Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Takes Down No-IP.com Domains

Posted by Unknown on from the slash-and-burn dept.

An anonymous reader writes For some reason that escapes me, a Judge has granted Microsoft permission to hijack NoIP's DNS. This is necessary according to Microsoft to thwart a "global cybercrime epidemic" being perpetrated by infected machines running Microsoft software. No-IP is a provider of dynamic DNS services (among other things). Many legitimate users were affected by the takedown: "This morning, Microsoft served a federal court order and seized 22 of our most commonly used domains because they claimed that some of the subdomains have been abused by creators of malware. We were very surprised by this. We have a long history of proactively working with other companies when cases of alleged malicious activity have been reported to us. Unfortunately, Microsoft never contacted us or asked us to block any subdomains, even though we have an open line of communication with Microsoft corporate executives. ... We have been in contact with Microsoft today. They claim that their intent is to only filter out the known bad hostnames in each seized domain, while continuing to allow the good hostnames to resolve. However, this is not happening."

73 of 495 comments (clear)

  1. Sue them for all they're worth by Anonymous Coward · · Score: 5, Interesting

    This is their business the court decided to hand over to Microsoft. Lawsuits should be flying in all directions.

    1. Re:Sue them for all they're worth by DrJimbo · · Score: 3, Informative

      Lawsuits should be flying in all directions.

      Are you suggesting they sue the court? Good luck with that. ISTM the fundamental problem is that the US courts have become the corporations bitches. Who are you going to sue and where are you going to sue them?

      The book Econned explains how people with a far right economic agenda have been stacking the US courts for years. The result is what you see, basically a feudal systems where corporations are treated like lords and everyone else is a serf.

      --
      We don't see the world as it is, we see it as we are.
      -- Anais Nin
    2. Re:Sue them for all they're worth by Anonymous Coward · · Score: 4, Insightful

      Microsoft has way more money than whichever company that owns No-ip does. They can't sue and win. Microsoft wouldn't even need to bribe the judge, they can just use scorched earth tactics and let the lawyers suck more and more money until No-ip is dry.
      Also, apparently No-ip didn't appear when summoned. Apparently, that's kinda of a big no-no. Maybe next time they will buy their domains somewhere with proper laws.

    3. Re:Sue them for all they're worth by man_ls · · Score: 2

      Since I'm replying to an AC post I don't feel a need to include citations, but there's been at least one case where the domains in question were purchased through registrars and registered to owners both outside the United States but because the domains themselves were .com domains and Verizon is the ultimate authority for .com domains, the U.S. simply ordered Verizon to update the global master registry to reflect the seizure and there was nothing to be done about it.

      They'd have to use a non-U.S. TLD as well.

    4. Re:Sue them for all they're worth by compro01 · · Score: 2

      That's Verisign, not Verizon.

      Though not all the domains in question were .com and .net. For example, no-ip.biz appears to be out and that TLD is run by Neustar, though they're also a US corp.

      --
      upon the advice of my lawyer, i have no sig at this time
    5. Re:Sue them for all they're worth by Sun · · Score: 5, Interesting

      Also, apparently No-ip didn't appear when summoned. Apparently, that's kinda of a big no-no. Maybe next time they will buy their domains somewhere with proper laws.

      IANAL. All of this is from following legal procedures.

      Not showing up is a big no-no. A judge can, usually, assume that the party not showing up has nothing to say in the matter, and just accept the petition as is. This is, however, not what happened here. From the first link:

      On June 19, Microsoft filed for an ex parte temporary restraining order (TRO) from the U.S. District Court for Nevada against No-IP.

      Emphasis mine.

      An Ex-Parte petition is filed without the other side being given a chance to answer. This is outrageous act by Microsoft. You ask for an ex-part hearing when there is danger that the other side, if given prior warning of your requested subpoena, will destroy evidence. Since Microsoft is claiming that no-ip are unknowingly hosting malware, this simply wrong.

      Before you go to blame the judge, however, please bear in mind that he can only rule based on the petitions before him. Presumably, a two-party hearing will be held soon, and then things can, and should, go differently. Also, the judge should have ordered Microsoft to place some money in escrow, which no-ip will automatically get in case the temporary restraining order is found to be unjustified.

      What I'm saying is that we don't have enough information so far to conclude that the judge did anything wrong, but the first link, written by Microsoft, clearly shows MS to be douche bags in this case.

      Shachar

    6. Re:Sue them for all they're worth by Anonymous Coward · · Score: 4, Insightful

      Sorry, I do blame the judge. He caused major harm and he should have known he would. I also blame the US justice system, because obvious, easily avoidable injustice is a perfectly acceptable outcome in it as long as just all the is were dotted. We all know that making sure things are done by the rules is the real purpose of the courts!
      Honestly, stop making up excuses for your legal system, no it is not acceptable for it to not only allow but actively encourage injustice like yours does, all the time!

    7. Re:Sue them for all they're worth by Shakrai · · Score: 5, Informative

      Not showing up should not result in a suspension of justice and free reign to dispense outrageous judgements.

      Uhh, that's exactly what happens. It's called a default judgment. What exactly do you think the court should do if a party fails to appear in a civil case?

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    8. Re:Sue them for all they're worth by Rich0 · · Score: 4, Insightful

      Not showing up should not result in a suspension of justice and free reign to dispense outrageous judgements.

      Uhh, that's exactly what happens. It's called a default judgment. What exactly do you think the court should do if a party fails to appear in a civil case?

      The court should consider the validity of the arguments against them and the facts of the case.

      The problem with the US court system is that it is basically like a game show. There are a set of rules and two competitors, and the judge is the referee. If you have a game of jeopardy and only one contestant shows up, they should naturally win. The problem is that this is rarely a just outcome.

      Add to this the fact that courts rarely allow parties to participate remotely. If you're summoned to court you have to show up in person. If you aren't paid to be there, then you probably aren't being paid that day. If the court is on the other side of the country you get to choose between a default judgment, hiring a lawyer to represent you there, or airfare and hotel for a one day appearance.

      Courts really need to be about determining the facts and applying the law, not letting the parties slug it out and declare a winner. If only one party shows up, then the judge can question the other party to determine the facts and apply the law.

    9. Re:Sue them for all they're worth by GodGell · · Score: 2

      Microsoft has way more money than whichever company that owns No-ip does. They can't sue and win.

      That sentence, combined with the lack of sarcasm or indignation in its presentation, would paint a pretty dystopic picture of any kind of fictional society a paranoid author would want to write about.

      I wish this society remained fictional, and I wish I didn't have to live on the same planet.

      --
      [SHOW SOME LENIENCY TOWARDS ... I mean, FUCK BETA] Eat. Survive. Reproduce. GOTO 10
    10. Re:Sue them for all they're worth by Rich0 · · Score: 3, Insightful

      The problem is that we substitute "due process" for justice and define due process as whatever the rules of the court says that it is. Are court rules even legislated?

      Ex parte petitions should only be used in the most extreme of circumstances and there should be a high burden of proof before a court grants them.

      Also, even default judgments should work far differently. The court should examine the evidence itself to determine that there is a reasonable chance of prevailing. I'm not saying that the threshold has to be the same as for a summary judgment, but there should still be an examination of the evidence and arguments, and the judge should be skeptical of any evidence submitted. Ideally the court should just appoint an attorney for the side that didn't show up.

      Also, in a country as large as the US we really need to get rid of this system that assumes that both parties will appear in person for everything. It is already a burden to show up to a local court. If you're summoned to a court on the other side of the country that is a huge expense, especially since it might just be for an hour long hearing. There is no reason that hearings couldn't be conducted via phone in many cases. Another option would be to have telepresence rooms at all courthouses so that you'd only have to show up at a local court. Heck, you could probably fit 5x as many courtrooms in a courthouse if instead of a big room you just had a bunch of individual boxes with a desk, a few chairs, and a screen/camera and the court linked the appropriate boxes together to create a courtroom, even if everybody was at the same facility. Also, for popular cases you could have as many people in the "gallery" as you have bandwidth to serve.

    11. Re:Sue them for all they're worth by Sun · · Score: 2, Insightful

      Ex parte petitions should only be used in the most extreme of circumstances and there should be a high burden of proof before a court grants them.

      Again, IANAL.

      Still, how can you have a high burden of proof? In an adverserial system, the only things you can prove need two opposing parties to present their case. As such, an ex-parte request does not contain proof at all (how can it?)

      Instead, it contains claims backed by sworn testimony. The judge examines these claims in the light most favorable to the non-present party, but otherwise within the context of the claims presented by the moving party.

      In other words, you cannot second guess the judge's decision without looking at what MS actually wrote in its TRO request. If (as likely happened) MS wrote that no-ip do not remove the offending domains, and that these domains are used on a daily basis to cause huge harm, then a reasonable judge (who, I might remind you, is not technically savvy, and may not realize the implications of granting this order are disrupting no-ip's business) might conclude that granting this Temporary Restraining Order is reasonable.

      So, once again, I think MS were acting like douches. I have no idea whether the judge acted reasonably, and cannot know without looking at MS's petition.

      Shachar

    12. Re:Sue them for all they're worth by nctritech · · Score: 3

      Ex parte petitions are how the Business Software Alliance (BSA) gets the local sheriff deputies and police to help them conduct jack-booted thug raids on businesses. I agree strongly: the standards for proof should be extremely high.

    13. Re:Sue them for all they're worth by AmiMoJo · · Score: 4, Insightful

      Hard to imagine how the money in escrow will undo the massive damage to no-ip's business. Everyone using the service is right this minute switching to alternatives, changing their DNS settings and updating their routers.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    14. Re:Sue them for all they're worth by Dishevel · · Score: 2

      To be fair. I think this country could use with a lot less legislation.

      --
      Why is it so hard to only have politicians for a few years, then have them go away?
    15. Re:Sue them for all they're worth by Ecuador · · Score: 5, Insightful

      The 93% sounds serious, but it just says that these specific infections choose No-IP.com, which is a very common dynDNS service. You can counter with the fact that 100% of the systems targeted by Bladabindi-Jenxcus infections are vulnerable due to Microsoft software.

      --
      Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    16. Re:Sue them for all they're worth by bill_mcgonigle · · Score: 2

      If NoIP doesn't drain Microsoft's reserves significantly for doing this, then they'll just do it again. It's important to speak to somebody in their native language whenever possible.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    17. Re:Sue them for all they're worth by jakimfett · · Score: 2
      Try reading a bit deeper. This from the TechNet article:

      On June 19, Microsoft filed for an ex parte temporary restraining order...

      ex parte : "a legal proceeding brought by one person in the absence of and without representation or notification of other parties."

      Translation: Microsoft *never notified* No-IP. There was no summons. There was no notification. There was no chance to file for a stay of judgement or make an appeal.

      --
      Bits of code, random ramblings: jakimfett.com
    18. Re:Sue them for all they're worth by cbiltcliffe · · Score: 2

      And:

      No-IP domains are used 93 percent of the time for Bladabindi-Jenxcus infections, which are the most prevalent among the 245 different types of malware currently exploiting No-IP domains.

      [Emphasis Mine]

      So, Microsoft is alleging that No-IP is assisting (presumably knowingly) in the distribution of malware and that 93% of No-IP's domains are vehicles for malware distribution. Is this true?

      I'm guessing that MS intentionally used vague wording for this, with the intent of misleading the judge, but without definitely being at fault for doing it. "No-IP domains are used 93 percent of the time" could mean either "93 percent of all No-IP domains are used for these infections," or it could mean "Out of all the domains used for these infections, 93% of them are No-IP domains." I'm willing to bet that the second is true, but the first is what MS wanted the judge to read into it, and of course, the 93% of malware No-IP domains could be only 0.01% of total No-IP domains.

      I'm also willing to bet that MS wanted to do this because of the fact that various Windows KMS servers are set up on No-IP.com hosts, allowing unofficial activation of volume licenced versions of Windows without paying MS a cent.

      If I'm right, I really hope the truth comes out in court, and Microsoft gets slapped, HARD, fined by the court, is required to issue a very loud public apology to No-IP, and give them a bundle of cash for damaging their business.

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    19. Re:Sue them for all they're worth by dnavid · · Score: 2

      If only one party shows up, then the judge can question the other party to determine the facts and apply the law.

      Not in the United States they can't. Judges are Constitutionally barred from introducing evidence in their own court, they are only allowed to decide cases based on the evidence presented to them. They cannot investigate matters on their own. You could argue that's nonsensical and contrary to finding the truth, but that prohibition was based on the reasonable assumption that judges cannot consistently remain impartial when they are basically finding their own facts. There are other court systems in other countries where judges are not required to remain neutral arbitrators, and can act more actively within their courts to ascertain the facts of the case. But they trade these issues for their own issues.

    20. Re:Sue them for all they're worth by Kalriath · · Score: 2

      Uh no, because Microsoft's security team don't give a shit about copyright infringement. That's another division's problem. I don't think you understand how big companies actually work. Hint: very dysfunctionally.

      Of course, you'd never believe that, because your vision is too clouded by your blind hatred of Microsoft.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    21. Re:Sue them for all they're worth by Sun · · Score: 2

      Its not the judges problem to collect any evidence but to judge based on written laws. NO-IP was a no show that's evidence enough for me and its law they can be ruled against. Honest people show up in court dishonest don't.

      They were not told of the hearing. How could they possibly show?

      Shachar

  2. Good judge by Rosco+P.+Coltrane · · Score: 5, Insightful

    The best money could buy.

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
  3. only an excerpt by JoeJohnson2175 · · Score: 2, Interesting

    If a judge granted permission, I have feeling that a domain name service provider may have been guilty of alerting their customers to legal intentions. Which gives credence to locking it down before a new sub-domain is created to deliver the same traffic. While I don't side based on a brief, I don't make adverse statements. I can only surmise.

  4. Re:WTF by Rosco+P.+Coltrane · · Score: 5, Insightful

    Does not seem legal.

    It's legal if the law says it is. And when the lawmakers are in bed with Big Business, like they are in the US, anything goes.

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
  5. There is just one domain that needs to be shutdown by brodock · · Score: 2, Insightful

    And it's microsoft.com, the creator and perpetrator of Internet Explorer and Windows, the two biggest malwares ever invented. They should be shutdown immediately. Thanks.

  6. Hotmail? by Anonymous Coward · · Score: 5, Interesting

    So after decades of the community putting Microsoft on notice that HotMail is abused by spammers, can I sieze the domain name?

    1. Re: Hotmail? by deroby · · Score: 2

      Well, those I use still work well...

      --
      If there is one thing to be learned on slashdot, it has to be sarcasm.
  7. net neutrality by ChadSmith4920 · · Score: 2

    In other news Microsoft has come out in support of preserving a free and open web

  8. Bad software justifies bad actions... by QuietLagoon · · Score: 4, Insightful
    Microsoft has pushed upon the world (literally, the world) software that has a history of security issues.

    .
    Now it appears that Microsoft is using their reputation for producing security-challenged software to badger companies for PR purposes. The headlines will all read, ~Microsoft takes down a company that is a security threat~. And Microsoft will look good in the headline.

    But what has Microsoft really accomplished? Will Microsoft's reputation for software with abysmal security be changed? Or will a small company be crushed because a huge company is trying to look good?

    1. Re:Bad software justifies bad actions... by sosume · · Score: 2, Insightful

      Because all other vendors produce flawless secure software? Dream on..

  9. Legal Precedent? by wisnoskij · · Score: 4, Interesting

    What is the legal precedent for taking ownership of a company's assets (without apparently even informing them beforehand) and randomly giving them to some other company to use? How is that even a legal possibility?

    --
    Troll is not a replacement for I disagree.
    1. Re:Legal Precedent? by Pinhedd · · Score: 5, Informative

      property used to engage in criminal activity is subject to seizure and/or forfeiture. Domains have been seized in the past due to criminal activity but this has usually accompanied a criminal complaint by a law enforcement agency.

      In this case, despite what the article may imply, Microsoft hasn't seized ownership of the domains. Rather, they used an ex parte temporary restraining order to seize control of the domains so that they may neutralize the source of the maliciousness. The ex-parte aspect is why no-ip wasn't notified. Microsoft managed to convince a judge to grant the order without informing the other party (most likely to prevent no-ip from notifying the malicious users). This will be followed up by a formal hearing, and full control of the domains will be restored to no-ip eventually.

      If Microsoft abuses this, judges won't be so inclined to grant such requests in the future.

    2. Re:Legal Precedent? by Anonymous Coward · · Score: 2, Interesting

      No, they seized control of the entire business -- the top-level domains, the second-level domains engaging in criminal activity, and all of the second-level domains who were not engaging in criminal activity. The right way to do this is to get a court order to seize the infringing addresses and leave the millions of customers who did nothing wrong alone. This is like the FBI seizing an entire rack or datacenter from AWS because someone served child pornography from a t1.micro instance, and then letting the accusing party respond in any way they want to all of the non-criminal traffic for the next six weeks. The collateral damage is completely unacceptable.

    3. Re:Legal Precedent? by Pinhedd · · Score: 2

      Second level domains are controlled through top level domains. Do you know nothing about DNS?

    4. Re:Legal Precedent? by lister+king+of+smeg · · Score: 5, Informative

      property used to engage in criminal activity is subject to seizure and/or forfeiture. Domains have been seized in the past due to criminal activity but this has usually accompanied a criminal complaint by a law enforcement agency.

      In this case, despite what the article may imply, Microsoft hasn't seized ownership of the domains. Rather, they used an ex parte temporary restraining order to seize control of the domains so that they may neutralize the source of the maliciousness. The ex-parte aspect is why no-ip wasn't notified. Microsoft managed to convince a judge to grant the order without informing the other party (most likely to prevent no-ip from notifying the malicious users). This will be followed up by a formal hearing, and full control of the domains will be restored to no-ip eventually.

      If Microsoft abuses this, judges won't be so inclined to grant such requests in the future.

      Most people I know that use no-ip are people setting up their own minecraft servers its not a hotbed of criminal activivty like MS claims. I use it for my ssh server/freeciv/cloud storage/retroshare and it has been inaccessibly today thanks to microsofts fuckery. claiming that they are a tool of criminal activity is like saying that the internet is a tool of criminal acivity because criminals use it, which is to say anything may be taken away and given to another with this same logic.
      I wonder seeings as Microsoft has fucked with my servers traffic today thanks to this could I go after in court them for maliciously hijacking my sub domain and traffic and have their DNS entries redirect to me with no warning to microsoft.

      --
      ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
    5. Re:Legal Precedent? by lindseyp · · Score: 4, Informative

      I'm one of those Minecraft servers. Goddammit I ony found out why this was happening thanks to slashdot.

      I know my own IP, but none of my users do.

      --
      j'ai découvert une démonstration vraiment admirable (de ce théorème général) que cette si
    6. Re:Legal Precedent? by Pinhedd · · Score: 2

      I'm sure that you're absolutely correct about that. The vast majority of no-ip's customers are using the service legitimately, I'm certain of this. However, no-ip has certain legal responsibilities as a service provider and if they don't meet them their legitimate customers may end up getting caught in the crossfire.

      For the record, I'm not taking a side as I have no idea what evidence Microsoft presented to get the ruling. I'm just pointing out the legal basis for what occurred.

    7. Re:Legal Precedent? by rtb61 · · Score: 2

      Still wildly inappropriate for M$ to be doing this. You could argue that the FBI could do this and even contract to M$ to do it under FBI supervision but no way should M$ have been given carte blache vigilante powers.

      It should have all been laid out. What access was allowed. What end user data was gathered. What is to be do with end user infected systems. What record will be required to be kept of all activities conducted. What recompense the innocent affected parties. How will evidence be preserved and a proper legal chain from source to court. How about some reasonable professionalism.

      It should have gone from M$ to the FBI to the Court, back to the FBI and fully documented and only then under specific guidelines contracted to M$ under FBI supervision and all the data should leave M$ hands as they were only contractors and M$ can apply to the courts and the FBI for the data gathered after it has been vetted by the court and the FBI.

      Not that I particularly love the Fucking Bloody Idiots but there is a right and a wrong way for doing things and the FBI should be questioning this and demanding all the data and direct supervision of the evidence obtained.

      --
      Chaos - everything, everywhere, everywhen
    8. Re:Legal Precedent? by Anne+Thwacks · · Score: 2
      It's like pitching an entire city of of their houses because you suspect that there's criminal activity going on somewhere in that city.

      Ie standard US policy

      --
      Sent from my ASR33 using ASCII
    9. Re:Legal Precedent? by Rich0 · · Score: 4, Insightful

      However, no-ip has certain legal responsibilities as a service provider and if they don't meet them their legitimate customers may end up getting caught in the crossfire.

      What would those be? They're a DNS provider. Somebody tells them that domain A is IP B, and then somebody asks them what the IP for A is, and they say B.

      They don't carry traffic. No attack would come from their servers.

      I could see a court ordering them to lock an account or remove a domain being used to coordinate malicious activity, and then they'd have a duty to comply. However, that isn't what happened here.

    10. Re:Legal Precedent? by MrNemesis · · Score: 5, Funny

      Most people I know that use no-ip are people setting up their own minecraft servers its not a hotbed of criminal activivty like MS claims.

      I looked up this "minecraft" of which you speak, and it seems to be some crudely archaic simulation where you wander round indiscriminately smashing rocks together and killing animals - basically a terrorism simulator. I fail to see why anyone would support the use of this software.

      Lots of terrorism-simulator apologists say it's something called an Indy game, but it bears absolutely no comparison with any of the Harrison Ford films (and in any case, an Indy game would require royalty payments to LucasArts which we can find no record of). It doesn't have a proper company behind it like EA or Zynga but only a nebulous cloud of anonymous people known as "notch".

      Not only that, it seems that the hacker group "notch" had their paypal account suspended several years ago due to money laundering and other suspicious activities.

      Frankly anyone who uses this simulator or supports the filth behind it deserves everything they get.

      Richard Domingues

      --
      Moderation Total: -1 Troll, +3 Goat
  10. No customer notification by Stealth+Dave · · Score: 4, Interesting

    While I fully blame Microsoft for creating this mess, I'm somewhat dismayed that as a customer I'm finding out that my service is down from a news outlet rather than from noip themselves! I've been using their sub domain wildcard service for 7-8 years now and have just now found out that it's down. I'm none too happy about being thrown out with the bathwater!

    --
    Evil is as eval("does");
    1. Re:No customer notification by Anonymous Coward · · Score: 3, Insightful

      Just wondering... Considering that their main domain was hijacked. How would you expect them to send email?

  11. Re:There is just one domain that needs to be shutd by Anonymous Coward · · Score: 2

    I really can't see why this wouldn't be possible using the exact same logic that MS uses.

  12. Affected me by BenJeremy · · Score: 3, Informative

    I don't serve anything important... but I usually post images through my local server and upload to imgur "through the web" - it took several retries when I tried to do this a short while ago, and now I know why.

    Thanks, Microsoft.... you can't just take over no-ip and then run it through crap servers that can't handle the loads.

  13. How about a home brew dynamic DNS system? by Nethead · · Score: 2

    I've looked a bit but never really found a package to do this, although it's been a few years. I've got a BSD box, a static IP and some domain names. How would I set it up so that other hosts could use this in a dynamic way to set forward DNS records if they were on an ISP's ever changing DHCP addresses?

    In other words, how can I roll my own no-ip.com system without being a Vixie level hacker?

    --
    -- I have a private email server in my basement.
    1. Re:How about a home brew dynamic DNS system? by Temkin · · Score: 4, Interesting

      I have a $10/mo VPS at a major datacenter with static IPv4 & IPv6 addresses that hosts the primary DNS server for my vanity domain. My house has plain old boring dynamic address DSL with filtered port 25, etc... I have a Raspberry Pi running light network services on the house net. It runs a cron job that runs pubkey ssh into a no-shell account on the VPS. When that happens, a script rips $SSH_CLIENT and does a quick compare to see if it changed. If it has, another cron job on the VPS fixes up a record in my vanity domain with a 60 second TTL.

      OpenVPN gets me around the port 25 filter...

      Why am I explaining this to a low four digit?

    2. Re:How about a home brew dynamic DNS system? by Himmy32 · · Score: 2

      I registered my domains through namecheap and have my DNS hosted there and they support Dynamic DNS. If your register doesn't support it on their default DNS servers, you'll need to transfer your DNS to someone who does support it.

    3. Re:How about a home brew dynamic DNS system? by Noishe · · Score: 2

      You should not be using port 25 unless you are hosting a mail transmission agent. If you are submitting email from a user agent, you should be using port 587.
      Port 25 has been deprecated by the IETF for over a decade and is reserved for transmission, not submission.

  14. Re:Microsoft takes on global cybercrime epidemic by lister+king+of+smeg · · Score: 5, Funny

    i wonder if the same court would let you take update.microsoft.com and redirct it to ftp.debian.org using this reasoning

    --
    ---Saying gnome 3 is better than windows 8 not so much a compliment as it is damning with light praise.
  15. Well, fuck you very much by FuzzNugget · · Score: 4, Interesting

    So *that's* why my DDNS suddenly went dark today, with no apparent explanation.

    Port 80 forwarding to the right LAN IP. Server daemons are running. I can access all the services directly by WAN IP (not very useful). Updater client running just fine. No firewall configs in the way. No-IP reports the correct IP. No news posting on No-IP's website about any sort of outage or technical issues.

    Well, I was lost -- that was everything. ... and that was all because of this horseshit? Guess what... I'm not even *in* the US, so now the US courts think they have jurisdiction over countries? (OK, that's not new)

    Fuck all involved. Hope they get their asses sued to hell. And this judge canned for such a dumbass decision.

    1. Re:Well, fuck you very much by Geeky · · Score: 2

      Me too, in the UK. Figured it was a random glitch until I read this.

      I use no-ip to provide an address back to a home server running ZoneMinder for a couple of security cameras. So as it stands I can't access my security system. Great. I went to no-ip because my ISP doesn't offer fixed IP addresses and for no good reason changes my IP address every few days. I also have it on a self-signed SSL cert, and if I access it via IP I have to add another exception to the browser every time it changes.

      If it wasn't for the SSL aspect, I'd have a script on my home box identify the external IP address and email me when it changes.

      --
      Sigs are so 1990s. No way would I be seen dead with one.
  16. Overdue by networkzombie · · Score: 4, Insightful
    Why is anyone surprised about this? I've been reading articles for over a year about No-IP and the abuse that they seemingly allow. They say they are working hard to stop the malicious software plowing through their service, but obviously they are not working hard enough. No one contacted No-IP to tell them that their service was being used to spread malware?

    Bullshit.

    April 2013: http://labs.opendns.com/2013/0...

    Sept 2013: No-IP is a preferred choice for other similar attacks for command and control infrastructure: http://threatpost.com/njw0rm-a...

    Feb 2014: Even Cisco said their domains were being abusive and they posted to complain that Cisco didn't contact them. http://www.noip.com/blog/2014/...

    Looks to me like they should have contacted Microsoft and asked them for help. I guess they waited too long.

  17. Wait a second... by FuzzNugget · · Score: 5, Insightful

    So, Microsoft's argument was that they needed to hijack thousands of computers, secretly redirect them and put people in financial strain... so that someone else couldn't hijack thousands of computers, secretly redirect them and put people in financial strain?

    Great plan, fuckwits!

  18. Re:They're not kidding (I've seen it 1st hand)... by lgw · · Score: 2

    Well, fuck. No-IP going down? A million basement virgins lose access to their favorite minecraft server, and nothing of value was lost.

    But, dammit MS, you proved APK right about something. That karmic burden is on you guys now. That bell can't be un-rung. You've got to carry that forever now.

    --
    Socialism: a lie told by totalitarians and believed by fools.
  19. Self appointed judge by ruir · · Score: 2

    USA and Microsoft the self-appointed police of the world strikes again... Two comments. If it indeed no-ip has virus problems, it would be FBI, CIA or NSA, or whatever national agency and not the fuckwits from Microsoft. Second point, if we are talking about malware distribution points, are we disabling hotmail.com and microsoft.com too?

  20. Malice? more like incompetence... by DarkHelmet433 · · Score: 5, Informative

    A quick skim of the motion for the court order gave me the "boilerplate" and "cut & paste" feeling. There is a lot of sloppy line blurring between actions and complaints directed at the Malware authors and the no-ip folks. Sometimes they refer to the "Malware Defendants" and other times the generic "Defendants" when they meant the former. Really sloppy legal work.

    There are some real gems in there:

    From section 7:
    "There is good cause to believe that immediate and irreparable damage to this Court’s ability to grant effective final relief will result from the sale, transfer, or other disposition or concealment by Defendants of the Internet domains at issue"
    Say what? How is that related anything? Its not like the TRO will actually prevent people from being able to hit 'delete' via the control panel. Given that everything's busted by their own doing, the bad guys got a huge head start.

    From section 8:
    "... and the interest of justice require that this Order be Granted without prior notice to Defendants ..."
    Wow ...

    The full motion text: http://www.noticeoflawsuit.com...

    It seems to me that regardless of what good intentions that Microsoft may have had, they've really fouled up the execution. They'll be remembered more for taking out millions of legitimate users than the malware they *might* be able to take down.

    1. Re:Malice? more like incompetence... by DarkHelmet433 · · Score: 5, Interesting

      I also suspect they've managed to botch the technical aspect of it as well.

      Presumably the plan was to put their caching name servers in front of the real no-ip servers, and gather the mappings for the malware suspect sites and then blackhole them after getting what they want. The problem was that Microsoft's side appears to have melted down, thus taking everything down. They won't be getting logs, behavior analysis or anything, because its all a pile of wreckage in a crater. Meanwhile, all the "bad guys(TM)" have now had hours head start to delete their C&C node registrations while microsoft's servers are down. And now they've ticked off the no-ip folks, so I wouldn't expect them to be in a cooperative mood to try and help.

      Bone headed all round. There's no other way to put it.

  21. Taking over government functions by AxeTheMax · · Score: 4, Interesting

    So MS has a 'Digital Crimes Unit' and the US courts allow it to carry out law enforcement duties. How long before they have their own policemen, courts and prisons? It goes together with the Microsoft tax I suppose.

  22. Re:Anyone have the actual ruling? by DarkHelmet433 · · Score: 2

    The motion is here: http://www.noticeoflawsuit.com...

  23. Re:My stuff got hit by this. by gl4ss · · Score: 2

    well, I'm pretty sure the judge didn't ask no-ip.

    and MS portrayed it to the judge in the way that they must do it in haste, no time to waste.

    so two things, MS mislead the judge and the judge didn't give a shit about ASKING THE FUCKING COMPANY WHO OWNS the DOMAINS. there's of course the trouble that hey, the fucking system allows that you can do that with a court order. now MS could have done this with any domain they chose.

    --
    world was created 5 seconds before this post as it is.
  24. Security cameras by Ecuador · · Score: 4, Insightful

    Security cameras is another common usage. A low cost installation has some IP cameras on a residential dynamic IP internet service, so you use no-ip for access. I can't access my vacation house feeds today. For all I know there might be gnomes partying around the premises right now. Thanks MS.

    --
    Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    1. Re:Security cameras by modi123 · · Score: 2

      For all I know there might be gnomes partying around the premises right now.

      On the scale of one to ten, how hot are your average gnomes that party at your vacation house?

  25. Thanks a bunch, Microsoft by thrill12 · · Score: 2, Insightful

    [grudge mode]I will be sure to claim damages for this, as I am using no-ip for my own server which is perfectly valid and runs no Microsoft software whatsoever (nor will it ever). What judge is so stupid as to do this ???[/grudge mode].
    Did not hear anything from No-ip though ; when I logged in yesterday to find out what was wrong, and why my domain was not resolving, there was no information whatsoever.

    --
    Slashdot: stuff for news, nerds that matter, matter for news, stuff that nerd
  26. Re:WTF by Anonymous Coward · · Score: 3, Interesting

    And this is why we need Namecoin and other decentralized DNS solutions to take such matters out of the hands of the lawmakers.

    http://namecoin.info/

  27. Microsoft's new business plan by Culture20 · · Score: 2, Insightful

    1. Extinguish

  28. Lawsuits will fly by Anonymous Coward · · Score: 5, Interesting

    IAAL (but this isn't legal advice). I noticed that it was an ex parte hearing, which is why this whole mess occurred. They're useful for preventing domestic violence, but ripe for abuse in all contexts. NO-IP should be moving for an emergency hearing and the whole issue should be resolved within hours. Beyond that, NO-IP should follow-up with a suit for damages (I suspect MS will pull the we-got-a-court-order card and NO-IP gets to respond back with you lied to the court. It all goes nowhere and they settle).

    The more interesting aspect is the disrupted users. While MS moved against NO-IP ex parte, they apparently made assertions that they would keep the service functioning properly. They've failed there and suits are now possible for those failures. More interestingly, however, is whether MS was recording, manipulating, or in any other way playing with the traffic. If so, there are some excellent wiretap statutes waiting to be had.

    I, sadly, didn't have an NO-IP account, but if I did, I'd be heading to the court house this afternoon. This is what happens when you skip due process, let a to-big-to-fail corporation do whatever it wants to private corporations through the guise of the courts. Corruption at it's finest. MS should be bludgeoned thoroughly enough to at least think twice before attempting it again.

  29. Re:Richard Domingues is wrong in every way by GlennC · · Score: 2

    I'm sorry, I couldn't understand you over the WOOOSSSSHHHHH.

    --
    Go on, citizen, stamp the vote card. R or D, your choice.
  30. Re:WTF by Xicor · · Score: 2

    but thats the truth... if the laws says it is legal, sadly it is legal. the only way we can change that is by revolting against the lawmakers.

    let me ask you this, what is the difference between murder and assasination/war? you guessed it! in the latter, the government says it is ok, in the former, the government says it is not ok.

  31. Re:WTF by Dishevel · · Score: 3, Insightful
    I think you confuse legal with right or just.

    I can understand your confusion. They do after all call it the Justice system. That though is a lie.

    --
    Why is it so hard to only have politicians for a few years, then have them go away?
  32. Re:Internet by mythosaz · · Score: 2

    When you install Malware on my machine, you have two choices, you can give it an IP to contact, or you can give it a DNS name.

    If you give it a static IP address, it's easy for the good guys to contact your provider and squash you.
    If you give it a DNS address on a provider that doesn't do fuck all about malware hosts using it, then you can survive the whack-a-mole game for a long time.

  33. How on earth did you get that result? by SplatMan_DK · · Score: 5, Insightful

    I don't know where you went to school, but you should ask for a refund. Or read up on basic percentage calculations.

    Microsoft claims that 93% of the malware traffic is traced to No-IP. But that says nothing about the total amount of traffic for No-IP, nor does it say anything about the total volume of legitimate domains. Malware traffic could be as little as 1% on No-IP's infrastructure while still accounting for 93% of malware DDNS traffic.

    It is completely wrong to state that 93% of No-IP domains are hosting malware. A large number of legitimate customers are being affected by this, and Microsoft is not resolving their DDNS domains correctly (as promised). The actual percentage of legitimate vs malicious domains is unknown, as is the distribution of legit/malicious traffic.

    Also, Microsofts claims are disputed by No-IP, so we should not take them at face value. No real evidence of malice has been proven (yet), which makes it extremely questionable that this was conducted ex parte.

    Finally, the fact that No-IP was a favorite for malware is not (or should not be) in itself sufficient to take control of the domains like this. I sincerely hope Microsoft can prove No-IP did not respond properly to requests. Or that they can document that an extremely large portion of total traffic on No-IP was malware (which we know nothing about at this point).

    Simply quoting the 93% number is a pile of BS. I can't stand by itself. I can say with certainty that at least 93% of the Nigerian scam mail I have received the last year has used a hotmail.com or outlook.com account. But surely this does not prove that Microsoft is willingly aiding Nigerian scammers and that their domains should be seized?

    --
    My security clearance is so high I have to kill myself if I remember I have it...