Slashdot Mirror


ICANN Investigates Insider Domain Name Snatching

Tech.Luver sends us word that, hot on the heels of reports that Verisign may be planning to sell DNS root server lookup data, ICANN has opened an investigation into a suspected practice by registrars it calls "domain name front running." The suspicion is that insiders at some registrars are using information from whois searches to snatch up desirable domain names before interested customers can register them. Here is ICANN's announcement of the investigation (PDF). ICANN asks that anyone who suspects they have been victimized by domain name front running to email them with details.

152 comments

  1. Some proof by suso · · Score: 5, Informative

    I have proof of this happening and I'm sure others do too. We have two different customers that looked up domains to see if they were available, asked us to register them and before we could register them, they were already registered by places in China and the Carribian. Both domains where somewhat obscure and I didn't see any reason why they should have normally been bought. In both cases, the domain was released after the 5 day period that ICANN allows (which I think was a mistake on ICANN's part to have that policy). But in some cases it might not be released if it turns out to be popular. As I said about the Verisign thing, this is an invasion of privacy.

    One of our customers (who allowed me to mention in this post that his domain in question was psysci.net) that had this happen said that he only used the command line whois and networksolutions.com to lookup the domain, so it might not just be small registrars involved in this scam. But that's a pretty serious accusation to bring against Network Solutions so take that with a grain of salt. THe company that tasted psysci.net had a name of Wan-Fu China, Ltd. The company that tasted the other domain had a name of (MAISON TROPICALE S.A.), which you can find a little more information about here

    1. Re:Some proof by Anonymous Coward · · Score: 0

      yeah this is definitely a problem i can confirm this is happening across the board.

      Dear icann please increase the domain reg cost and eliminate the free trial period.

    2. Re:Some proof by fotbr · · Score: 1

      I'm not so sure that network solutions is completely innocent in all this. They're in it to make money, and if they can make money by selling records of whois requests, they'll do it. I've had similar experiences checking their whois service to see if a domain is registered, only to come back a couple of days later and find its now registered. First time I chalked it up to bad luck, second domain was too obscure to be bad luck.

      I don't think network solutions is doing the snatching, I merely think they're selling the lookup information.

    3. Re:Some proof by hodet · · Score: 1

      hmmmm....I just tried checking a random domain on the networksolutions whois. ( 21laforest.com ) It's available so I'll check it a month from now to see if its snatched.

    4. Re:Some proof by Chapter80 · · Score: 3, Funny

      I just tried checking a random domain on the networksolutions whois. ( 21laforest.com ) It's available so I'll check it a month from now to see if its snatched.
      ha ha! Not a very controlled experiment.
      • find an available name
      • post it on slashdot
      • check a month later to see if it's taken.
      There are enough ass-tunnels out there (like me) who'd pay $8.95 just to screw up your experiment!
    5. Re:Some proof by hodet · · Score: 1

      Good point, now I will check a second secret domain to prove or disprove the "ass-tunnel" hypothesis.

    6. Re:Some proof by jamar0303 · · Score: 2, Funny

      "There are enough ass-tunnels out there (like me)"

      Thank you for that brilliant word. Ass-tunnel. Now I will forever associate you with Goatse (which I think is a visual representation of such).

      --
      OSx86 FTW
    7. Re:Some proof by thePowerOfGrayskull · · Score: 1

      yeah this is definitely a problem i can confirm this is happening across the board.

      Dear icann please increase the domain reg cost and eliminate the free trial period. Hey, thanks for the solid evidence! Now I'm sure they'll be sure to fix this right away!
    8. Re:Some proof by Dogtanian · · Score: 1

      Domain names need to be priced geometrically - so every one you buy costs more and more. Then there'll just be some contrived workaround, involving registering under different peoples' names, different company names and/or downright bogus names or companies.

      And even if they consider that and somehow stop it (it's fairly obvious), commonsense tells us that some enterprising cretin will have figured out another sneaky way around it in no time.
      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    9. Re:Some proof by sharkey · · Score: 1

      **AA, actually . Asstunnels

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    10. Re:Some proof by Anonymous Coward · · Score: 0

      So, who is going to register asstunnels.com and SEO it to make it show up in searches for record/movie companies?

    11. Re:Some proof by TallDarkMan · · Score: 1

      I had a situation which sounds close to this... the domain wasn't "stolen" (as this article seems to infer), but what did happen was interesting, and potentially expensive...

      I had registered a domain with Net-Sol last year and didn't re-new in time, so lost it (around June this year). There was a grace period for which I could get it back from Net-Sol, but it would cost me $45 (on top of the $35/year fee). Well, since I was in a situation anyway, I decided to let it go (it wasn't popular as far as I could tell), and take a chance on grabbing it when is came back "on the market" (in 45-days, according to Net-Sol). The point of this was trying to "move" the domain to Google Apps. This is what happened, and I got the domain again (in August).

      But what is weird about this, is that after the 45-days, the domain still wasn't available. I tried a look-up (WHOIS, I think) to see if it was snatched up by someone, but couldn't find any information (outside of Net-Sol still showing as the registrar). So I called Net-Sol to see what the deal was, and they said that Verizon now held it, and that I could buy it from them for $150, or I could wait for two months for it to be freed-up. I almost called Verizon directly to see if I could find out (1) why they held it, (2) how they did so (w/o registration) in the first place, and (3) why I would have to pay them to even get it back (let alone register it) or wait for two months. But I didn't. (sorry, no great story there)

      So, something screwy is going on with registrars and such... Is there anyone here who deals with this on a daily basis that might shed some light on any of this?

      --
      Will draft for food...
    12. Re:Some proof by kayditty · · Score: 0

      First of all, that's not proof at all. It's circumstantial evidence. But you can't even spell Caribbean, so I guess I didn't expect you to be the brightest nail in the bucket.

      Second, WHOIS for .COM / . NET (the Verisign-GRS TLDs) is absolutely FLAWED. It is not an all-inclusive database. It is per-registrar, unlike other TLDs (such as .ORG or whatever else the Public Interest Registry owns at the moment).

      To determine whether a domain actually exists, you need to do as the poster above says, and query the root / gtld servers themselves, e.g. dig psysci.net +norec @a.gtld-servers.net.

      Relying on WHOIS data for anything is just a sign of your lack of knowledge.

    13. Re:Some proof by Dogtanian · · Score: 1

      1) Call the phone number - ask what domains they have registered. If they can't tell you (because the list is way too longer) then F-em. This won't happen. It assumes that there is (or should be) someone at the end of that phone line who will automatically know which domains are registered. What if it's a small company? What if a clueless secretary answers the phone?

      The solution is to force everyone who registers a domain to have someone who knows what's going on always answer that phone number. But if an individual registered the domain, what if (e.g.) their girl/boyfriend answers the mobile phone and doesn't have a clue? If it's a moderate sized company, are you seriously suggesting that they should be forced to have someone who knows what's going on to always answer that phone number? Seriously? If not, what if computer-illiterate secretary answers the phone? What if the phone isn't answered at all?

      But I'm sure that large companies and/or professionals whose "jobs" revolve around cybersquatting and so on will ensure that such calls are automatically forwarded to people whose responsibility it is (see below on "domain management services").

      In short, this idea is just creating horrible red tape for the ordinary legitimate domain buyers that professional sleazes will be able to weasel their way around.

      Of course, if you don't require a legitimate answer immediately, it's no different to asking them by mail:-

      2) Mail a letter to the address with a URL where they have to go to and it asks them what domains are registered - If they don't reply or can't input it, then F-em. Result; companies are set up to provide "domain management services" who (as a matter of policy) have such queries passed on to them to be dealt with. Services to the cybersquatting industry.
      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    14. Re:Some proof by Kalriath · · Score: 1

      You mean Verisign. And the answer is really simple. Network Solutions is a wholly owned subsidiary of Verisign, and Verisign is the root DNS authority for the .com, .net and other gTLD domains. They don't need a registration, they have the DNS zone files for com.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    15. Re:Some proof by Anonymous Coward · · Score: 0

      This dates back many years, even when the registars were limited in number

    16. Re:Some proof by TallDarkMan · · Score: 1

      You mean Verisign. Now that you mention it, that makes sense... as does the rest of your explanation. Thank you!
      I still think it's a racket, though, with the prices I was quoted. Oh well... 's moot now that I'm with GoDaddy.
      --
      Will draft for food...
    17. Re:Some proof by argiedot · · Score: 1

      When I was young and foolish I made a search on GoDaddy for a domain. It was to be my first. I searched for it every day, because I was afraid it would get snatched just before I managed to put up the money. On the third day, the domain was parked. Then it was unparked (or whatever) 5 days later. By that time, I'd chosen another one. Mea culpa, but yeah, it happens.

    18. Re:Some proof by rs79 · · Score: 1

      "Good point, now I will check a second secret domain to prove or disprove the "ass-tunnel" hypothesis" "

      % whois ass-tunnels.com

      Whois Server Version 2.0

      Domain names in the .com and .net domains can now be registered
      with many different competing registrars. Go to http://www.internic.net/
      for detailed information.

      No match for "ASS-TUNNELS.COM".

      Whois Server Version 2.0

      Domain names in the .com and .net domains can now be registered
      with many different competing registrars. Go to http://www.internic.net/
      for detailed information.

      No match for "ASS-TUNNEL.COM"

      --
      Need Mercedes parts ?
    19. Re:Some proof by Chapter80 · · Score: 1
      oh I wish I could claim "ass-tunnel" as an original. Sadly, it's a reference to the RIAA and MPAA, coined a few weeks ago. I got it here.

      "Ass-tunnel" - spread it (so to speak)!

    20. Re:Some proof by jamar0303 · · Score: 1

      Interesting. Off on a tangent- I believe that record companies should have to watch a live public Goatse once a day for what they do to the average customer.

      --
      OSx86 FTW
    21. Re:Some proof by Reziac · · Score: 1

      Because of this very practice, I've been saying for years that domain registrars (and any associated or shell companies) should not be allowed to own ANY domains other than those directly related to their business.

      And if caught violating this, they should immediately be fined 3x the value of the domains (defined as either the cost to register them, or the price the registrar is offering to sell them for, which ever is greater) AND they should be defrocked and put out of the registrar business for at least a painful period, and possibly forever.

      But I strongly suspect there is presently more money in squatting and reselling than there is in ordinary domain registration, both for the registrars and for ICANN. Money always wins.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    22. Re:Some proof by Dogtanian · · Score: 1

      The "domain management services" can't exist - if I phone or mail them and ask what domain they have without telling them anything else about the account, how are they going to know what domain to say between the 1,000 domains they are managing? Not really. What if the company subcontracts someone else to look after their (legitimately acquired) domains and/or website on their behalf? If they pass on the details, the company looking after their domain will still have to be informed which domain it is they're interested in. If they're not allowed to pass on the details to someone outwith the company, you're coming very close to dictating how *legitimate* companies run their business, and tying them up in red tape.

      The one down side I can think of would be companies that could register a different # or address for each domain (assuming they get huge discounts to getting lots of numbers or registering lots of addresses) - however it should not be difficult to track if multiple numbers are owned by the same person/company or if 1,000 addresses are all within one city block and other shenanigans. Again, that could be part of the verification process when verification is requested on a domain. Exactly what I was thinking. But this task which "should not be difficult" is probably less trivial than you imagine. What if they've been registered in bogus names? The squatters certainly will try that, and it'll probably work. ICANN will have to spend time investigating records and prove otherwise- and this'll end up in a very convoluted situation.

      Of course, ICANN could say "sounds dubious, let's axe this guy's domain" if they don't want to spend time investigating, which will probably lead to innocent people who didn't comply with all that red tape fast enough or lost track of their details being caught in the trap.

      And the large-scale squatters will be able to employ someone part or full-time to deal with this nonsense, whether they "work for" the company or not. You're proposing something that sounds nice on paper and in practice will just be a major PITA for legitimate users and worked round by the people it's meant to stop.
      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    23. Re:Some proof by Dogtanian · · Score: 1

      Yes it would wind them up in red tape, but that would be the point. Make is WORK to manage a domain and managing 10,000 becomes impossible. No, if you are managing 10,000 you make sure that you have a professional organisational structure in place. As I already said, the red tape is going to tie up the legitimate domain buyers (with under 25 domains), not the professional squatters.

      You're going to stop them exploiting this organisational stucture? Well, since there will have to be rules to ensure everyone is treated fairly, what should the rules be? If you think it will be anything other than incredibly difficult to write rules that *don't* make life impossible for legitimate users *and* don't have enough loopholes for squatters/grabbers to weasel their way through the net, then you haven't thought it through enough.

      It would not be that difficult really, Really? Asserting that it would not be difficult does not make it so. IMHO it would quickly become *very* difficult if a half-competent domain-grabber had set in place a complex structure of names, companies and so on.

      and it would be worthwhile. Why would you let someone open 100 fake accounts at $8 a pop Because it would be very difficult to (a) find out and (b) prove that dodgy activity was taking place.

      The Investigating could be done by companies like Verisign, That simple sentence glosses over a lot of convoluted and complex investigations that Verisign would have to get into and employ people for, all to enforce your simple system that supposedly makes things fairer but in fact just ties the legitimate users up in red tape.

      and if too many domains controlled by them are squatters, Are we talking about domain grabbing or squatting? The former is a subset of the latter.

      have ICANN give control of the domain to someone else and start the validation process. Your idea would work perfectly in a perfectly organised world. It would be a disaster in the real world because it makes life harder for ordinary users than for the (large scale, bulk) domain grabbers and it would quickly become more complex than you imagine to enforce it fairly.
      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    24. Re:Some proof by Reaperducer · · Score: 1

      Mail a letter to the address with a URL where they have to go to and it asks them what domains are registered - If they don't reply or can't input it, then F-em.
      I mailed a letter to a domain once based on the address listed in its WhoIs record. A week later the letter came back stamped from the post office indicating the address doesn't exist.

      I reported it to GoDaddy, the registrar, and they were quite rude about it and wouldn't take the complaint unless I mailed them the bounced letter. Since the letter was of a business nature (and completely legit -- not domain registration spam or anything like that) I couldn't turn it over to GoDaddy and when I told them they said that nothing would be done.
      --
      -- I'm old enough to have lived through six different meanings of the word "hacker."
    25. Re:Some proof by Antique+Geekmeister · · Score: 1

      I'm sorry, but I disagree with you. I have several vanity domains and don't have the personal infrastructure, to provide proper domain registration services. My servers are corporate, and keeping a few vanity domains for email and webhosting with built-in domain registration is very useful to me and people like me. The domain hosting is very useful, along with SSL key management and basic DNS services.

  2. Email them? by A+beautiful+mind · · Score: 0, Offtopic

    ICANN asks that anyone who suspects they have been victimized by domain name front running to email them with details.
    This is surely just a tricky ploy to gather email addresses! Then they can proceed to sell the list..
    --
    It takes a man to suffer ignorance and smile
    Be yourself no matter what they say
    1. Re:Email them? by sm62704 · · Score: 3, Interesting

      OK, I know yours was a joke post, but something pissed me off for YEARS that I don't think should be allowed. I wanted to register mcgrew.org or alternately mcgrew.com back when com, org, and net (and ones you can't get like gov and edu) were the only roots.

      What infuriated me was that some sleazeballs had registered .com and .org for every name in the phone book, and was selling "your name can be your email!" mcgrew.com, smith.com, jones.com, even johnson.com (which one would expect to be a porn site) led to the same company.

      Eventually they opened up .info and I managed to snag mcgrew.info and moved all the stuff I'd been polluting the net since 1997 with (yes, that particular page is older than slashdot). And newer stuff.

      Of course, if I had actually managed to get mcgrew.com, the comedian with the same name as me out in Colorado probably would have sued me for it, despite the fact that I'm 10 years older than him.

      -mcgrew

      (then I discovered K5, back in its heyday, and actually had people READING my pollution, and strangely LIKING it. Still scratching my head over that one...)

      --
      mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
  3. Not the Point by mfh · · Score: 5, Insightful

    When a domain is snatched, usually it doesn't matter if the original owner gets it back or not. That's not the point, in most cases. Thieves will use the domain to drive traffic to their astroturfing/spam network and drive their PR up in the process. That stays in memory indefinitely and has a beneficial impact on any site like that.

    If the owner gets their network back, they still have the stigma of the bad activity associated with the domain.

    Preventing domain theft is going to only get increasingly more difficult as technology becomes more complicated.

    --
    The dangers of knowledge trigger emotional distress in human beings.
    1. Re:Not the Point by sm62704 · · Score: 2, Interesting

      This is only slightly on-topic but I have karma to burn so wtf, someone might think it interesting or amusing.

      I used to be a Quake addict, ad my ISP offered "unlimited internet access" and he wasn't kidding. They gave free web hosting with internet service, so I proceeded to start the "Springfield Fragfest" (note that the link is NOT to the Springfield Fragfest, it is to an article in Springfield's local paper that succinctly illustrates the fact that the real Springfield, which has an alderman named Gail Simpson, is sicker and funnier than the cartoon Springfield. The article is about "Klutzo the Clown", a former police officer, being arrested for being a pedophile).

      Anyway, a series of freak accidents got my site popular, and I finally registered thefragfest.com and continued the site there. A few readers jokingly pestered me to host porn on it (one fellow whose online name was "Dopey Smurf" is now a medical doctor in Canada, he's probably reading this now). After a few years I got tired of the sirte, let it grow cobwebs, and finally let the domain lapse.

      Well, Dopey got his wish. thefragfest.com was, last time I looked, a porn site.

      -mcgrew

      --
      mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
    2. Re:Not the Point by Anonymous Coward · · Score: 0

      original owner?

      we're talking about new, obscure, never registered domains.

      rtfa.

  4. I believe it happened to me.... by lena_10326 · · Score: 2, Interesting

    A year ago I searched on a domain I had spent 2 weeks thinking up. It was available but I waited 3 days. When I went to purchase, it was registered 1 or 2 days before. At the time I chalked it up to bad luck.

    I only wish I could remember the domain name. I might have it in my notes but I have pages and pages of notes.

    --
    Camping on quad since 1996.
    1. Re:I believe it happened to me.... by Anonymous Coward · · Score: 1, Funny

      You spent two weeks thinking up a domain name and now can't remember it?

      Man, you must have a terrible memory. Did you spend the entire two weeks going "I need a good domain name... how about awesome.net? Nah, that's no good. How about awesome.net? Yes, that's it!" :)

    2. Re:I believe it happened to me.... by lena_10326 · · Score: 2, Funny

      You spent two weeks thinking up a domain name and now can't remember it?

      Man, you must have a terrible memory. Did you spend the entire two weeks going "I need a good domain name... how about awesome.net? Nah, that's no good. How about awesome.net? Yes, that's it!" :)
      1. I think up a lot of domain names. I have lots of ideas.
      2. It was 5-15 minutes a day.
      3. My ad hoc method gets me very good domains.
      4. I want you to try to think up a domain name with only dictionary words and see how well you do. Big talk from an anonymous weenie.
      5. I have a list of a few hundred potential domain names. It's something I do, so if you can remember 1 name out of several hundred that you wrote down a year ago, great for you then.
      6. I believe you're a big fat turd with sausage fingers, given you hide behind anonymous to shield your real username.

      --
      Camping on quad since 1996.
    3. Re:I believe it happened to me.... by thrillseeker · · Score: 2, Funny
      I believe you're a big fat turd with sausage fingers

      No match for "BIGFATTURD.COM".
      >>> Last update of whois database: Thu, 25 Oct 2007 15:54:43 UTC <<<


      Just in case ...
    4. Re:I believe it happened to me.... by lena_10326 · · Score: 1

      No match for "BIGFATTURD.COM".
      >>> Last update of whois database: Thu, 25 Oct 2007 15:54:43 UTC <<<
      You forgot sausage fingers. That was the clincher. Heh.
      --
      Camping on quad since 1996.
    5. Re:I believe it happened to me.... by Anonymous Coward · · Score: 0

      Er, sorry if I offended you. It was just a joke (hence the :) at the end).

      I wasn't actually doubting your ability to do your job. Again I apologize that my joke (and my anonymity) bothered you.

    6. Re:I believe it happened to me.... by Marvin01 · · Score: 1

      Server Name: BIGFATTURD.COM Registrar: GODADDY.COM, INC. Whois Server: whois.godaddy.com Referral URL: http://registrar.godaddy.com/ >>> Last update of whois database: Thu, 25 Oct 2007 16:54:43 UTC

    7. Re:I believe it happened to me.... by lena_10326 · · Score: 1

      Hmmm. An apology. WOW.

      Okay, I'll retract my big fat turd comment. But, the sausage finger one still holds.

      --
      Camping on quad since 1996.
    8. Re:I believe it happened to me.... by ettusyphax · · Score: 1

      Yeah, it's definitely not fiction. If you WhoIs search at the wrong site, the domain name you wanted will be gone within a day if you don't buy it then and there. This has happened to me several times before I finally got the hint as to what was going on.

    9. Re:I believe it happened to me.... by garwain · · Score: 1

      Even 6 years ago, possibly. My partner and I had spent a couple long evenings eating pizza and drinking beer while developing a buisness plan (which has long since been scrappped), and coming up with possible company names with domain names available. Since neither of us had any cash to spare, we just settled on possibilities until the incorporation process was complete and we could get a company credit card. In the month that it took to resolve all legalities and get our equipment up and running, the domain had been registered! I ended up hyphenating the 2 words that created our name, and we have been reasonably satisfied ever since. Worst part is the original domain is still taken, and I have never seen anything done with it!

  5. I just tried one. by grub · · Score: 0, Offtopic


    No match for "ICANNARETHIEVINGCUNTS.COM".

    Let's see what happens.

    --
    Trolling is a art,
    1. Re:I just tried one. by grub · · Score: 1

      (the idea being bad registrars auto-register it and ICANN gets mad) Forgot to preview

      --
      Trolling is a art,
  6. How to buy a domain in this day and age by hansamurai · · Score: 3, Informative

    Say you want domain xyz.com and you have no idea whether anyone else owns xyz.com or if it's in use.

    1. DO NOT go to xyz.com. If it is being squatted then the squatters now have a hit on it, they have one more reason to keep it if they're just testing out the ICANN 5 day snatch and release policy.

    2. Go to a registrar site and do a search on xyz.com

    3. If no one owns it, buy it NOW. The first hour after your search could very well be the only time it is ever available ever again. There is a very high probability of this. If you do not buy it right away, by the time you come back it will be gone. A squatter will have bought the site to abuse the ICANN 5 day policy. If it gets enough hits, they will keep it, if not, they will release it and by the act of releasing some other squatter will probably pick it up. This will keep on repeating itself until you pay enough money for some just as evil company to grab it and sell it to you.

    There's your guide to buying a domain name in three obnoxious steps.

    1. Re:How to buy a domain in this day and age by lena_10326 · · Score: 1

      Now you tell us. :D

      --
      Camping on quad since 1996.
    2. Re:How to buy a domain in this day and age by Anonymous Coward · · Score: 0

      3. If no one owns it, buy it NOW

      The only problem with that is, what if that is exactly the behavior the registrars are trying to cause you to take? So, if you suspect the domain will be registered if you don't register it RIGHT THIS SECOND, and you register it, they get your $X even if you don't end up using the domain.

      Only a conspiracy theory, but....

    3. Re:How to buy a domain in this day and age by oahazmatt · · Score: 1

      I've actually just subscribed to your practice. I lost a domain back in May due to financial issues (my first and last name.com) and went to register it again about two months ago. I did the search but didn't purchase immediately, believing I had time. Two days later it was a generic link site.

      This time, I searched for a new domain, found it available, and bought it outright. If I hadn't read this story, I probably would've delayed my purchase and lost on another domain name.

      --
      Those who believe the Internet is private,
      find their privates are on the Internet.
    4. Re:How to buy a domain in this day and age by trolltalk.com · · Score: 1

      Why would you see if a domain is available unless you want to register it?

      If you DON'T want to register it, why do you care if someone else "snatches" it?

      That being said, the 5-day free period should be eliminated, immediately.

    5. Re:How to buy a domain in this day and age by CodeBuster · · Score: 1

      Go to a registrar site

      TFA mentions that some of the smaller registrars are logging searches put through their sites and engaging in the snatching racket directly through third party shell companies which are owned by or connected to the registrar. The registrar is trying to get a higher fee by having their shill sell the domain back to you for a higher price than the initial registration would otherwise have cost. Depending upon how automated the scam is the domain could be snapped up within minutes or even seconds of the search using the 5 day catch and release policy of ICANN (they need to charge a nominal and non-refundable fee for the catch and release service, $1 would be fine, to help prevent abuses by spammers and squatters).

    6. Re:How to BUY a domain in this day and age by sixsixtysix · · Score: 1

      thats just it, they should just sell the domain names instead of leasing them. and while they're at it, let anyone pick out whatever top level they want.

      --
      ...
    7. Re:How to buy a domain in this day and age by rs79 · · Score: 1

      " If no one owns it, buy it NOW. The first hour after your search could very well be the only time it is ever available ever again."

      An HOUR?

      Say people are doing this and note it's the registrats of which there are hundreds from big ones (Network Solutions, godaddy, etc) and small ones. Serious domain name colllectors become registrars just to get domains wholesale. The abuse tends to be in the hands of the smaller registrars, modulo some crooked characters at larger registrars which HAS happened in the past - and who were fired on the spot.

      Anyway, so people are doing this. Accept it. Now, more than one guy is doing it. In a competative environment do you really think you have an hour? Either now or in the future?

      I'd speculate that there are registrars who simply register any name within minutes if not seconds after a lookup. Especially if they're cheap registrars. Sure they can make a dollar if you reg a domain through them, but dollars to donuts they can make more than that by implementing some clever name you thought up.

      So, in theory the more a registrar charges the less likely it is to happen. I use Network Solutions these days as they seem to suck less than anybody else I've tried (YMMV) and I've never seen them steal a domain I looked up there even weeks larer.

      Speaking of lookups, if you use real port 43 whois your query (in net/com) it only goes to Verisign but any web based whois at a registrar is a crapshoot. Some are good some are so bad even ICANN, a slow moving parody of itself, overrun with lawyers and controlled by registrars, has been forced to act.

      --
      Need Mercedes parts ?
  7. wow by zehaeva · · Score: 3, Funny

    I am so very glad that ICANN has quickly come forth at the first signs of such a horrible problem, to think that the registrars would abuse their positions like this.

    I think we all can rest since ICANN is going to fix this before it even becomes a problem.

    oh wait ...

    1. Re:wow by rs79 · · Score: 1

      " I am so very glad that ICANN has quickly come forth at the first signs of such a horrible problem, to think that the registrars would abuse their positions like this. "

      Keep in mind you have to send ICANN $70K to become a registrar.

      So ICANN has great incentive to keep them on the up and up.

      Oh wait...

      --
      Need Mercedes parts ?
  8. Dear ICANN: by circletimessquare · · Score: 2, Funny

    I have been the victim of Internet-related Terminology Front Running (tm). It began innocently enough with "trolling" borrowed from fishing terminology. But when "phishing" itself became a term, as well as "blog", "AJAX", "spidering", etc., I realized I was in a strange world where tech writers invent terms for phenomena most people aren't even aware exists yet. Usually the phenomena is out there for awhile first, and as it gradually trickles into common knowledge, terminology gradually evolves. But here we have terminology existing even before awareness of the phenomenon. Which brings us to "front running"...

    Oh, wait, we're talking about a different kind of front running? It means what again?

    See what I mean ICANN? I can't even keep track anymore. I thought I was tech savvy, but if I blink, these crazy kids are using words I don't even understand.

    Wait... ICANN is the wrong organization to complain to about this?

    I give up.

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:Dear ICANN: by cthulu_mt · · Score: 1

      It began innocently enough with "trolling" borrowed from fishing terminology.
      Actually, its trawling,/i>, but nice try.
      --
      Virginia is for lovers. EVE is for griefers.
    2. Re:Dear ICANN: by sm62704 · · Score: 2, Interesting
      It began innocently enough with "trolling" borrowed from fishing terminology.
      Actually, its trawling,/i>, but nice try


      Wikipedia says you're wrong

      Trolling is a method of fishing in which some form of bait, such as a fishing lure or a living fish, is drawn on a line through the water. Trolling from a moving boat is a technique of Big-game fishing and is used when fishing from boats to catch large open-water species such as tuna and marlin. Trolling is also a freshwater angling technique
      On the other hand,

      Trawling is a method of fishing that involves actively pulling a fishing net through the water behind one or more boats, called trawlers.
      -mcgrew
      --
      mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
  9. Couldn't one start "poisioning" the hit database? by laing · · Score: 2, Interesting

    Why not just start a bot that makes random DNS queries? This would eventually make it unprofitable for the squatters to squat.

    --
    This space for rent

  10. There's got to be a better way by MeditationSensation · · Score: 1

    than domain names. One time I register {my firstname}{my lastname}.com and let it lapse. I do not have a memorable or popular name at all. Yet sure enough, someone was squatting on it for a couple of years. I keep thinking something akin to AOL's keywords would have been better than domain names. Say instead of a domain, it's just a plain string. No top levels or any of that. "IBM Corporation", "/.", "Natalie Portman is hot". Maybe have a maximum size and forbid a few characters to prevent code execution and the like. Maybe a have a nominal fee so someone doesn't grab zillions of strings. But man, the restrictions and absurdity in place right now is nuts.

    1. Re:There's got to be a better way by morgan_greywolf · · Score: 1

      How would that be any better?

  11. *That's* Not the Point by Niten · · Score: 1

    This isn't about snatching domain names from previous owners. It's about improper use of search records from the whois databases, using this information to automatically grab new, currently unregistered domains when other people check the domain names' registration status.

    1. Re:*That's* Not the Point by mfh · · Score: 1

      Yes, but when ICANN reverses the snatches, it will be too late and the damage will be done, so the domains will be useless to new owners, anyway.

      There is entirely too much stress on domain names. There should be more stress on domain content.

      --
      The dangers of knowledge trigger emotional distress in human beings.
    2. Re:*That's* Not the Point by bcattwoo · · Score: 1

      How will the damage already be done? Why would potential customers be going to a website that the business owner hasn't even registered yet?

      I suppose there is a chance that Google might find the junk site, determined it was crap, and send it down to the bottom of the heap during the 5 day trial period.

  12. Re:Couldn't one start "poisioning" the hit databas by hansamurai · · Score: 1

    This is undoubtedly going on. People like us are doing it to screw with all squatters, and squatters are probably doing it to other squatters to get them to buy and keep crap domains. Doesn't seem to be helping much though.

  13. Re:Couldn't one start "poisioning" the hit databas by lena_10326 · · Score: 2, Insightful

    I don't think it'd work. It'd be very easy to load them into a table, filter them against dictionary words, and sort them by # of hits.

    Human eyeballs could pull the top 1000, do a quick spot check on the list, remove garbage names, and register the rest. Once setup, it'd take about 10-15 minutes of human intervention a day.

    --
    Camping on quad since 1996.
  14. I've never used whois for this exact reason by Qbertino · · Score: 2, Informative

    I've *never* used whois for probing novel domain-names for this exact reason. I just use the URL and see if it hits. If it and it's adjacent ones on other tlds of interest don't hit and I want it, I order it.

    Being a little paranoid allways helps.

    --
    We suffer more in our imagination than in reality. - Seneca
    1. Re:I've never used whois for this exact reason by Anonymous Coward · · Score: 1, Interesting

      I've *never* used whois for probing novel domain-names for this exact reason. I just use the URL and see if it hits. If it and it's adjacent ones on other tlds of interest don't hit and I want it, I order it.


      I always just use nslookup. That way it is just between me and my DNS server. Someone would have to be constantly sniffing my DNS server and its upstream authorities and rapidly analyzing the huge amounts of data in order to grab a domain before I can register it. (entirely possible, however less likely than a whois or registrar search)
    2. Re:I've never used whois for this exact reason by Marvin01 · · Score: 2, Interesting

      You don't trust 'whois', but you trust your ISP not to sell DNS records? You are far more trustworthy than I. Not to mention the significant chance that the domain might be registered, but not exposing a web host.

    3. Re:I've never used whois for this exact reason by mikael · · Score: 1

      You could try 'traceroute' - but maybe that goes through the name servers anyway.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    4. Re:I've never used whois for this exact reason by idontgno · · Score: 2, Insightful

      Of course it does. Any IP communications which uses a name rather than an IP number is using some type of name resolution. Since the real question posed by this situation is "has this domain name been registered", you can't answer it without consulting with the domain name resolution system. And that is either a WHOIS query at a registrar or a name resolution check through a DNS, either incidental (ping my.foobar.foobaz.org) or intentional (dig my.foobar.foobaz.org).

      And I have doubts about using DNS to verify it anyways. Domains aren't hosts; the domain "foobar.foobaz.org" might have many host names within it (such as "my", mentioned above), but you can't guarantee that you can guess them. Yah, www.foobar.foobaz.org seems like a likely place, but if I'm front-squatting the foobar.foobaz.org domain, I may not host a site at that address. (Of course, I'd be an idiot not to, since hits on that site make measuring interest in the domain easy, and I can aways linkfarm or upload drive-by malware for a bounty.)

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    5. Re:I've never used whois for this exact reason by rs79 · · Score: 1

      "I've *never* used whois for probing novel domain-names for this exact reason. I just use the URL and see if it hits. If it and it's adjacent ones on other tlds of interest don't hit and I want it, I order it."

      Um, you are aware not all registered domains have working websites (or even "should be working but isn't at the moment" websites) right? Some only exist to publish MX records, ie they're used only for mail.

      --
      Need Mercedes parts ?
    6. Re:I've never used whois for this exact reason by mikael · · Score: 1

      There are also dynamic name services (like dyndns.org) - You can dynamically a name to any IP address, and then change it whenever your IP address changes. So if you have your own IP server at somehost@somename.org at xx.yy.zz.ww, and you get plagued by spam, trojan or worm attacks, you can just change your address back to 127.0.0.1 for a little while.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
  15. Some probabilistic inference by jpfed · · Score: 2, Interesting

    To greatly reduce any doubt that this is happening, people should determine the availability of extremely unlikely domain names, like a random string of 24 characters.

    tksmowlapoxnvbwlqanmiutklweh.com
    laskjdfghlfkajgneruykvjniour.com
    qwieurylkajbaiurylkjasndfgpu.com

    If several of those are snatched up after a whois lookup, it's clearly not because anyone else actually bought the domain name because they wanted to use it.

    1. Re:Some probabilistic inference by kernelphr34k · · Score: 1

      I'll test that theory now. Although a domain was snatched from a buddy of mine early this morning, and 2 other domains on Tuesday. Will be interesting to see what comes out of all of this.

    2. Re:Some probabilistic inference by blueZ3 · · Score: 4, Funny

      What do you mean, extremely unlikely?

      The first one is obviously used by The King of Siam's Major Order of Worried Lemurs Acting Perfectly or Xylophone Needing Vampires Being Wheedled Like Queens of Another Nice Monarchy In Utah's Tasteless Kingdom, Looking at Everyone's Hiney

      The other two are equally obvious

      --
      Interested in a Flash-based MAME front end? Visit mame.danzbb.com
    3. Re:Some probabilistic inference by JUSTONEMORELATTE · · Score: 1

      Crap! How did you guess my super-secret domain?

    4. Re:Some probabilistic inference by theskipper · · Score: 1

      Wow, your 'b' key must be having a nervous breakdown after that post.

      Give him the rest of the day off before he goes postal on v or n.

    5. Re:Some probabilistic inference by unitron · · Score: 1

      The other two are equally obvious

      ...but there is not enough space in the margin of the post to include them.

      --

      I see even classic Slashdot is now pretty much unusable on dial up anymore.

  16. Use DNS to look up domains. by pikine · · Score: 2, Informative
    Have you tried:

    host -t NS domain.com
    instead? If it says NXDOMAIN (no such domain), the domain does not exist.
    --
    I once had a signature.
    1. Re:Use DNS to look up domains. by suso · · Score: 3, Informative

      Have you tried:

              host -t NS domain.com

      instead? If it says NXDOMAIN (no such domain), the domain does not exist.


      Well of course I can do that but now even that is in danger of being snooped. But I can't expect a customer to do that every time, but they deserve better treatment than to have their domain snatched before they can even buy it. I think once this whole Verisign thing gets resolved, I'll setup a domain checker on our website so that they have someplace more trustworthy to check.

    2. Re:Use DNS to look up domains. by trolltalk.com · · Score: 1

      "I'll setup a domain checker on our website so that they have someplace more trustworthy to check."

      1. set up domain name checking website
      2. snoop on queries
      3. PROFIT!

    3. Re:Use DNS to look up domains. by corsec67 · · Score: 1

      That, or make a ton of random queries so the snoopers buy a lot of not used domains.

      --
      If I have nothing to hide, don't search me
    4. Re:Use DNS to look up domains. by antic · · Score: 1

      Isn't one of the problems that they don't buy it, they just taste it free for five days?

      That rule should be scrapped. If you want a domain, you pay for it up front. If you make a mistake, tough luck - you're out $10 - big deal.

      --
      'Thats they exact same thing a banana wrench monkey.'
  17. I'm kind of sensitive to this stuff right now. by Dr.+Manhattan · · Score: 3, Informative
    I failed to renew my free dyndns.com domain on time and on Saturday someone using the U.K. host "Real International Business Corp." (which Google shows to be a host for all kinds of scam websites) stole the domain. It wasn't just someone grabbing an unused domain - they put up a copy of my front page (though the links led nowhere).

    They were even loading images, like I do, from my ISP's webspace. For a while I had changed the image to a big "WARNING!", but they noticed that yesterday and removed all links and images from their copy. A DMCA takedown won't work since they're in the U.K. and from what I've read of the hosting service, ethics aren't exactly their strong suit. So I've got to just learn from experience here. Oy.

    --
    PHEM - party like it's 1997-2003!
  18. ICANN needs to put registrars out of speculation by Animats · · Score: 4, Informative

    One of the provisions of the ICANN Registrar Agreement is this:

    • 3.7.9 Registrar shall abide by any ICANN adopted specifications or policies prohibiting or restricting warehousing of or speculation in domain names by registrars.

    So ICANN has the authority to insist that registrars get out of the domain speculation business. They don't have to ask the registrars; they can simply order it.

    Currently, most of the "registrars" are fronts for domain speculators. Take a look at the list. There are whole families of phony registrars (Enom1, Inc., Enom2, Inc., Enom3, Inc., ... Enom371, Inc., ... Enom469, Inc.) There are ones who admit they're domain speculators (NameJumper.com, Inc., "!!BBB Bulk Inc"). There are ones that are fronts for "Club Drop".

    Most of these "registrars" are so phony they don't even have a business address.

    This registrar information is useful for filtering junk sites. If a site is registered with one of the bogus registrars, it's probably desirable to block its e-mail (which is probably spam), and throw it out of search engines.

  19. More Common than it should be by wolff000 · · Score: 1

    I think cyber squatting is just as bad as this. You shouldn't get a domain unless you have a use for it. Not just by one hoping to sell at an inflated price later. There should be some sort of price cap on a domain name.

    --
    WTF?
  20. I'd rather see a crackdown on typos... by damn_registrars · · Score: 3, Interesting

    As much as front-running is annoying (at the very least), I think registering typo'd domains is actually worse. Considering how many domains are registered simply for the purpose of catching people who misspell the domain they want to visit, it may be a larger problem.

    And from my experiences, it seems like the typo squatters usually bombard you with pop-ups and other annoying crapola on their sites when you accidentally wander into them. The front-runners at least seem kind enough to just tell you "this domain could be yours for only $1M". Bastardly, sure, but less of an annoyance than 4 pop-ups that trigger more pop-ups on being closed.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
    1. Re:I'd rather see a crackdown on typos... by OAB_X · · Score: 1

      I have found that 'pop-up blockers' work rather well.

  21. a good idea by FudRucker · · Score: 2, Insightful

    why not make a domain named www.ICANNOT.org and just make it a listing/cache of domain names already taken so users looking for a domain can see if a name is already taken...

    Oops, too late, already taken...

    --
    Politics is Treachery, Religion is Brainwashing
  22. I'd be shocked if it wasn't happening by marquis111 · · Score: 1

    This very idea occurred to me about 5 years ago, and I immediately assumed that someone out there was doing it already. It's an idea that's too easy to abuse for it not to be happening.

  23. direct lookup by TheSHAD0W · · Score: 1

    You can directly lookup whois information at the internic's lookup page, or use the unix whois command or a Windows utility like Cyberkit to discover whether or not a domain has been registered without leaking your interest to someone who might try to grab it first.

    1. Re:direct lookup by Anonymous Coward · · Score: 0

      Does internic keep a copy of the database, or are they just forwarding the query to verisign? If the latter, do you trust verisign (corporate motto "do more evil")?

    2. Re:direct lookup by Anonymous Coward · · Score: 0

      um, nslookup That's what its for. Windows or *nix command line, the syntax is the same.

    3. Re:direct lookup by TheSHAD0W · · Score: 1

      nslookup finds IP addresses, not domain name registration.

  24. I say SPAM the domain Spammers by PS3Penguin · · Score: 2, Interesting

    I say we setup a dictionary based query that (slowly as to not DNS) .. generates a mountian of plausible but not needed DNS queries. The domain squatters would then spend $$$ grabbing what amounts to useless domains .. Use the old scale of economy attack on them. It they have to sit on 10,000 useless names to hit one "real" one .. it becomes a LOT less profitable .. and they will move on.

    1. Re:I say SPAM the domain Spammers by mabhatter654 · · Score: 1

      under the rules there's no penalty for the 5 day waiting period. The squatters drop them before they pay any money. Icann needs a $15 non-refundable restocking fee or something.

    2. Re:I say SPAM the domain Spammers by Quietust · · Score: 1

      under the rules there's no penalty for the 5 day waiting period. The squatters drop them before they pay any money.
      Then trick them into thinking the domains are "real". Expand the dictionary-DNS script to keep track of the fake domains it queried and retry them occasionally - if they get registered, then add them to another list and start actively querying the webpages to generate "hits" for them.

      For optimum performance, publish both lists (both queried and subsequently registered domains) somewhere online so other people can also participate (and then hope some "savvy" spammer doesn't arrange for the Storm Worm botnet to remove you from the Internet).
      --
      * Q
      P.S. If you don't get this note, let me know and I'll write you another.
  25. Oblig. Anti-Flag by sm62704 · · Score: 0, Redundant

    Hey, we're rolling, hey..
    Go home, go home
    Squatter go home
    Go home, go home
    Squatter go home
    I think I hear your Mommy callin'
    On your cellular phone
    She said your dad wants his car back
    So you'd better come home
    Squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    Go home, go home
    Squatter go home
    Go home, go home
    Squatter go home
    You got no money for the punk rock show
    It's delagated for a beer and a ho
    Spitting, pissing, cumming, and shitting
    So you have cool clothes
    Squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    I see you sitting on the boulevard with your tired and pissed off stare
    Tellin' everyone your hard luck story, and what landed you here
    You think of mommy and daddy out in their safe suburban home
    And you know that's where you're gonna be when you start to feel the cold
    I'm saying poser go home
    Poser squatter go home
    Summer squatter go home
    Poser squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    Squatter go home
    Summer squatter go home

    --
    mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
  26. ICANN should forbid registrars from owning domains by david.emery · · Score: 1

    That would clean up this problem, right? Sure, it's an impact on other lines of business, but domain registries have a 'special role' to play in the internet. One question, though, is whether ICANN could legally enforce this rule in various jurisdictions. Probably so, since ICANN could revoke the registry for not playing by the rules, but IANAL...

            dave

  27. uh, educate yourself, then speak by circletimessquare · · Score: 1
    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  28. Wouldn't surprise me by ajs318 · · Score: 1

    If you do a whois on a domain name, then somebody, somewhere gets to see that you might be interested in buying it. It was really only a matter of time before someone started doing this.

    --
    Je fume. Tu fumes. Nous fûmes!
    1. Re:Wouldn't surprise me by Dogtanian · · Score: 1

      If you do a whois on a domain name, then somebody, somewhere gets to see that you might be interested in buying it. It was really only a matter of time before someone started doing this. I had this happen to me almost two years ago; it's hardly new.
      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
  29. Re:ICANN should forbid registrars from owning doma by CaseCrash · · Score: 1

    Then how in the world could they have a webpage to allow you to register domains in the first place? They need at least one domain

    --
    No, that link you posted to a web comic we've all seen a hundred times is not "obligatory."
  30. already happens (rumours) by micromuncher · · Score: 1

    I think this already happens. When you do a whois, which is usually the first thing in registering a domain, a variety of authorities are queried. Now - I don't know which one - but one of them is naughty and camping starts. There have been 3 occassions where I have run whois through netsol where within 24 hours the domain went from avail to camped (by studiomobile - a net 'research' company.) I think it is more than a coincidence.

    --
    /\/\icro/\/\uncher
    1. Re:already happens (rumours) by jafiwam · · Score: 1

      This has been happening for at least 10 years. I remember playing a game with my tech support buds , looking up domains at network solutions (or whatever they were called at the time) and getting a point for each one that got registered within 24 hours.

      That was before the free trial period. (Why THE HECK would that be useful to ANYBODY except a scammer of some kind?)

      True, it could be an employee of them doing it.

      Either way this is NOT NEW.

      Now days with all the wild card DNS BS some companies are doing, I wouldn't be surprised if it got more common as there are more employees with access to logs that can illicitly sell them. Looking at you Charter Communications.

      For lookups, it might be better to go to one of the root servers directly with a lookup.

    2. Re:already happens (rumours) by micromuncher · · Score: 1
      --
      /\/\icro/\/\uncher
  31. Re:ICANN should forbid registrars from owning doma by david.emery · · Score: 1

    A registry would itself have to register with the root registry, which I guess is Network Solutions, right? Doesn't ICANN have to bless anyone who wants to be a registry?

    The domain name for my-bogus-registry.com would have to be registered first -with someone else-, before you could set up www.my-bogus-registry.com. So the specific bootstrap problem you mention should not occur.

          dave

  32. Re:Couldn't one start "poisioning" the hit databas by theskipper · · Score: 1

    Good point. So if you're a whitehat and have access to the list of domains, some poisoning could still be applied by simply looking up each domain a (large enough) number of random times.

    The results could still be filtered by dictionary/eye but you at least devalue # of hits in their decision making process. Seems like a pretty important variable to take out of their equation.

  33. Well, DNS itself is a dumb 20th century idea by Quadraginta · · Score: 1, Insightful

    Why have domain name service at all?

    That is, why do we have this superelaborate expensive annoying structure, the only purpose of which is to translate one string (the hostname) into another (the IP address)? Sure, a nice 32 bit number (0x4a7d1368) is easier for programs to work with than a variable-length alphanumeric string ("www.l.google.com").

    But so what? The only legitimate purpose of technology is to make our lives easier, not to serve as a temple in which we practice the complicated correct forms of worship. My 2007 Odyssey is way more complicated under the hood than my 1968 Volkswagen was (and of course that means car designers and car mechanics have a much more complicated and demanding job these days), but the 2007 car is much easier for the user to drive and take care of than the 1968 car. That's as it should be. Technology should be designed and evolve so that the ease and convenience of the user is the first priority. How easy or cool it is to implement should be a distant secondary goal only. (But programmers should not complain, because the more complicated and difficult a scheme is to implement, the better-paid the job of implementer is.)

    The alphanumeric string that human beings find easy to remember and use should be the "real" address of an Internet host, and it should be up to the robots and programs behind the scenes to cope with the complexity of correcting routing packets to the destination using only this string.

    More fundamentally, the idea of making one giant and (literally) global hash in which each host is mapped to a unique ID tag is violently contradictory to the way people naturally think. We naturally think in terms of local variables and namespaces. It perfectly possible for a bookstore in Liverpool to have the same name as a bookstore in Atlanta, because human beings consider the bookstore name a local variable and use the context ("Am I in England or Georgia?") to figure out the correct global meaning. Internet hostnames should work in a similar way; it should be possible for the Liverpool and Atlanta bookstores to have the same name on the Internet, too, with some method of choosing context to resolve ambiguity. Yes, I realize the dotted aspects of hostnames was supposed to do something like that ("foo.bar.com" versus "foo.baz.com"), but it clearly didn't work out that way. Perhaps because it was designed by people for whom the world was broken up into a few very large organizations (.mit.edu, .af.mil,...) containing a nice orderly heirarchy (.mit.edu -> .ee.mit.edu -> .rle.ee.mit.edu -> myhost.rle.ee.mit.edu). The real world doesn't look like that at all, which is why most people these days couldn't even tell you why there are dots in the URL and what purpose they were supposed to serve.

    I also know lots of schemes that rely on the present madness would be broken. Tant pis. Can't make an omelet without breaking eggs.

    1. Re:Well, DNS itself is a dumb 20th century idea by Deltaspectre · · Score: 1

      I don't know how you propose to solve this, but I host several sites on my home computer which has one IP, but serves different content depending on which domain name the user has accessed.

      --
      My UID is prime... is yours?
    2. Re:Well, DNS itself is a dumb 20th century idea by idontgno · · Score: 1

      That's not a very good technical objection. Almost any network-aware operating system can assign multiple "virtual" IP addresses to a single physical interface. If you change your network stack over to the "IP Name" scheme, it'd be no real difference.

      I'm not saying that direct name->machine mappings would be a good idea, only that it's technically feasible.

      I certainly wouldn't want to write the routing algorithms for non-hierarchical variable-length addressing schemes.

      --
      Welcome to the Panopticon. Used to be a prison, now it's your home.
    3. Re:Well, DNS itself is a dumb 20th century idea by _xeno_ · · Score: 1

      Slashdot is a site that receives international visitors. How would you propose we label Slashdot in your scheme?

      Likewise, if I talk about the Starbucks in Burlington, I know what I mean, but without some context you'll have no way of figuring out what I'm talking about.

      A quick Google search comes up with Starbucks in Burlingtons in Vermont, Ontario, North Carolina, Washington, and Massachusetts. Which one do I mean when I say "the Starbucks in Burlington?"

      Well, I mean the Starbucks in Burlington, Massachusetts. But here's the thing: there are two Starbucks in Burlington, Massachusetts. (More if you count Starbucks served inside of other stores.) Which one do I mean? Well, for this example, I mean the one on Mall Road.

      So I can't just say "the Starbucks" because that is too vague. I can't just say "the Starbucks in Burlington" because that's too vague. I have to exactly specify it, down to a street. People aren't going to want to have to do that just to link to places like CNN or aren't going to think that there might be a different, "closer" CNN in some parts of the world.

      A real-world example could be the difference between Nissan Computer and Nissan Motor. Currently Nissan Computer has nissan.com, but under your scheme if I said "Nissan" based on my location (Massachusetts) it'd be obvious I meant Nissan Motor because Nissan Computer are further away than the nearest Nissan dealer.

      How would I explicitly point to Nissan Computer in your scheme? By specifying an exact location?

      Back to the Slashdot example. Where is Slashdot? I guess it's in the United States. So I could address it as "Slashdot US" in your scheme. But what if someone sets up a Slashdot Massachusetts? I don't want that Slashdot, I want the original. I guess that's in Michigan. But the servers are in California, aren't they?

      Your scheme fails because it doesn't allow an exactly specified address, it instead works solely for discovering locations. So instead of remembering Slashdot's new fully qualified domain in your scheme, I could just search Google for it. Something I can do already.

      Ultimately, though, it doesn't solve the problem. At some point you still need a registrar to assign names for whatever your smallest geographic region is.

      --
      You are in a maze of twisty little relative jumps, all alike.
    4. Re:Well, DNS itself is a dumb 20th century idea by halcyon1234 · · Score: 1
      We have layers of routing in networking to allow for easy modification of the system as a part without changing the system as a whole.

      If you combined Layers 3 and 2 together, then it would be responsible for naming and routing. When you entered a name, the part of the system that takes in the name also has to know how to route it. If you change the routing protocol, you also have to completely redo your naming protocol. Right now, the naming protocol just discovers a place, and lets a specialist figure out how to get to that place. The routing doesn't care about the naming, and vice versa.

      And for the record, the real world DOES work like the dots in an URL. They refer to subdomains-- places within places. So, in your example, a human knows the difference between Joe's Books in Georgia and Joe's Books in London BECAUSE of those dots. The thought process of "Am I in England or in Georgia?" is solved by observing the dots. It's Joe's Books, Goergia. Or Joe's Books, London.

      An URL couldn't (or shouldn't) work like this, because URL's aren't geographically defined. In this example, you'd force someone to come up with a Georgia subdomain of .US. And any business in Georgia would have to register as JoeBooks.Georgia.US. What if there's more than one location? What if it's an international company? What if the bookstore is in Georgia, but thier shipping plant is in New York? How far down should the URL drill? JoeBooks.Downtown.Westpoint.MeriweatherCounty.Georgia.UnitedStates.NorthAmerica.NorthenHemisphere.Earth.SolSystem.Milkyway.Universe ? What if JoeBooks moves to Toronto? Do they need an entire new domain?

      Computers don't work the way people think, because they're computers. Computers and humans speak two entirely different languages, and it's up the the programmers and engineers to come up with the interfaces that will best translate between them. URL is one such interface. It isn't perfect, but it's damn near the best we can do.

    5. Re:Well, DNS itself is a dumb 20th century idea by belmolis · · Score: 1

      Until I read through it, I thought that you were going to propose that we just use numerical IP adresses. That's the /. solution. It has the virtue of keeping the riff-raff from clogging the pipes.

  34. Who needs front running... by xENoLocO · · Score: 1

    .. when you have stuff like this going on...

    http://www.mentallyretired.com/2007/09/17/fraud-in-the-domain-name-market/

    I wanted a domain name after it expires in half a year and they're ALREADY MAKING ME BID FOR IT. Keep in mind, this is the REGISTRAR, not the current domain owner.

    --
    "The need to build the internet comes from something inside us, something programmed... something we can't resist."
  35. I think this happened to me, but with a twist.. by Unmanifest · · Score: 4, Interesting
    I was going to buy Squandered.org, .com, .net to release some original music and essays. Squandered.org was to be the band name, with the .org in the name to emphasize the "new media" thing.

    So I checked via godaddy.com, and it was available, but I didn't purchase it because my checking account was overdrawn. A while later(2 weeks to a month), I went to buy it, and it was taken. Whois said it was taken shortly after my availability check, by a company in Maine. It was cash-parked at Network Solutions.

    Anyway, a few months later(the dates are vague, I didn't mark my calender) I checked it to see what the people from Maine were doing with the title of my life's work. It was still just cash-parked at Network Solutions. So I checked WHOIS again, to refresh my memory about the name of the company, and it was now owned by an individual in Maryland instead of a company in Maine, but here's the scariest part: the registration date had *magically* moved backwards to 2005!

    I had personal reasons to remember very specifically that the location of the owner was in Maine. I didn't remember the company name, but I definitely remembered that the date of registration was just after I had checked it.

    And it's still just cash-parked. When it first happened, because of "Maine" and some personal events, I suspected a certain person I knew from certain forums had taken it for basically spiteful reasons. But when the date was altered, I was mystified and paranoid. "Why would the CIA and time-traveling lizard-people from Sirius conspire to keep me from doing my little project under that name?" Now, I'm relieved to find a more plausible explanation. A scammer or scammers with access to official registration data. Makes sense, I also own several other domains, so I might pop up as a high-probability purchaser. But I never contacted the owner, and in the intervening time I've reworked things to release soon under another name that I've owned for years.

    I did, however, pop off an email to ICANN detailing the events.

    Let me reiterate what's been said by others on this thread: don't check a domain unless you're ready to purchase it immediately.

    1. Re:I think this happened to me, but with a twist.. by Vitriol+Angst · · Score: 1

      Happened to me.

      I was going to buy "MadScientistsMedia.com"
      Ended up going to a Radio Station a few weeks later, now it's some guy doing music.

      As research for a company a few years back, I searched through about 500 names. Because I was using two-word combinations, I found a lot that were not taken -- about half.
      The company was not interested in the names -- but a couple weeks later I checked and about half of the ones I found free were taken. URLs like www.startpoint.com -- which I thought was very good, because I was making a play on the Windows START button. Most of them ended up going to companies that sell you web names for their weight in gold.

      I'm pretty darn sure that the Squaters were hooked in with the companies that search for available web names. I'm sure that MOST URLs are owned by squaters -- having a sole business model of scalping names is an afront to our web creativity.

      But, overall, the MOST important thing for a website is good content. You can have any crap name, and as long as someone can remember it and have a reason to go there -- they will go there.

      --
      >>"ad space available -- low rates!!!"
  36. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  37. Re:Couldn't one start "poisioning" the hit databas by lena_10326 · · Score: 1

    Poisoning with dictionary domains would have more potential to mess with them...

    --
    Camping on quad since 1996.
  38. GoDaddy's doing it by guruevi · · Score: 1

    GoDaddy's doing it for sure. Several domains that I have probed with their service that are currently not available anymore:

    http://guruevi.com/
    http://pcman.com/
    my last name ...

    --
    Custom electronics and digital signage for your business: www.evcircuits.com
    1. Re:GoDaddy's doing it by Anonymous Coward · · Score: 0

      Agreed. Similar experience - checked a domain with GoDaddy, went back to register it two or three days later and some outfit called Belgium Domains (out of the US, per WhoIs) or some such had it. Am currently lurking to pounce if they drop it. Pouncing will NOT involve GoDaddy.

      Sooner or later the domain tasters will own the net. All it costs them is whatever program or army of ants they need to keep repeating their registrations every 5 days.

    2. Re:GoDaddy's doing it by bladel · · Score: 1

      GoDaddy.com most assuredly does not do this.

      --


      Information wants to be Free. Useful Information will cost you.
  39. I can sympathize by Anonymous Coward · · Score: 2, Insightful

    A good friend of mine had a very successful website with 300,000+ users that made him over $100,000/year. The domain had been registered using some free email account that he stopped using. Eventually the email address was reclaimed and made available again and some guy registered it and hijacked his domain. It took him over a year and a half plus thousands of dollars in legal fees to finally get his domain back. By that time the domain was worthless because all of his customers had gotten fed up with the service outage and left. About the only thing going for it now is a Google pagerank of 7. He's also looking for a job.

    The moral of the story is to keep tabs on your email addresses.

  40. Google it first by Darth+Cider · · Score: 1

    Before doing anything, google xyz.com to see if it is active. Doing searches that ping the site, or that go through a registrar, or that alert anyone at all to interest in xyz.com can be a costly mistake. (I learned this lesson after seeing domains snatched after searches through reputable registrars.)

  41. Yikes by Dannon · · Score: 1

    The fortune at the bottom of the page reads:
    You will gain money by a speculation or lottery

    Well, someone is, at least....

    --
    Good judgment comes from experience.
    Experience comes from bad judgment.
  42. Re:Couldn't one start "poisioning" the hit databas by Mysticalfruit · · Score: 1

    Here you go... This program when run will create X number of random domains and then do DNS queries against them. Thus poisoning the hit database. Note: I'm sure any real programmer will look at this code and cringe...

    #!/usr/bin/perl

    use strict;
    use Net::DNS::Packet;
    use Net::DNS::RR;

    my @silly_list = ('sex','linux','monkey','pants','lucky','duck','cow',
            'chicken','clown','w2k3','fart','junk','monk','towel','hyper','viper',
            'amp','station','depot','diaper','super','leet','wicked','help','soft',
            'ware','micro','dyne');

    my @tld_domains = ('.com','.edu','.org','.net');

    my $domain;
    my $num = $ARGV[0]; # Number of junk domains to create.
    my $res = Net::DNS::Resolver->new;
    for(;$num >= 0; $num--)
    {
            $domain = return_domain(@silly_list);
            $domain .= $tld_domains[rand(4)];
            print "Checking: $domain\n";
            lookup_domain($res,$domain);
    }

    sub return_domain
    {
            my (@list) = @_;
            my $count = @list;
            my $dom_length = int(rand($count)/4)+2;
            my $domain_name;
            for(;$dom_length > 0;$dom_length--)
            {
            $domain_name .= $list[rand($count)];
            }
    # print "domain = $domain_name\n";
            return 'www.' . $domain_name;
    }

    sub lookup_domain
    {
            my ($resolver,$domain_name) = @_;
            my $packet = $resolver->send($domain_name);
            my @answer = $packet->answer;
            my $ans_count = @answer;
            my $item;
            if($ans_count > 0)
            {
            foreach $item (@answer)
            {
                    print $item->name . " " . $item->address . "\n";
            }
            }else{
            print "Not a valid site!\n";
            }
    }

    --
    Yes Francis, the world has gone crazy.
  43. Nothing new by MoonRabbit · · Score: 1

    About six years ago, I wanted a domain that was listed as a "pending delete." The domain had expired 2 years previously and had passed any grace period. In order to get in on the "waiting list" I had to send the controlling registrar (dotregistrar) $60 for nonrefundable "shares" to become a "member." I was first on the waiting list for three years when they informed me that my shares were about to "expire," and since three years had elapsed and the domain was still a pending delete, I opted to spend my remaining $15 on another domain rather than lose it. I was convinced of the scam at that point and was not going to give them any more money. The day after I quit paying to be first on the waiting list, the domain was suddenly registered to a domain squatter. Still is, except now it's "for sale." I complained to ICANN about this, but I might as well have sent my congressman a letter complaining about gas prices. The real killer is that I wanted the domain for a nonprofit I was working with at the time.

    1. Re:Nothing new by trolltalk.com · · Score: 1

      You were defrauded. You should have just waited until the 30-day redemption period was over and you could have just registered it with any other registrar. How do you think I got trolltalk.com?

      http://www.cyberindian.com/domain-registration/article.php?article_id=185

      1. 30 day "redemption" period
      2. 5 day "pending deletion" period
      There's no such thing as "a waiting list". Ask for your money back.
    2. Re:Nothing new by MoonRabbit · · Score: 1

      It's called "registrar lock" and it basically allows a registrar to hold on to a domain name as long as they want to until they "find the time to delete it." By "find the time to delete it" I mean "slip it to a business partner under the table", and by "waiting list" I mean "backorder." """""""""""".

    3. Re:Nothing new by rs79 · · Score: 1

      This was 6 years ago and todays rules don't apply.

      I've seen names that should have been deleted and wern't. These are called "mistakes".

      If you have an adequate paper trail you can talk to ICANN's hear lawyer and get them to reverse this. They HAVE to follow the rules.

      I got NSI to do this in the pre-icann era. I sent in a template to reg a domain and somebody else got it with a later timestamp. I pointed this out and they told the other guy "sorry, we screwed up" and I got my (clients) domain.

      This was before ICANN "regulated" the process to the level of fairness it's at now of course.

      --
      Need Mercedes parts ?
  44. Re:ICANN should forbid registrars from owning doma by Blakey+Rat · · Score: 1

    NetworkSolutions has now changed their name! They're now known as http://205.178.187.13/ ! Watch for our new ad campaign during the Super Bowl.

  45. Domain Name Front Running by HTH+NE1 · · Score: 1

    ICANN has opened an investigation into a suspected practice by registrars it calls "domain name front running." I prefer "squatspecting" myself, as it is the cybersquatting upon others' domain prospecting, possibly to ransom the domain to the person who intended to register it.

    There was a .com domain I wanted, but it is currently held by a law firm with named partners sharing the same initials, and they could easily hold onto it indefinitely even if there's a change in partnership to maintain communication with former clients of the old firm. When I finally decided to get the .tv version which had been free, it too was taken.

    I now keep my ideas to myself until I'm sure I want to run with them. Though I fear these people may grab it even within the few minutes it will take me to search and register.
    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
  46. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  47. No news here.. by sw155kn1f3 · · Score: 1

    I suspected this for years, when circa 2003 I ran whois query/dns searches on short and very meaningful domain in .com, just perfect to suit my needs, which was registered 1 week later! Guess wh was the registrar? Some squatter.
    After that I just go and register domain in 1 transaction - using registration form as whois/dns lookup and then immediately check out.
    From 2003 I registered 4 domains and this rule worked pretty well.
    Also I have one story when one not so expensive registrar just snatched domain from legitimate user. This is scary stuff. All registration are electronic, which means you even don't have a paper about domain is yours.
    I guess all we can do is to bring as much attention to these cases as possible.

    --
    - Arwen, I'm your father, Agent Smith.
    - Well, you're just Smith, but my father is Aerosmith!
  48. Re:Couldn't one start "poisioning" the hit databas by needacoolnickname · · Score: 1

    Why did you have to add monkey to that list? I have a legit domain with monkey in the name.

    Please don't shame the monkey.

  49. Dog Bites Registrant by lseltzer · · Score: 1

    This is old news. I wrote about it last July for eWEEK.

    It definitely happens but it's in small enough quantity that I think it's being done with targeted compromises of servers involved with domain lookups at hosting services and the like. Either that or someone is selling the lookup data.

  50. Took Them Long Enough by Nom+du+Keyboard · · Score: 1

    Took them long enough to figure this one out. I've recall hearing that this has been going on for 10 years at least! And since you can snatch a domain name and hold it for a few days before returning it for a refund, it doesn't even cost these crooks money to pull off this scam!

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  51. Re:ICANN needs to put registrars out of speculatio by CodeBuster · · Score: 1

    So ICANN has the authority to insist that registrars get out of the domain speculation business. They don't have to ask the registrars; they can simply order it.

    This is too easy for the registrars to get around. The unscrupulous registrars could develop their own secret network of shell companies, shills, and spammers to register hits from searches on the registrar's site and then split the profits when the registrar buys the domain back from their network of proxies to sell back to the customer. It would be difficult to prove that the proxies who are buying up the domains are directly connected to the registrar.

    The problem is that these "registrars" as you say are not vetted properly by ICANN and so blatant violation of the rules goes on behind the scenes without their being any direct consequences for the "registrars". The whole system set up by ICANN was just begging to be taken advantage of, but then again it was probably set up by nice people who don't generally think like the con artists and shady businessmen do (the ones who believe that rules are made to be broken and only honest people pay taxes).

  52. Re:Couldn't one start "poisioning" the hit databas by Mysticalfruit · · Score: 1

    I fixed my glitch...

    Replace the static @silly_list with this...

    my @silly_list = get_dictionary('/usr/share/dict/linux.words');

    Make sure to alter the line "my $dom_length = int(rand($count)/4)+2;" and make it "my $dom_length = 5"; or something suitable, otherwise you'll end up with domain names that are impossibly long.

    The get_dictionary function looks like this:

    sub get_dictionary
    {
            my ($dist_file) = @_;
            open(FP,"< $dist_file") or die "Unable to open file $dist_file ($!)\n";
            print "Reading in Dictonary...";
            my @list = <FP>;
            chomp(@list);
            print "done!\n";
            return @list;
    }

    --
    Yes Francis, the world has gone crazy.
  53. whois bomb em. by joeldg · · Score: 1

    just start some automated mass-whois-lookup's and drown out the real ones in the garbage..

    that would solve the problem

  54. strategy by swell · · Score: 1


    It can be so frustrating to find that special name only to discover that someone already used it. To have it stolen right out from under you, however, is infuriating.

    It's been a few years since I registered my domains. I seem to recall a similar paranoia about checking availability. Not just registrars, but search engines are capable of clever stuff.

    If you search Google for a five letter word and it finds nothing, do you suppose they ignore that? I assume that they log it in a special file for review by a human. A unique 5 letter word (assuming it's pronounceable) is worth its weight in gold! (alas, 5 letter words don't weigh much)

    So I tried various ways to avoid attracting attention to my precious creations. I honestly don't remember them now, so you are wasting your time reading this ... But wait, maybe I can come up with a tip or two off the top of my head.

    1 Don't use a major search engine to look for your name. Maybe Scroogle.org would be safer (I doubt it- doesn't it just link to Google? Please offer alternatives).

    2 Don't type the name into the browser toolbar.

    3 Don't use a registrar to search until you are ready to buy right now.

    4 Don't call your best friend and ask if the name sounds OK.

    5 Disguise your name. If it is 'xyz', try xyz's or 'the xyz' or xy'z... Some of these might throw off any evildoers while giving you useful information.

    Your suggestions?

    --
    ...omphaloskepsis often...
  55. Re:ICANN needs to put registrars out of speculatio by The+Raven · · Score: 1

    These phony registrars pay ICANN fees. Lots of fees. BIG fees. $5000 a year if I recall correctly. Amazingly, ICANN does not see a conflict of interest between their desire to take fees, and their purported mission to control the behavior of registrars.

    --
    "I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
  56. I found the company that front-ran me,,,, by killmofasta · · Score: 1

    This is the company who front-ran me:
    http://srsplus.com/en-def-417bf0e62ada/en/srsplus/about_srsplus.shtml

    I typed in a domain to search, next day it was registered.
    Now its owned by someone in Oregon(lisalisalisa), and managed by a bogus
    domain name called 'mws.net'

    This is SCARY, apparently there is a 'domaintools.com' website with all kind of nifty 'were tracking your Domain interest' type of tools. If you want to find out how unscrupulus DNS or who is providers try seeking out 'BMUG.COM' I used to volunteer at 'bmug.org' and listened to the sheer number of problems they had with 'BMUG.COM' ( now, I think owned by tucows.com ).

    " The domain name www.bmug.com is for sale Prices in the region of US$4625" ( this from Get On The Web Limited ) It gets better...much better "Get On The Web Limited registered for its own websites, portals and client projects a number of generic domain names (including this one) some years ago, "

    Hmmm since BMUG.ORG is about 23 years old...it would have this statemake a COMPLETE AND TOTAL LIE:
    "Get On The Web Limited does not knowingly register and/or offer for sale domain names which are registered trade marks."

    http://www.dnjournal.com/domainsales.htm 'By Ron Jackson'
    "The AfternicDLS targets small and medium sized businesses, selling the majority of their domains in the four-figure range, but despite that tight focus every now and then they reel in a whale."

    http://www.afternicdls.com/ The aftermarket trading in your domain names.
    with bmug.net Bid: 700 Ask:972 No Reserve Bid Now!!!
    We dont need no stenkin trademarks...

    The domain name industry is where all those used car salesmen ended up.

  57. Borington, Ontario by rs79 · · Score: 1

    " A quick Google search comes up with Starbucks in Burlingtons in Vermont, Ontario, North Carolina, Washington, and Massachusetts. Which one do I mean when I say "the Starbucks in Burlington?"

    Well, I mean the Starbucks in Burlington, Massachusetts. But here's the thing: there are two Starbucks in Burlington, Massachusetts. (More if you count Starbucks served inside of other stores.) Which one do I mean? Well, for this example, I mean the one on Mall Road.
    "

    The starbucks in Burlington Ontario is a drive thru. Woo hoo!

    Um, there's more than one Starbucks in Burlington Ontario though. There's at elast 3 I can think of and I haven't lived there in 25 years.

    God it was Boring.

    --
    Need Mercedes parts ?
  58. Re:ICANN needs to put registrars out of speculatio by rs79 · · Score: 1

    Get rid of speculators? Hahahahaha. Who do think participates in ICANN meetings?

    You've never been to one, have you?

    --
    Need Mercedes parts ?
  59. Re:Couldn't one start "poisioning" the hit databas by Mysticalfruit · · Score: 1

    I just realized I don't have a close(FP) at the end of that function... doh!

    --
    Yes Francis, the world has gone crazy.
  60. Oh, sweet irony by rs79 · · Score: 1

    Netsol? I've heard of them. They sound good.

    I actually need to register a domain at this very moment and right now netsols website just plain flat out doesn't work. It's been this way from about 9:30 - 10:30 est.

    Oy.

    --
    Need Mercedes parts ?
    1. Re:Oh, sweet irony by rs79 · · Score: 1

      I watched a movie and while I was doing that the gnomes of Zurich seems to have fixed NSI's website. It woiks now.

      I'm sorta impressed there's poeple at NSI fixing this stuff at midnight. I've never seen other registrars fix stuff at night especially without even filing a trouble ticket.

      --
      Need Mercedes parts ?
  61. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  62. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion