Slashdot Mirror

← Back to Stories (view on slashdot.org)

Comcast Briefly Loses Control of Its Domain Name

Posted by kdawson on from the old-skool-pwned dept.

Fallen Andy notes that Comcast, one of the largest US ISPs, lost control of its domain name to what appeared to be juvenile social engineers of the old school — i.e. not in it for the money. The intruders got into Comcast's registrar account at Network Solutions and repointed the domain's DNS records. A blog entry at SANS points out how trivially easy this can be. Reader ElvenKnight points out an insightful interview up at Wired with the two young guys who perpetrated the hack.

6 of 222 comments (clear)

  1. The consequences might not be as fun by Rosco+P.+Coltrane · · Score: 5, Insightful

    the two kids who perpetrated the hack

    How much do you bet the feds will come down hard on the kids and charge then with felony, cyber-"terrorism" or some other preposterous computer crime? I used to do harmless hacks for fun in years past, but these days it's not really wise.

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:The consequences might not be as fun by Scutter · · Score: 5, Insightful

      How much do you bet the feds will come down hard on the kids and charge then with felony, cyber-"terrorism" or some other preposterous computer crime? I used to do harmless hacks for fun in years past, but these days it's not really wise.

      That was hardly a "harmless hack". There is a lot of money tied to that domain and when it's down, it's a serious problem for a lot of people. That said, I agree that charging them as cyber-terrorists would be severe overkill.

      --

      "Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
    2. Re:The consequences might not be as fun by parcel · · Score: 5, Insightful

      It was a terrorist attack intended to disrupt a major part of the infrastructure, period. Methinks you have an overly broad definition of "terrorist attack". One really ought not to put "couldn't check e-mail for 3 hours in the middle of the night" in the same category as the willful destruction of human life.
    3. Re:The consequences might not be as fun by AioKits · · Score: 5, Insightful

      These days everything is a terrorist attack...Cause you know, I guess it's better to live in uninformed fear than to point out something foolish, cause the later would be unpatriotic and something terrorists do! >.>

      --
      "Quote me as saying I was mis-quoted." -Groucho Marx
    4. Re:The consequences might not be as fun by Hoi+Polloi · · Score: 5, Insightful

      Since when did vandalism and theft become terrorism? The definition of terrorism has become so wide and vauge that anything that affects a group of people gets the terrorism lable slapped on it. It is like how the definitions of addiction or sex crime have become catch-all nets. Terrorism is a violent act intended to cause intimidation to achieve a goal. These kids just wanted to show off and feel powerful. I have no sympathy for them or their obnoxious, selfrightious attitudes but they aren't terrorists.

      --
      It is by the juice of the coffee bean that thoughts acquire speed, the teeth acquire stains. The stains become a warning
    5. Re:The consequences might not be as fun by Anonymous Coward · · Score: 5, Insightful

      How do you know it wasn't a couple of punk kids just screwing around and not realizing what they were getting themselves into?

      These kids used social engineering to deliberately steal the domain name of one of the largest ISPs in the nation. This isn't equivalent to a kid stumbling across a XSS or SQL injection attack in some web app.

      The government and Comcast can come down hard on these kids - but that's not justice, what it is is covering their asses.

      We base our economy upon something this fragile, and then when someone points it out we come down on them really hard.

      Imagine if a real attack takes place?

      They should thank the kids, ask them not to do it again, and takes steps to prevent it from happening again.

      But will that happen - don't make me laugh.

      It's like the rest of the U.S. phoney as can be when it comes to real domestic security.