domains entered by any internet user. This would give them a better idea about what bogus domains to put up sites on to capture eyeballs." Haven't seen this story elsewhere and it's based on an anonymous source; YMMV.

115 comments

  1. I have no problem with this by Anonymous Coward · · Score: 0

    I see no problem with this.

    1. Re:I have no problem with this by ameyer17 · · Score: 2, Interesting

      Yeah, except the data could probably be used by typosquatters to... optimize their activities. Anything that helps typosquatters is a bad thing in my opinion.

    2. Re:I have no problem with this by trolltalk.com · · Score: 1

      "Yeah, except the data could probably be used by typosquatters to... optimize their activities. Anything that helps typosquatters is a bad thing in my opinion."

      So just write a script to look up randomly generated web sites, like "mydog42131cat.com", "yourdog42131cat.com", "ourdog42131cat.com" "thedog42131cat.com", and hit those random names many times a day, for weeks on end, until some typo squatter spends the $6 to register it, then stop. "Gee, this domain was getting 100s of hits, now its getting nothing ... Verisign ar crooks!"

    3. Re:I have no problem with this by mikael · · Score: 1

      Yes, but there are actually auction houses where they sell off the domains that aren't making them money. Buy they will also go around offering to buy domains names off other people. The good news is that all the one word domain names have been taken, so they are now looking at multiple word names.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    4. Re:I have no problem with this by trolltalk.com · · Score: 1

      And eventually, when enough people lose enough money, this typo-squatting stupidity will stop.

      Imagine a list, like an adblock list, but filled with typo-squatter urls, and your browser set to hit 4 or 5 (but not show you the resulting page) every time you load a new page, to help obfuscate your browsing history from snoops upstream. Hurts the typo-squatters, since its all bad traffic, hurts the snoops, because its mostly bad data.

  2. Verisign by jcicora · · Score: 2, Insightful

    Does Verisign do anything anymore that isn't just to make a bigger buck, the rest of the world be damned?

    1. Re:Verisign by Chyeld · · Score: 5, Funny

      I'm guessing you don't know much of the history of Network Solutions/Verisign if you can phrase the question using the word "anymore".

    2. Re:Verisign by gzerphey · · Score: 1

      Nope... next question please.

      --
      I don't have a microwave. I do, however, have a clock that occasionally cooks shit.
    3. Re:Verisign by Anonymous Coward · · Score: 0

      Since Roper took over? No.

      The market loves him though, so it's alright.

    4. Re:Verisign by Anonymous Coward · · Score: 0
      > I'm guessing you don't know much of the history of Network Solutions/Verisign if you can phrase the question using the word "anymore".


      ...or "lying cocksuckers."



      A tip to "branding coordinators", or whatever you marketing guys call yourselves when you invent company names:


      Altria's products kill people. Verizon and Verisign are lying cocksuckers. Verizon phones drop calls when a gnat farts between you and the cell tower, and Verisign will give a cert to any spammer whose check clears.


      If your company name isn't a real world, and yet requires four letters snipped out of words meaning "Being nice to people", "Truth", "Horizon", and "Signature", your brand association among technology professionals is the opposite of what the gullible fucktards in your focus group told you it was.

    5. Re:Verisign by Burz · · Score: 1

      OK, while we're talking about them... http://slashdot.org/comments.pl?sid=334391&cid=21055301

    6. Re:Verisign by Dark_Gravity · · Score: 1

      I'm guessing you don't know much of the history of Network Solutions/Verisign if you can phrase the question using the word "anymore".

      ITYM Verislime

  3. Based on what I've misspelled... by snl2587 · · Score: 1

    Well at least now absolutely everyone can get "what you need, when you need it."

    1. Re:Based on what I've misspelled... by v1 · · Score: 1

      I ran into that TWICE today. Makes me wonder, does anyone have statistics on what percentage of registered domain names are typeo squatters? I'd imagine for every one popular site (google.com, youtube.com etc) there are somewhere on the order of 200 typeo squatter domains registered, so there's gotta be a ton of them in all.

      I'm a little surprised that they can make money on these. Either they're getting the domains cheaper than I think they are, are getting more per click / impression than I'm expecting, or there are a lot more fat fingers out there.

      --
      I work for the Department of Redundancy Department.
    2. Re:Based on what I've misspelled... by sg_oneill · · Score: 1

      As a former domain registrar employee, MOST domains registered are fraudulent or typo type things. I kid you not. The whole industry needs to be razed to the ground, preferably by angry federal agents. Acording to the CEO of go-daddy, in April 2006, 32 million of 35 million domain registrations where part of Kiting schemes. It fucks up legitimate registrars, and ICANN doesn't want to do a god damn thing about it. The system is broken almost beyond repair, and frankly the dot COM system needs to be reformed so that you have to PROVE you have a legitimate use for the domain. Its getting harder and harder to surf the net without seeing good sites destroyed by fucking domain squatters. Sure the site might of folded, but DONT STEAL THE FUCKING DOMAIN NAME.

      Now Verizon wants to profit of the fucking thing?

      Seriously someone get these crooks the fuck away from the Internet.

      "What you need, when you need it"???

      Honestly the internet is one fucked up mutant flipper baby at the moment.

      --
      Excuse the Unicode crap in my posts. That's an apostrophe, and slashdot is busted.
  4. I'm rather doubtful about how useful that would be by xSquaredAdmin · · Score: 4, Insightful

    Most residential and business users will be behind a local DNS server, which probably caches the nameservers for individual TLDs. Since those NS entries on the root servers generally have a 48-hour cache time (and many ISPs DNS servers are probably (mis)configured to hold the data for longer), it doesn't seem like many requests would actually be getting through to Verizon's root servers, especially not enough to make a service like this viable.

    --
    Crushing dreams at the speed of sarcasm
  5. This seems odd by Anon-Admin · · Score: 4, Insightful

    I remember when registration of domains was free, all you had to do was figure out how to fill out the paperwork.

    So they sell the data, new domains are registered, and the sites that go up on these domains will be loaded with pop-ups, pop-unders, pop-offs, and pop-up-ur-as* windows.

    Sounds like enabling spam to me!

    1. Re:This seems odd by Anonymous Coward · · Score: 0

      What exactly is Insightful about this post? Even Interesting would be questionable.

  6. I bet they've been doing this for years by sqrammi · · Score: 3, Informative

    I personally am very against something like this. I've heard of several people just typing a domain name into Internet Explorer, seeing that it didn't exist, and then moments later trying to register the domain only to find that it was just barely registered by some registrar. Of course in these cases, Microsoft or possibly some spyware company was the culprit, but I'd hate for this information to be more quickly and widely available. I can't see how anyone would be OK with this.

    1. Re:I bet they've been doing this for years by suso · · Score: 1

      Yes I agree. This is currently going on right now, but its done through webpages or search bar plugins or something. At least for people who know how to do the direct queries, we can get around this, but if Verisign does this, it will prevent people from checking for domain name availability without the fear of it being taken before they can register it.

      I just wrote to Verisign to strongly emphasize that this is wrong. Plus, this would be bad for other registrars because I would think it would cut them out of the loop. If domain tasters kept a domain after 5 days, then now the consumer has to go through another non-registrar party to buy the domain, instead of GoDaddy, eNom or whatnot.

    2. Re:I bet they've been doing this for years by hal9000(jr) · · Score: 1

      I doubt that it was that fast as you are implying. And what do you mean "some registrar"? Where did they search? At a registrars page? Are you saying that registrar, or some other registrar, registered the name? In either case, it's not likely to happen and means in the former case, the registrar is loosing it's own business (dumb) or is colluding with the competition (also dumb).

      Those people probably just got bit by a coincidence.

    3. Re:I bet they've been doing this for years by Anonymous Coward · · Score: 0

      Shut up.

    4. Re:I bet they've been doing this for years by trolltalk.com · · Score: 1

      "I doubt that it was that fast as you are implying. And what do you mean "some registrar"? Where did they search? At a registrars page? Are you saying that registrar, or some other registrar, registered the name? In either case, it's not likely to happen and means in the former case, the registrar is loosing it's own business (dumb) or is colluding with the competition (also dumb).

      Those people probably just got bit by a coincidence.

      I used to see it happen a LOT - then I stopped doing name lookups through web interfaces, and do a whois in a terminal, and the problem went away. NEVER do a domain name search through a web interface. They're not there for your benefit, but for domain name pharmers.
    5. Re:I bet they've been doing this for years by sqrammi · · Score: 1

      Nope, I checked the domain before and after it was registered by the registrar. It was not registered before they checked, and it was afterwards (at least a few hours later). All the people did was type in the domain in Internet Explorer. The "date registered" date showed the day that they typed it into their browser. Another very suspicious thing is that the domain was unregistered after two weeks. I don't remember the exact name of the registrar, something like "King Domain" or something like that.

    6. Re:I bet they've been doing this for years by bit01 · · Score: 1

      I doubt that it was that fast as you are implying.

      Trivial to automate.

      ---

      "Advertising supported" just means you're paying twice over, once in time to watch/avoid the ad and twice in the increased price of the product to pay for the ad.

    7. Re:I bet they've been doing this for years by rs79 · · Score: 1

      "I used to see it happen a LOT - then I stopped doing name lookups through web interfaces, and do a whois in a terminal, and the problem went away. NEVER do a domain name search through a web interface. They're not there for your benefit, but for domain name pharmers "

      Oy. Where to begin.

      First of all, traffic to the root servers isn't vert interesting. They get queries like "what are the nameservers for .com?" or "what are the nameservers for .tv". The root servers serve up the NS records for the top level domain servers.

      TFA almost certainly means "tld servers" not "root servers", as the tld servers are the ones that get queries on the order of "what are the NS records for blahfoobingyabbadabbado.com" and failures in these lookups are usefull to some people.

      As for looking up domains stealthily, yes, by all means avoid web based lookups.

      But if you use dig/nslookup what have you you're still querying the tld servers and your failed lookups will be sold. So this won't help.

      But! There are 13 nameservers listed for com and similarly so for net. There's zero guarentee NSI, err, Verisign will actually get all the queries. They only get some.

      The only way you can do this independant of observation is to download a copy of the com or net zone files. You can get them from NSI, err, Verisign by filling out some forms, then you get a login and password and can download the zones and look at junk without anybody seeing.

      I'm not sure of the marginal utility of this, I just wanted to point out you're not "safe" just because you use dig instead of a web based lookup.

      I can't get too excited about this. I'm more annoyed by them selling whois in bulk.

      When domains were free I registered a lot of silly ones. Right away and still to this day I get (snail) mail from the likes of HP, Microsoft, IBM etc to "The Masonic order of the Mango" and other idiocies.

      --
      Need Mercedes parts ?
  7. Fun with typosquatters by base3 · · Score: 5, Funny

    $ dig a.com
    $ dig b.com
    . . .
    $ dig aaaaaaaaa.com
    $ dig aaaaaaaab.com
    . . .
    $ dig zzzzzzzzz.com

    --
    One CPU cycle wasted on digital restrictions management is ONE TOO MANY.
    1. Re:Fun with typosquatters by zappepcs · · Score: 4, Funny

      This is in fact the correct way to change this situation. When the squatters have to work hard to figure out whether to squat or not...
      1 - A few lines of script
      2 - p2p dispersal
      3 - happiness all around

      It should only take about a week before the squatting cycle got so out of hand that domain registration becomes impossible...

      ok, script is done... ready?

      3... 2.... 1...

    2. Re:Fun with typosquatters by Target+Drone · · Score: 1
      Actually this might not be as crazy as it sounds.
      1. Randomly generate domain names
      2. Draw the domain to the squatters attention by hitting the root servers once Verisign starts selling data. NOTE: Some people say that squatters seem to be able to detect whois lookups and/or URLs typed into IE so it may not be necessary to wait for Verisign.
      3. Squatter decides to give the domain a 5 day free "tasting"
      4. Through the wonders of p2p dispersal the squatter sees the domain gets some traffic.
      5. Squatter decides to purchase the domain.
      6. Traffic suddenly stops
      7. No Profit!
      Alternatively if the squatters don't seem to be falling for step 5 you can replace step 4 with - A million distributed computers wait for the domain to become active and slashdot the server. Don't forget to cache the IP for a while in case the DNS record is taken down right away.
    3. Re:Fun with typosquatters by cain · · Score: 1

      for i in {a..z}{a..z}{a..z}{a..z}{a..z}{a..z}{a..z}{a..z}{a..z}.{com,net,org}; do
           dig $i
      done

    4. Re:Fun with typosquatters by rickb928 · · Score: 1

      I'll test this on my home machine before I run it on my production box, but then it can run 24x7.

      Let the little pus-heads register everything. And then cancel. And then register. And then cancel. Repeat.

      I may have to put some delay in the script to make it behave, but if some of us ran this 24x7x365, Would this make squatting too expensive for anyone? And, most importantly, would it cause troubles we can only imagine (or not)???

      --
      deleting the extra space after periods so i can stay relevant, yeah.
    5. Re:Fun with typosquatters by cain · · Score: 1

      This may actually be a little better (assumes a modern bash):

      while true; do
          for i in com net org; do
              dig `echo $RANDOM*$RANDOM*$RANDOM|bc`.$i
          done
          sleep 1
      done

  8. Illegal by unity100 · · Score: 1

    That would lead them to procuring unregistered domain names with squatting in mind. Against competition and reason.

  9. Re:I'm rather doubtful about how useful that would by Cramer · · Score: 1

    be getting through to Verizon's root servers
    It's VERISIGN, not VERIZON. And the lookups for domains will fall up the tree to the root servers. Even if an ISP caches the answer -- which they do -- the original request still made it to the root. No, Verisign will not know every request, but they don't really need to.
  10. Re:I'm rather doubtful about how useful that would by jours · · Score: 4, Informative

    > it doesn't seem like many requests would actually be getting through

    When the caching server misses on a request, it forwards the request upstream...ultimately ending up at one of the root servers.

    --
    This sig intentionally left blank.
  11. So thats why Slashdot is always behind Yahoo. by olddotter · · Score: 1

    Haven't seen this story elsewhere and it's based on an anonymous source;

    So the dot is now waiting to confirm the stories in the national press before posting them?

  12. That was my first thought too by headbulb · · Score: 2, Interesting

    I check what domains are free by using dig and then looking for NXDOMAIN. This helps to get around any registrar looking at their logs to see what domains people have looked up as free. (I use my own dns server so the queries go to the root servers first)

    I am sick of sites being taken by domain squatters.

    I thought I had a great thing with dig (or nslookup) but that might end if that data is going to be sold too. So then what's the point.

    Some data shouldn't be sold.

  13. Am I marketing challenged? by starglider29a · · Score: 1

    Educate me...

    I can't remember an instance where I was trolling for a domain I didn't know, like HotelsInIshpeming.com, landed on a cybersquatter AND saw an ad that I clicked on. "Oh, look, they have percale sheets on sale at Ikea... click, click, spend... Ok, where was I... oh yes... HotelsInIshpeming...."

    Are we, the clicking public, this A.D.H.D.?

    1. Re:Am I marketing challenged? by Anonymous Coward · · Score: 0

      Are we, the clicking public, this A.D.H.D.?
      No. You and I and the general public are not so silly as to click on ads that appear on typo-squatting pages.

      But we're not the targets. As with all forms of Spam, they are targeting that small minority of people who actually do respond to those ads. Some people actually click the links in Spam emails/blog-comments/cyber-squatting-sites.

      I have yet to hear any real research on how many people actually "give in" to Spam... but even if it's 1% that's plenty enough for these companies to make a quick buck. It's supremely frustrating, of course, because if that silly minority would just not respond in any way to Spam, then we would all be relieved of the communal burden that Spamming causes.
  14. Once again paranoia proves its value by Anonymous Coward · · Score: 0

    I've never inquired about a domain unless I was ready to buy it on the spot. I assumed that someone could keep a record of searches (I do on my sites).

    Looks like paranoia is just being sensibly cautious - again.

  15. Why not register variations on your domain? by Alereon · · Score: 1

    Why don't more domain owners take the reasonable step of registering typod variations on their name at the time they set up the property? While obviously this isn't practical for tiny or personal sites, it's reasonable to expect that a major company with the funding isn't going to balk at an extra few hundred dollars to get all common variations on the domain they want. Honestly, if you don't claim the name, you have no right co complain when someone else registers it and puts whatever they want on it.

  16. They just need a statistical estimation of... by blorg · · Score: 1

    ...mistyped addresses. The operators of the root servers for the TLD are in the best position to provide this. They do not need to see every request. Cybersquatters would be very interested in registering these domains for crappy stuff like this.

  17. Mod parent up. by khasim · · Score: 2, Informative

    If you're in a corporate office with a correctly configured caching DNS box, the spelling errors should outnumber the correctly entered queries. As seen from the root servers.

    That is because every spelling error must be sent upstream while just about every correctly entered query should be cached locally.

  18. Squatspecting Abounds by HTH+NE1 · · Score: 4, Insightful

    Great. Not only are whois queries bugged by domain prospectors, a.k.a. squatspecting (don't check for the availability of a domain unless you intend to buy it immediately, because someone else is watching and will do so instead), but now just trying them in your browser will tip off others who will buy your ideas for domains out from under you.

    Now after you try a URL in your browser and get an error saying the domain doesn't exist, you can just wait one minute and try again and someone will have it up and ready to serve you porn.

    This is "Do More Evil".

    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    1. Re:Squatspecting Abounds by Anonymous Coward · · Score: 0

      Great. Not only are whois queries bugged by domain prospectors, a.k.a. squatspecting (don't check for the availability of a domain unless you intend to buy it immediately, because someone else is watching and will do so instead), but now just trying them in your browser will tip off others who will buy your ideas for domains out from under you. You should consider checking the availability of plausible-but-worthless domains. Lots of them. Hundreds and hundreds. Then maybe this strategy will become less valuable.
  19. Remove ability to "taste" domains? by Anonymous Coward · · Score: 0

    I just wish they would get rid of the ability to even "taste" domains. It would do away with so much junk. I got a few phishing emails that looked like something official from Bank of America. I forwarded to BoA, I also contacted the hosting company that the domain where the email came from and the site was hosted was in violation of their TOS. A few days later some lacky, know-nothing, replied back stating that the domain wasn't there and asking if I was sure I didn't make a typo. I did a frickin' copy-n-paste. I replied back it was there, on their servers, and that they should have evidence in their log files that they created the domain on their servers.

    Never heard anything back. That's one "hosting" company I'll never use.

    1. Re:Remove ability to "taste" domains? by trolltalk.com · · Score: 3, Informative

      It was probably this one:

      Domain Name: BANKOFARNERICA.COM
      Registrar: MONIKER ONLINE SERVICES, INC.
      Whois Server: whois.moniker.com
      Referral URL: http://www.moniker.com/whois.html
      Name Server: PNS1.TRELLIAN.COM
      Name Server: PNS2.TRELLIAN.COM
      Status: clientDeleteProhibited
      Status: clientTransferProhibited
      Status: clientUpdateProhibited
      Updated Date: 06-sep-2007
      Creation Date: 06-sep-2007
      Expiration Date: 06-sep-2008

      Putting the lower-case 'r' and 'n' side by side looks just like an m.

      http://bankofarnerica.com/ A-R-N-erica == evil phishing site!
      http://bankofamerica.com/ A-M-erica == real bank site.

      mouse over them both, and see how easy it is to misread the url in the status bar.

  20. This is done already by hansamurai · · Score: 4, Interesting

    This is basically done already. Squatters can buy a domain, and due to the rules that ICANN setup (I think it's ICANN), they can return the domain for free within something like five days. During those five days, they put up a squatting page and keep track of all the hits their site gets, if it gets X number of hits, they keep the domain, otherwise they drop it. All for free.

    I recently did a search for a domain on GoDaddy, the domain was available. Three days later when I went to buy it, it was not available and had been recently bought by a squatter or reseller or something. This is a whole different problem altogether and another flaw in the system. Anyways, I made it a point not to go to that site to make sure I didn't give them any hits that would encourage them to keep it.

    Either way, I just bought another available domain and use that. Can't be too picky these days.

    1. Re:This is done already by trolltalk.com · · Score: 1

      "I recently did a search for a domain on GoDaddy, the domain was available. Three days later when I went to buy it, it was not available and had been recently bought by a squatter or reseller or something. This is a whole different problem altogether and another flaw in the system. Anyways, I made it a point not to go to that site to make sure I didn't give them any hits that would encourage them to keep it."

      Actually, its too bad we can't have some "white-hat botnets" to visit such sites on a regular basis - like every few seconds ... and NOT click on a single link ...

    2. Re:This is done already by El_Muerte_TDS · · Score: 1

      Noticed that too. A domain name I was monitoring is now up to it's 3rd squatter. And the end of this week it will probably be available again, only to be bought by a different squatter.

    3. Re:This is done already by 22_9_3_11_25 · · Score: 1

      I had the exact same experience, only I had actually reserved the domain with credit card information but in the 3 days "processing" time it got scooped up only to be given back days later after I settled on my second choice. It was a huge hassle , I had to go through an entire cancellation procedure with the first company. I refused to lookup the name that was my second choice and had a long talk with the hosting company on a strategy to keep it from getting scooped. At the time I reported it to ICANN and this was the reply I received:
      Thank you for your inquiry. Thanks for bringing this to our attention. The situation you described is actually a somewhat common occurrence. There are individuals and entities on the internet who register names in bulk (perhaps tens of thousands per day), and by coincidence, names available one minute might not be available the next. Sometimes these names are deleted during the add-grace period, so you might find that the name is available if you check back in about 5 days (the grace period is five days long). (the decision whether to keep or delete a name is often based on the amount of traffic that domain receives, so if you decide to wait out the five days and try again, it would be best not to visit the website hosted at the domain during that time.) I hope this information is helpful. Best Regards, ICANN
      While I appreciated their taking the time to reply I wish there was a way we could vote to do away with this practice. If anyone knows of a way to accomplish this , please let me know. thanks

  21. You don't think of them at the time of registratio by headbulb · · Score: 1

    Then it's too late because someone else thought of them or found one you missed. Then the price for a domain with a good registrar/dns provider isn't cheap. No I am not talking about some cheap godaddy like service I am talking about a dns service which can garentee that lookups won't take more then 150ms to lookup. Which in the end does make the site seem faster.

    People hate domain squatters for a reason. They are annoying and stealing customers/time/resources from those people that built up their brand (their domain name). They are people that don't want to make a significant amount of effort to make money The ones that don't mind taking a penny from the 'donate a penny to the homeless shelter'.

    I like dyndns.com btw.

  22. Mod parent up ^2 by wsanders · · Score: 1

    Besides, Verisign operates only a fraction of the root servers:

    http://root-servers.org/

    So, reason #N+1 why this data might or might not be worth a bucket of warm piss, with N+2 being as how anycasting biases requests in a more or less geographic fashion.

    Meh.

    --
    Give a man a fish and you have fed him for today. Teach a man to fish, and he'll say "WHERE'S MY FISH, YOU IDIOT?"
    1. Re:Mod parent up ^2 by wsanders · · Score: 1

      Well, on more reflection I guess a random sample from one of the Verizon servers would be a "valuable" source of mistyped domains.

      So I retract my "meh" and say "pox on Verisign".

      --
      Give a man a fish and you have fed him for today. Teach a man to fish, and he'll say "WHERE'S MY FISH, YOU IDIOT?"
    2. Re:Mod parent up ^2 by Kalriath · · Score: 3, Informative

      Doesn't matter. Verisign is the authority for .com and .net, any request for domains ending in one of those suffixes needs to be queried against Verisign at some point.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    3. Re:Mod parent up ^2 by nife00 · · Score: 1

      Not technically.
      The root server operators are given the root zone files and they run the server. For this to be worth anything it would require a change in the server software, so only the ones run by verisign would ever actually comply.

    4. Re:Mod parent up ^2 by Kalriath · · Score: 1

      Yes, except for one issue - the root servers do not contain the contents of any of the TLDs, even the gTLDs which Verisign is contracted to administer. For example, follow this lookup below:

      Searching for www.msn.com A record at k.root-servers.net [193.0.14.129]: Got referral to b.gtld-servers.net. (zone: com.) [took 113 ms]
      Searching for www.msn.com A record at b.gtld-servers.net. [192.33.14.30]: Got referral to ns3.msft.net. (zone: msn.com.) [took 190 ms]

      Now, here's the Whois for gtld-servers.net:

      Registrant:
      VERISIGN INC.
            21345 Ridgetop Circle
            Dulles, VA 20166
            US

            Domain Name: GTLD-SERVERS.NET

            Administrative Contact, Technical Contact:
                  NOC, VeriSign
                  21345 Ridgetop Circle
                  Dulles, VA 20166
                  US
                  703-948-4300 fax: 703-948-0717

      As you can see, every request for the big gTLDs needs to go to a Verisign DNS server at some point.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  23. opendns by Anonymous Coward · · Score: 2, Interesting

    Changing your dns servers to point to the opendns servers will fix many of the typosquatting problems people have:
    http://www.opendns.com/

    Best of all, it is free.

    1. Re:opendns by Anonymous Coward · · Score: 0

      Also, OpenDNS is not open and it highjacks www.google.com (seriously!), so use OpenDNS if that is how you like it.

    2. Re:opendns by TheLink · · Score: 1

      And why should you trust opendns more than the little you trust verisign?

      --
  24. One potential positive here... by damn_registrars · · Score: 1

    If the verisign DNS servers track foreign domain names (*.cn, for example), then it would be worth having. I've seen plenty of spamvertised domains that are from foreign registries, and often the registrars over there don't play by our rules. If the verisign registry gave us that data, we could at least figure out who is responsible for the existence of such crap.

    And yes, I do recognize that getting something done about it is a different issue entirely. But if the data was at least available, it could help.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:One potential positive here... by Anonymous Coward · · Score: 0

      damn_registrars is a known troll.

      Reference: http://slashdot.org/comments.pl?sid=337239&cid=21089939 and thread.

  25. Filtering out bogus domains - one approach by Animats · · Score: 2, Interesting

    Does anyone actually buy anything from those bogus domains, or are they all making their money by what is essentially click fraud? Most of them seem to just deliver ads from the usual ad services.

    We've been demoing our filter for bogus on-line businesses, SiteTruth, for a while now. Remember "on the Internet, no one knows if you're a dog?" SiteTruth can usually kick the dogs out.

    The basic concept is to try to find the business behind the domain. If the web site isn't selling anything and isn't running ads, it's not rated. If it's selling something, there needs to be a business address on the site, preferably one that matches up with business records. So we look through the site for addresses, check SSL certs, look at business directories, do some crunching, and come up with a rating automatically. This is effective against link farms, spam blogs, landing pages, and most of the other trash on the Web.

    We use the ratings to reorder search results. We don't block suspicious sites; they just move down in search results. It's a clue stick to apply to suspicious sites - be clear about who's behind the site, or be ignored.

    This is an alpha test demo, set up as a search engine web site. The real version will be a browser plug-in. Meanwhile, feel free to try out SiteTruth and complain where appropriate; that's why we're in test. There's a link to the SiteTruth blog on the site if you want to comment. The most interesting searches to try are for heavily spammed keywords, like "herbal viagra" or "london hotels". If your own domains get low ratings, click on the rating icons to find out why. If you're legit, it's usually because the web site has some easy to fix problem.

    We've been hearing some grumbling from a few domain owners about this, which indicates we're on the right track. They usually have some long, whiny explanation of why they shouldn't have to disclose the address of their "online business". Tough.

    1. Re:Filtering out bogus domains - one approach by thogard · · Score: 1

      It appears that people buy from them, just like it appears they are buying from spammers. For example, you visit the web page and you get handed a long life cookie. Some time later you go and sign up for a service or visit a legit business and the long life cookie goes off and the legit company counts you as being from another ad campaign and pay the click fee and they don't even know they just paid someone for typosquatting.

    2. Re:Filtering out bogus domains - one approach by Reziac · · Score: 1

      Okay, I'm complaining... there are some businesses where no one in their right mind puts a street address on a website (frex, for a kennel, a street address is an invitation to all sorts of meatspace trouble, thanks to the political nuts out there these days).

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    3. Re:Filtering out bogus domains - one approach by jez9999 · · Score: 1

      Meanwhile, feel free to try out SiteTruth and complain where appropriate; that's why we're in test.

      Well, OK, as you said so... my site got a red bar thingy.

      "Secure certificate
      No valid certificate."

      I'm running a games website, why the fuck does it need an SSL cert?

      "Contents of web site
      No street address found on the site."

      I'm running a games website, why the fuck does it need a street address?

    4. Re:Filtering out bogus domains - one approach by Emetophobe · · Score: 1

      The basic concept is to try to find the business behind the domain.

      From my limited understanding, SiteTruth is only meant for rating online shops. Unless your gaming website is selling something, you shouldn't care about SiteTruth or the rating you receive.
  26. Re:I'm rather doubtful about how useful that would by ILuvRamen · · Score: 1

    aww so if everyone on slashdot goes to www.fuck-you-verisign.com, that won't show up as the #1 non existant domain visited when they look? Darn! I was gonna highly recommend that. I dunno, I think it'll work. Cuz aren't there some crappy, little ISP branches that wouldn't have their own DNS servers and just let everything go right up to a main one? I mean even my road runner DNS servers at this very moment are in Kansas according to their WHOIS and I live in an area Wisconsin with almost 100,000 people so they're not using a "local" one exactly.

    --
    Google's Super Secret Search Algorithm: SELECT @search_results FROM internet WHERE @search_results = 'good'
  27. This is retarted... by Mysticalfruit · · Score: 2, Insightful

    This is how you fix this problem...

    Write a perl script that generates fake domains and then does a DNS lookups against them. Thus ensuring that their busy reserving "www.luckylinuxsexmonkeypants.com"

    --
    Yes Francis, the world has gone crazy.
  28. so why was their contract renewed? by belmolis · · Score: 2, Insightful

    We have known for years that Verisign is a badly behaved company. This is just the latest example. I just don't understand why ICANN renewed their contract. Like Diebold and SCO, this is a company that we don't need.

    1. Re:so why was their contract renewed? by Anonymous Coward · · Score: 0

      Because ICANN is not much better.

      Look at the TLDs they approve - info, biz. Those are just variations of .com.

      Even .xxx would have been a better tld, since it would mean something different - at least people might be able google for strange stuff using site:.xxx

  29. A better use of this kind of data... by krycheq · · Score: 1

    would be to use it to provide insight on traffic and request patterns for known malware distribution sites, the RBN, and other known bad-actors who are engaged in criminal schemes using DNS morphing techniques to fool people into landing on their sites...

    Hmmm... probably not a lot of money in that for them tho...

  30. real estate provides a useful historical example by Quadraginta · · Score: 2, Interesting

    This sort of speculation is not a new phenomenon. It's been true for centuries in real estate: you buy some property not because it's useful to you, but just to charge whomever it is useful to a hefty price. At some level, this is just an inevitable feature of an open market, and must be tolerated (unless you lack a brain and like the idea of some Big Brother Tsar handing out domain names to whomever "deserves" them most).

    But real estate speculation also provides an interesting possible solution: real estate taxes. Since real estate taxes are usually some percentage of the market value, they become very high on property that has a high market value -- so high that you can't afford them unless you are using the property to generate the maximum possible income. Speculators tend to be squeezed out of the market, since they can't afford the taxes required to "park" the property until the price is bid up high enough to suit their taste. So, one solution is to tax internet domains, with the tax reflecting the market value of the domain. That would certainly cut down on speculation, but, like all asset taxes, it's bound to depress creativity and economic growth.

    Another solution comes from compulsory licenses in patent law, where the idea is that if you patent an invention and then fail to work the patent, or license it on reasonable terms -- where, alas, a court has to interpret what "reasonable" means -- then other folks can just use your patent without coming to any licensing agreement with you. I suppose the equivalent here would be that if you sit on a domain and don't use it yourself and won't sell it at a "reasonable" cost, then DNS service would be switchable to someone who will use it, even if you don't agree. I suspect this is most likely to become widespread, and I think it's already happening to some extent.

    Finally, the classic libertarian idea would be to break the concept that there must be a single, worldwide, one-to-one mapping between DNS name and IP address, i.e. more or less abandon the idea of domain name registration entirely. In this strange anarchic world, you, an aspiring domain-name user, would simply start using the domain name and publish your associated IP address on some DNS server. Presumably you'd have to pay, at first, to get some servers to list your IP address.

    But if your particular IP becomes the preferred association with that domain name, something the market would quickly decide, then it becomes advantageous for more and more DNS servers e.g. run by ISPs to list your IP address block for the domain name without charging you. Indeed, you might be able to charge them at some point for the privilege. To some extent this model already exists in the world of business-speak, which is why a Mac is not a "PC," even though "PC" stands for "personal computer." IBM's product named "PC" so dominated the 80s market for microcomputers that it became impossible to say "PC" without meaning "IBM-compatible microcomputer." Good thing IBM was not able to file for trademark protection on the phrase "personal computer" . . .

    Of course, the fact that trademark law exists at all says that the completely free-market solution is not likely to work. Still, it would be interesting to develop some system where the preference of the global market of users has influence on who "owns" a particular domain name. The present gold-rush first come first served system has obvious disadvantages, and little other than simplicity to recommend it.

  31. Re:I'm rather doubtful about how useful that would by xSquaredAdmin · · Score: 1

    Yes, but if it still hits on a known TLD, chances are good that their nameserver will have the NS records for that TLD cached, so the request itself won't hit the root nameservers. If someone requests www.gogle.com, and their local nameserver doesn't have anything cached for the "gogle.com." domain, it'll still likely have the NS records for "com." cached, and thus skip the root nameservers.

    --
    Crushing dreams at the speed of sarcasm
  32. mmm! tasty! by capoccia · · Score: 1

    so what does a domain taste like? chocolate or vanilla?

  33. Which is it by fastest+fascist · · Score: 1

    I thought information wants to be free?

    So does it, or does it not?

  34. DNS Needs Supra-National Supervision by chris_sawtell · · Score: 1

    The sooner the whole DNS system is taken out of the control of a bunch of government sponsored & crooked spivs the better. I suggest the ITU who have looked after International Telecoms since 17 May 1865, take over the whole of the DNS as soon as possible.

  35. SlashStalking! Re:One potential positive here... by damn_registrars · · Score: 1

    Neato, I have a stalker on slashdot! I don't know that I've seen any anonymous cowards do this before...

    Although this person doesn't seem very original, so I suspect that someone else has done this to a different member in the past. Can anyone point me to the precedent? Maybe there's a club here on slashdot for other slashstalking victims ? :)

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  36. No, mod above up by xyphor · · Score: 1

    OP has root servers confused with TLD servers. The root servers should rarely need to be queried.

  37. Have been warning about this for years by Anonymous Coward · · Score: 0

    This is a major privacy issue.

    http://www.cynikal.net/users/baptista/papers/Root_Server_Privacy_Complaint.pdf

    also check out

    http://www.theregister.co.uk/2003/02/05/dud_queries_swamp_us_internet/

    Most of the hits on the roots are generated by other root servers outside the IANA / ICANN / Verisign root server complex.

    The important data of interest to commerce is in the .com TLD server logs. I'm not sure if the root data is of any value.

    well ... that my two cents for today

    regards
    joe baptista

    1. Re:Have been warning about this for years by Anonymous Coward · · Score: 0

      Well well... Dr Joe... Been a while since I had a good laugh at one of your lunatic rants.

      So... they're selling data that 1,000,000 *sombodies* *somewhere* have typed www.joesanarse.com into their browsers, to people who consider such information valuable.

      Remind me again where's the privacy issues?

      Who posts AC then SIGNS it???

      Regards

      Bob

  38. Not Root by jra · · Score: 1

    No, they don't... but let's be clear, here: the *root* server lookups won't do anyone much good.

    What they have to be *selling* here would be GTLD lookups, and they don't *get* all that data... In fact, I don't think they get *most* of it.

    1. Re:Not Root by eneville · · Score: 1

      I agree, but if they want to do this I think IANA/ICAN should *really* try and put the anchors on Verisign, they're really not supposed to be selling things like this. It's pretty much like an abuse of their power. Why not buy the data from someone like google-analytics instead, which is probably going to be more worthwhile.

      Here in the UK nominet run the show. But nominet are obliged to not sell things like the data to make a buck as they're a not-for-profit organisation. There are some good services that Nominet charge for like their bulk query service and member services, which are reasonably inexpensive for a business to deploy.

      Verisign really should take a leaf out of nominet's book, because comparatively they SUCK.

  39. Domain Tasting by crf00 · · Score: 1
    Yes can someone tell me what the hell is about Network Solutions/Verisign? Why do they still allow the kind of 5 days domain tasting even that caused so much problem? Do they earn money themselve anymore than what these domain tasters earn? What is the benifit for them doing these?

    I googled through and found that there are so many complains about GoDaddy that people's domain tasted by domain tasters in split of a second after query. How its done is still a myth that everyone just guessing there are spyware in their computer. Could that be the problem in the whois server itself? And hell is there any place that can tell us which registrars are doing these kind evil things behind? Some people recommends SnapNames to back order domains but I had a domain which been tasted by them. And why the hell are all those wangleedomains.com domain pirates still being out there?

    Is there any site that has a clear guide about the dark side of domain names? I am the owner of a .net domain and I have received more than 3 emails trying to convince me to buy/backorder the .com domain and some of them are completely scam. I feel that its so god damn tired to try to buy a domain..

    1. Re:Domain Tasting by kontos · · Score: 1

      can someone tell me what the hell is about Network Solutions/Verisign? Why do they still allow the kind of 5 days domain tasting even that caused so much problem? Their ICANN contract requires that they do it. ICANN has formed a committee to study this, so in a year or two, they will have decided if this is a problem, a couple of years after that they will decide what they should do about it, about a year after that they will agree on the verbiage of the new rule, and the problem will be solved when the contract is changed in 2013.
      --
      SM MBL-VIR looking 4 SIG 4 LTR. must be DDF, no 420, SD ok.
  40. Re:SlashStalking! Re:One potential positive here. by Anonymous Coward · · Score: 0

    I'm just posting some relevant facts so people can properly judge your comments. That is not a crime, my friend.

  41. Re:I'm rather doubtful about how useful that would by jours · · Score: 1

    Strictly speaking, you're right...but people don't commonly make a distinction between the root and tld servers. TFA certainly didn't. And since Verisign has both roots and com/net they certainly have the information the article's talking about. You have to read that article very literally to think they're only talking about queries that hit the root.

    --
    This sig intentionally left blank.
  42. Re:SlashStalking! Re:One potential positive here. by damn_registrars · · Score: 1

    You are rather amusing. Quite libelous, and horribly uninformed, but rather amusing nonetheless. You actually are much like a third-rate bully, in the fact that your odd motives far outweigh both your capabilities and your intellect. Therefore as much as I know that the best way to shoo you off is to ignore you, I just can't help but poke back at your atrociously formed "relevant facts".

    Have a good day in your curious world. Frankly, if I was hoping to see more strict controls placed on anonymous cowards and their known roles around here as trolls, I'd probably be thanking you.

    Although since most people browse the threads at level 1 or higher, you're comments will pass completely below the radar. Proabably better for you, as people who see it would probably think I'm talking to myself to push an anti-AC agenda anyways, which would only further discredit whatever point you think you are making.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  43. Search engines replacing DNS? by Kadin2048 · · Score: 1

    Of course, the fact that trademark law exists at all says that the completely free-market solution is not likely to work. Still, it would be interesting to develop some system where the preference of the global market of users has influence on who "owns" a particular domain name. The present gold-rush first come first served system has obvious disadvantages, and little other than simplicity to recommend it. I think another 'solution' might be to just give up on DNS and let search engines do the resolution. E.g., instead of having DNS to translate from 'en.wikipedia.org' to 66.230.200.100, you just put "wikipedia" into your search engine of choice, say Google, and then use the IP address that it provides. It wouldn't work right now, because currently the search engines index URLs with domain names, but there's no reason why they have to; Google could just as easily store only server IP addresses in its index, and aside from sites using DNS load-balancing tricks, it would work just the same.

    Essentially, it's like a privately operated DNS system, but there's no reason why the result that one search engine returns would be the same as the result that another does. http://googlewikipedia/ and http://yahoowikipedia/ might return two totally different sites. However, there would probably be a lot market pressure for search engines to return semantically useful results -- an engine that took you to Encyclopedia Britannica when you put in 'wikipedia' (or Apple when you put in 'Microsoft') probably wouldn't last too long. In order for this to work, your browser would need to know the addresses of a few search engines to begin with, but this could be easily preloaded or distributed out of band.

    I'm not sure this is really a better system than DNS, but if DNS becomes overburdened with bureaucracy, it might be the de facto system anyway. I know some people who pretty much don't type URLs anymore, and just type everything into the Google search box that's in their browser -- even if they know exactly what the site is, it's easier to just put it into the Google box and not have to worry about formatting, since Google will work with a fuzzier match than DNS. And many browsers will default to a search engine when a badly-formatted URL is entered already. All you'd be doing is eliminating the middle layer.
    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    1. Re:Search engines replacing DNS? by lanzz · · Score: 1

      except that it wouldn't work at all, as a huge number of websites are hosted on shared servers via name-based vhosts. i've worked at a webhosting company which had about 70000 customers at the time i left, and i can assure you that they didn't allocate one IP address per customer, much less one IP per hostname hosted. with access by IP your browser doesn't know the hostname it needs to provide to the webserver in the HTTP request, and without it the webserver doesn't know which vhost to serve to you.

  44. Avoid webcentric ideas by rs79 · · Score: 1

    That's gonna be a bitch for say, ftp, irc, mail, nntp, ntp, ssh...

    --
    Need Mercedes parts ?
    1. Re:Avoid webcentric ideas by Quadraginta · · Score: 1

      C'mon, think more expansively. There's no reason you can't implement the same idea automatically for those services, too. Essentially he's just saying to give up on the dream of worldwide uniformity in DNS service. Everyone picks out his favorite private DNS server(s), and goes with the translations it (or they) provide(s). The most successful private server will probably be the one that provides the translations that most people want, which solves the problem of squatting.

      But I can easily imagine a lot of frustrating chaos during and to some extent even after the switchover!

  45. No. by Corwn+of+Amber · · Score: 1

    Just think what Microsoft will do! They'll put MSN as The Only Search On The Web, heavily integrate it into Windows, make users jump through flaming hoops just to change the search engine, and so on.

    So if search was integrated in the browser and meant to replace DNS, Linux would come with thousands of links, Yahoo will sort of half-work, Google will work great until they slightly change their API and results are, at first, mangled, and within six months, unusable, the other search engines are either terribly limited or doomed to disappearance in a year, and so on.

    Apple will provide a seamless experience, as usual. But you have to buy a Mac and a subscription to Apple.

    --
    Making laws based on opinions that stem up from false informations leads to witch hunts.
    1. Re:No. by Anonymous Coward · · Score: 0

      Just think what Microsoft will do! They'll put MSN as The Only Search On The Web, heavily integrate it into Windows, make users jump through flaming hoops just to change the search engine, and so on.

      So if search was integrated in the browser and meant to replace DNS, Linux would come with thousands of links, Yahoo will sort of half-work, Google will work great until they slightly change their API and results are, at first, mangled, and within six months, unusable, the other search engines are either terribly limited or doomed to disappearance in a year, and so on.

      Apple will provide a seamless experience, as usual. But you have to buy a Mac and a subscription to Apple. Wait ... so this will keep Windows users off of my Internet?

      Where do I sign up?
  46. Actually, their other business is... by CarpetShark · · Score: 1

    Does Verisign do anything anymore that isn't just to make a bigger buck, the rest of the world be damned?


    I hear they're also big on damning people...
  47. Re:I'm rather doubtful about how useful that would by xSquaredAdmin · · Score: 1

    Aah. I was unaware that Verisign owns the .com/.net nameservers. In that case the plan is much more sensible. Also, you should never assume that someone posting on /. has read TFA. ;)

    --
    Crushing dreams at the speed of sarcasm
  48. It's crazy.. by keirre23hu · · Score: 1

    If it werent for Amazon's patent, Verisign would probably like to add buy it now pages on the non-resolving dns names....

  49. Re:SlashStalking! Re:One potential positive here. by Anonymous Coward · · Score: 0

    Nothing I say is libelous. Maybe in you feel I spout lies, but the facts are clear.

    Bottom line is, there is no disputing that you did not answer a simple question to back up a claim you made. That is fact, and casts a bad light on you as a contributor.

  50. Re:SlashStalking! Re:One potential positive here. by damn_registrars · · Score: 1

    Maybe in you feel I spout lies
    And all your base are belong to us?

    On top of the fact that your questions don't deserve being answered, your claims are not backed up by facts. If you look at my posting history, you will see that many of my past comments in other threads have been moderated +5. Your claim of my being a troll just simply doesn't hold water

    But I'll let you continue answering captchas and previewing your own typos as you try to make this odd claim. I guess if it somehow makes you feel better about yourself, feel free to keep up this charade. In the meantime, people will continue to ignore you, as your comments will all remain scored 0.
    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  51. Re:SlashStalking! Re:One potential positive here. by Anonymous Coward · · Score: 0

    In the meantime, people will continue to ignore you, as your comments will all remain scored 0. Are you really sure that most people browse at 1? Or is this just another fact-out-of-ass?
  52. Ah, catching up with the scammers. by argent · · Score: 1

    They wouldn't let them "monetize" missed lookups directly, so they're farming it out to domain pirates.

    It's corrupting the top level either way.

  53. the slashstalking continues... by damn_registrars · · Score: 1

    Are you really sure that most people browse at 1? Or is this just another fact-out-of-ass?
    Your insistence to not read the slashdot FAQ is amusing, for sure. If you were to read it, you would find that the default reading level for browsing slashdot discussions is 1. Sure, even anonymous cowards like you are free to change their own viewing level, all the way down to -1 (to see all the trolls posted by other anonymous cowards) or all the way up to 5 (to see only the moderators' favorites).

    Basically, the only reason someone would read at -1 is if they are incredibly bored or if they have moderator points and they have an interest in the topic and they haven't posted into this discussion. Because of course the FAQ will also tell you that you cannot assign moderator points to a discussion that you have posted to.

    I'll let you speculate as to how many people on slashdot would meet those three criteria at this point, considering this is a response to a story that was posted 24 hours or more ago.
    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  54. Re:I'm rather doubtful about how useful that would by jours · · Score: 1

    > Also, you should never assume that someone posting on /. has read TFA. ;)

    Ain't that the truth. Honestly, the article wasn't very clear...they said "root nameservers" but they sure implied com/net.

    --
    This sig intentionally left blank.
  55. Re:I'm rather doubtful about how useful that would by discogravy · · Score: 1

    verisgn and verizon are different.

  56. Free Domain Tasting = still making money by billstewart · · Score: 1
    There a different reasons that domainers keep buying domain names even though they have no useful content to offer. Some of them typosquat on names that are similar to popular domain names, or steal names that actual content providers (or other domainers) are checking, but others just go fishing for whatever combinations of keywords and misspelled keywords they think might have a chance of attracting people to their pages and serving them ad banners.

    Because domain tasting is free, it's easy to do brute-force searches for useful keywords; all it takes is opportunity cost on your credit card and remembering to return the unsuccessful names before your 5 days expires. It doesn't take a lot of time to see if you're getting enough random hits to make more than $6 a year at your current ad banner rates, and why should you care if you're littering the domain name space and thrashing your domain name registrar and the central registry with transactions? And until domain tasting stops being free, this abusive behaviour will continue, and apparently enough of the registrars are making money on the successful hits or they'd have started charging for transactions.


    This new approach that Verisign's allegedly thinking about may reduce that - it'll help deliberate typosquatters, but the shotgun players can look at the hit rates directly and decide what to buy instead of constantly thrashing the transaction systems. It sounds like they've put some thought into their market, handing out chunks of data so multiple customers can play, as opposed to putting out a master list that lets everybody race to register the same domain names. It'll save VS money on transaction costs that they're not currently getting reimbursed for, and it'll mean that multiple domain tasters aren't thrashing the same namespace constantly.


    This also means that if you're trying to get a domain name because you have actual content to provide, or think it sounds cool, or whatever, you're not going to miss it because some speculative domain taster has it in their 5-day grip. If it makes much more than $6/year in advertising revenue you'll probably lose it either way, but at least you won't lose it because of inefficiencies in the process.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  57. Speculative DomainTasters & Targeted Typosquat by billstewart · · Score: 1
    Not all of the domainer scum are playing the same market. Some are targeting existing names (or potential names of real customers), and they're often malicious - but trademark law provides some tools for dealing with them.


    But another kind are the speculative domain tasters, who register large numbers of potentially useful names and return them before the 5-day grace period unless they're going to make more than $6/year in banner ads. ICANN's Soviet-central-planners have decided that the Registry won't charge transaction costs on that, so it doesn't cost anything to search except opportunity cost and credit card balance. It's certainly simple to fix that without compulsory licensing or complex "taxes" based on some perceived "value" of a domain name or some bogus plan for requiring name buyers to provide "actual content" - either don't return the customer's money if they don't like the name, or at least charge some fixed price for the transaction even if you're returning all or half of their fee. There'll still be some market for this kind of fishing, but it's much smaller.


    ICANN is currently evaluating the issue, though their is over. (Poll Results!) The article commented that Verisign may be proposing to do this as a way to make money off the speculators if ICANN does get rid of domain tasting.


    Individual registrars can already avoid having to deal with domain tasters - they can set their fees at a price that makes it unattractive to use them even though ICANN's making the registry return their part of the fee. That doesn't eliminate the practice unless all the registrars stop doing it, and there are apparently enough registrars that make money off of speculative parasites that they're tolerating the extra transaction load - but Verisign's $6 fee was never particularly cost-based anyway, so the registrars can keep their costs low by automating the process heavily.


    Comments on "value" of a name, and on providing "real content". Until strong AI shows up, there'll be no easily automated way to distinguish between real human-provided content and bogus astroturf, and certainly not without burning huge quantities of CPU and database storage, and if strong AI ever does show up, it'll be no more interested in reading those web pages than real humans are. The speculative domain tasters are often going to generate lots of astroturf for their pages to try to attract traffic from search engines as well. Also, what's the "value" of a name? Certainly nothing objectively quantifiable. For domainers, it's the amount of money they think they can make from owning the name, but for real companies in real business, it's tied into the whole advertising and branding space. DotCom Boom companies were often somewhere in between real companies and bogus ones (was DogFoodOnline.Com a good idea or a silly way to extract money from overexcited VCs? Only your sock puppet knows for sure...)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  58. Re:Speculative DomainTasters & Targeted Typosq by Quadraginta · · Score: 1

    Some very interesting comments.

    This I think is wrong, however:

    what's the "value" of a name? Certainly nothing objectively quantifiable

    The value of a name is very quantifiable. It's the price the highest bidder is willing to pay for it. You can ask the same question, and get the same answer, when you ask what the value of real estate is. The fact that we have very limited insight into the mechanism by which people judge the value of things doesn't change the fact that they can and do, and we can measure that value quite precisely merely by noting the price they bid for them.

  59. Re: Most registrations are bogus by billstewart · · Score: 1
    Most of the registrations aren't fraudulent - they're just speculators abusing the 5-day-grace-period thing, seeing whether plausible random names will earn at least $6/year in banner ads and keeping the ones that work. The reason it works is that somebody at ICANN decided a few years ago that the registry shouldn't charge any fees on domains that get returned during the grace period. If GoDaddy or some other registrar is annoyed by it, *they* can perfectly well charge a fee or give only a partial refund on whatever they charge for name registration and only return the registry's fee - but apparently they're making some money on the kiters so they're not doing that. ICANN's currently re-evaluating that policy (public comment period is over), and maybe they'll get rid of free tasting or at least charge _something_ for it, which would cut down on the abuse.

    It won't all go away, but it'll at least make it easier to find the fraudulent thieving abusers who are currently masked by all the noise.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  60. KeywordSquatting - Legal, Just Annoying by billstewart · · Score: 1
    There are different markets for this kind of data. Sure, there are name squatters and typosquatters going after the names of existing legitimate businesses, such as microsfot.com and microsoft.biz; this will help them, but fixing it is a job for trademark law, though large businesses often avoid much of the problem by buying up the nearby namespace (typos, other TLDs, other variants on their company name, etc.) which gets them the traffic as well as keeping it from going elsewhere. And there are annoying parasites who find out what names people search for on domain-registrar sites and steal them out from under them.


    But there's a big demand for names made of perfectly legal collections of keywords that people happen to type into their browsers, which can generate banner-ad revenues, as well as increasing the probability that somebody typing those things into search engines will find your content-free page full of plausible astroturf. The current domain-tasting rules say that you can register a domain name and return it within five days in case you made a "mistake" in your registration, and the obvious "mistake" is that not enough people are hitting your page at random to generate enough banner ad revenue to make it worth buying the page. So there's a huge business in people kiting domain names, registering them for 3-4 days to see if they get enough hits to keep the name and then dumping them, and either putting a generic under-construction banner ad page or a slightly more customized page like "Want to get more info about the Squeamish Ossifrage market? Here are the hottest new sites!"

    The domain-tasting name-kiting business means there's a huge transaction load on the registrars and the registry - the registrars could avoid it if they want by not refunding their markups on the basic registrar fee (some do, some don't, so there's obviously some profit for them) but the centralized registrar that runs .com is stuck with it because of ICANN policy, and that's Verisign. The transactions don't cost them anything close to the $6 they charge to register a name for a year, but they're still expensive. For the rest of us, the name-tasters litter the namespace making it harder to find real sites among the trash, and making it harder to find meaningful names when you've got actual content that you want to create a website for.


    ICANN's evaluating whether to change the policies on free domain tasting - either eliminating the refund or at least charging a "restocking" transaction fee would cut down on a lot of the kiting. If VRSN sells a list of popular misses, it'll appeal to the same people who are doing the kiting, but it'll at least let them just buy the names that might make money and not litter the rest of the space.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  61. i mean by unity100 · · Score: 1

    registrar doing this kind of thing is illegal. the top provider of some resources, registrar is roughly the monopoly when it comes to selling domains. registrar(s) actually, in bulk. therefore if a registrar is freely allowed to squat in this manner, then the users dont have a chance. this almost resembles a total monopoly situation.

  62. Registrars aren't monopoly. by billstewart · · Score: 1
    In ICANN's design for the domain name sales system, there are two levels - the single registry which controls the database for a TLD (e.g. all of .com) and the multiple registrars that sell names (and other services) to customers. No registrar is a monopoly, at least for the big TLDs - there are lots of them, all competing with each other. You don't have to buy names from GoDaddy if you don't want to - there are lots of others that can't afford Superbowl commercials. Some specialize in good dependable service, some compete on price, some specialize in web hosting and include names with it, some specialize in bulk sales to spammers, whatever. There's only one database per TLD, which the registry controls, and the fees are set by ICANN.


    I don't know if this applies to all of the specialized TLDs - .aero, .museum, etc. may work differently. And of course country-code TLDs set their own policies, though some have let ICANN eat their brains.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  63. look in broad perspective by unity100 · · Score: 1

    technically they are not a monopoly, from individual registrar to individual registrar. BUT, if you take them as registrarS, they are a monopoly in respect to customers, since the all top level registrars constitute the entirety of the domain name distribution rooftop. And if they all freely employ this whois data trick, that directly creates a monopoly situation in which the monopolist (all registrars in this case) can provide themselves preferential treatment when it comes to domain name registrations.

  64. You're still not getting Registry vs Registrar by billstewart · · Score: 1
    You're still not getting the issue of registries vs. registrars. For the ICANN-controlled general-use global TLDs, each TLD has one registry but an open market for registrars. There's one registry that controls the database for .com, but lots of registrars that sell into it, and they don't have access to each other's transactions - they're competing with each other, and all they can tell is what's in the registry (including the names, authoritative nameservers, and limited transaction data.)


    If you go to Registrar A and check the availability of Yet-Another-Example.com, Registrar A and the Registry can see that you looked for it, but Registrar B can't. The Registry is a monopoly that you can't avoid - but if you think Registrar A are domain-name-stealing scum who are going to register the name out from under you if you don't pay for it right then, you don't need to use them - you can use a registrar that's more ethical, such as Registrar B (ok, probably B, C, D... W are scum, but X, Y, and Z aren't...) There are registrars with a reputation for ethics and privacy protection, just as there are registrars with reputations for low cost or good wholesaler support or efficient name stealing. It's nothing close to monopolistic - you really can pick the ones you want to deal with. Any of them _could_ act like scum, but many of them don't, and other people can become registrars by paying ICANN their fee, and it only takes *one* ethical registrar to give you a way to avoid dealing with scum (unlike the registries, which are monopolies for their TLDs, so the only way to avoid them is to get a name in a different TLD.)


    The other way to check name availability is DNS - the root and some TLDs have distributed name service managed by multiple entities, while others have one centralized entity that runs all the authoritative servers for that TLD's zone. If somebody does a lookup for an existing name, they may get the answer from the authoritative server, but usually their ISP's DNS servers are keeping a cache of queries, so they'll get the answer from the cache. But if they do a looking for a nonexistent name, like Example-I-Just-Made-Up-Now.com, it won't be in their ISP's cache, so their ISP will query the TLD's authoritative server, which will say it doesn't exist. That does mean that Verisign, who control the authoritative DNS for .com, can see the unregistered names that people are looking for, which is valuable information they can sell to name squatters and other speculators. And that's what's going on here.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  65. you are not getting my point by unity100 · · Score: 1

    technicality on the approximations of top level of the domain name system doesn't matter. if this is allowed, inevitably many registrars are going to follow suit for all registries, and eventually there is going to be a situation in that this is a widely adopted practice. yes, its not technically a monopoly, but you'll be hard pressed to find the domain name you want vacant. why just rent a domain name to some 3rd party for $8-10 a year, whilst you can park it on your ad page as registrar and enjoy around $100-1000 revenues in hits.

  66. Re: Quantifying domain name values by billstewart · · Score: 1
    The price the highest bidder is willing to pay for it is an ephemeral value that only exists if there's currently an auction going on for the domain name. If the name isn't currently being sold, or it's being sold through a mechanism other than an auction, there's no way to do the measurement. With real estate, the price a specific piece of land sells for depends on the auction process when it's being sold, but there's a broad enough market for comparable real estate that it's possible to estimate the value even if there isn't a current auction - you can compare land area, building size, etc. for similar pieces of land that have been sold nearby and adjust for overall market trends such as interest rate sensitivity.


    Domain names don't work like that (though there are exceptions.) There are some names like sex.com that are sufficiently generic that people are going to buy them speculatively (or steal them speculatively :-), but most names have a value only because they're associated with an existing known brand name (and therefore aren't something that anyone other than the brand owner can legitimately bid on), or aren't associated with any current brand name and therefore only acquire interestingness if somebody needs to name a domain (and company), finds that name to be available, and tries to register it, and the only condition under which they'd be valuable to a namesquatter is if the squatter has information that somebody else has checked whether the name is available - if it were an inherently valuable keyword the squatter would have _already_ paid the $6 to register it instead of entering into a competitive bidding process.


    Sex.com is part of a neighborhood where comparables exist and a legitimate auction process is possible. Google.com isn't - it's only valuable because Google named themselves that. obscure-Web2dot0-marketdroidia.com isn't either - it's only valuable because some obscure web2.0 marketdroids named their company that, even though it's obviously worth less than google.com because the company's going to vanish before they get their 15 minutes of fame. DeadDotComillenium.com might have a value, because it might be possible to have a legitimate auction depending on what happened to the trademark when the dotcom who used to own it died (did the trademark get sold off along with the fancy chairs, or did it just die?)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks