stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Domain registry site gets hacked







Domain registry site gets hacked

Domain registry site gets hacked 12/03/2003 02:40 PM

The Global Name Registry confirms that its .name Web site was hacked over the weekend and blames the attack on the company's move to relaunch its services.




This is a GrokNews Entry: (what is grok?)





Similar Items

Domain registry site gets hacked

Grok Headline matches for Domain registry site gets hacked

.name registry site hacked


.name registry site hacked 12/02/2003 01:55 AM
Apache exploit causes embrassment

Ireland domain registry CEO resigns


Ireland domain registry CEO resigns 11/01/2003 08:33 AM
Sorry chapter comes to a close, but will things change?

Domain Registry Offers Online Money
Making Opportunity


Domain Registry Offers Online Money
Making Opportunity
01/04/2005 04:14 AM
Global Domain International provides .ws "Website" domains to individuals, businesses and corporations. GDI now offers a network marketing opportunity for anyone looking to make ongoing, lifetime commissions. [PRWEB Jan 4, 2005]

Tralliance Corporation Confirmed By
ICANN To Serve As Worldwide Registry for
New .travel Internet Domain


Tralliance Corporation Confirmed By
ICANN To Serve As Worldwide Registry for
New .travel Internet Domain
04/08/2005 05:55 PM
Business Wire UK Apr 8 2005 9:38PM GMT

SCO Group Web Site Hacked Again


SCO Group Web Site Hacked Again 12/10/2003 07:46 PM
San Jose Mercury News Dec 10 2003 6:53PM ET

SCO Group Web site hacked again


SCO Group Web site hacked again 12/10/2003 09:10 PM
Boston Globe Dec 10 2003 7:25PM ET

Google's Web site is hacked


Google's Web site is hacked 07/26/2004 10:50 PM
Big News Network Jul 27 2004 2:57AM GMT

Korean Mozilla Site Hacked


Korean Mozilla Site Hacked 06/17/2005 07:23 PM

South Korean MSN site hacked


South Korean MSN site hacked 06/05/2005 10:53 PM
The South Korean MSN site was recently hacked, resulting in users having their passwords stolen.


Site of electronic voting firm hacked


Site of electronic voting firm hacked 12/30/2003 01:38 AM

Electronic Voting Firm Has Site Hacked


Electronic Voting Firm Has Site Hacked 12/29/2003 05:35 PM
AP via Daily Press Dec 29 2003 5:32PM ET

Electronic voting firm has site hacked


Electronic voting firm has site hacked 12/29/2003 09:16 PM
Boston Globe Dec 29 2003 8:33PM ET

Regaining Control of a Hacked PHP-Nuke
Site


Regaining Control of a Hacked PHP-Nuke
Site
05/19/2004 07:28 PM
php architect, Canada - 7 hours ago ... They take you through the preventative approach by showing you where the bugs might be and then show you how to remove traces the hacker left behind. ...

Microsoft admits MSN site hacked in
Korea


Microsoft admits MSN site hacked in
Korea
06/06/2005 12:06 AM

S. Korean Soap Opera Star's Japanese
Internet Site Hacked


S. Korean Soap Opera Star's Japanese
Internet Site Hacked
12/26/2004 05:00 AM
Yonhap News Dec 26 2004 9:25AM GMT

Porn site WhiteHouse.com domain name up
for sale


Porn site WhiteHouse.com domain name up
for sale
02/10/2004 05:35 PM
The owner of WhiteHouse.com said he wants out of the business before his young son starts asking questions about what his father does for a living.

Spike Lee wins domain case against porn
site


Spike Lee wins domain case against porn
site
08/27/2004 05:47 PM
CNET News.com Aug 27 2004 10:01PM GMT

Creative Mac users compete for free
domain and site hosting


Creative Mac users compete for free
domain and site hosting
08/19/2004 10:05 AM
Creative Macintosh computer users are invited to compete for a free domain name and free Web site hosting in a Mac-friendly contest sponsored by Jumsoft, a provider of Apple Keynote themes and objects applications...

Internet iTunes registry, a cool iTunes
site


Internet iTunes registry, a cool iTunes
site
12/19/2003 11:50 AM
Found a cool site today, which has recently launched. Called the Internet iTunes Registry. You upload your iTunes Playlists in xml, and then play with the data of yours or other users.

Like Pixels? Check out MacDesign

Domain Registrar BulkRegister Launches
New Tools to Drive Web Site
Optimization, Revenues for Business and
Res


Domain Registrar BulkRegister Launches
New Tools to Drive Web Site
Optimization, Revenues for Business and
Res
12/17/2003 02:24 PM
CPU Review Dec 17 2003 12:41PM ET

GoDaddy.com: : Low cost domain names,
domain transfers, web hosting, email
accounts, and so much more.


GoDaddy.com: : Low cost domain names,
domain transfers, web hosting, email
accounts, and so much more.
04/23/2004 09:32 AM

godaddy.com/gdshop/default.asp?isc=gppg0419a
track this site | 7 links


Canadian Domain Name Services Inc.
(caDNS.ca) .ca Announces .ca Domain Name
Registration Price Reduction


Canadian Domain Name Services Inc.
(caDNS.ca) .ca Announces .ca Domain Name
Registration Price Reduction
07/05/2004 02:55 AM
Canadian Domain Name Services Inc. (caDNS.ca), one of Canada's leading .ca Domain Name Registrars, has lowered its price for .CA domain registrations to $19.99, one of the most competitive prices in Canada. [PRWEB Jul 5, 2004]

Go Daddy Software: Low cost domain name
registration and domain transfers.


Go Daddy Software: Low cost domain name
registration and domain transfers.
04/23/2004 09:32 AM

registrar.godaddy.com/default.asp?isc=gppg0419c
track this site | 7 links


Domain Lab launches budget priced domain
registration service


Domain Lab launches budget priced domain
registration service
06/30/2004 03:17 AM
Domain Lab launches budget priced version of their corporate domain package at www.domainlab.biz [PRWEB Jun 30, 2004]

Domain Specialist - The Low Cost Domain
Provider Gets a Radical New Face Lift
and Website, www.DomainSpecialist.net -
Low Cost Domains From Only $6 Have Never
Looked So Good and Been So Cheap


Domain Specialist - The Low Cost Domain
Provider Gets a Radical New Face Lift
and Website, www.DomainSpecialist.net -
Low Cost Domains From Only $6 Have Never
Looked So Good and Been So Cheap
07/13/2004 03:08 AM
The Low Cost domain specialists have now revealed there latest website at www.domainspecialist.net . Bringing you fast slickly designed and easy to navigate domain buying and website hosting. The new site offers the user more choices when ordering there domain names, copyrighting or website hosting. DomainSpecialist.net is part of the IAAM Group of Companies situated at www.ItsAllAboutMarketing.com . domain Specialist is rivaling all UK Domain providers by offering a much higher class service, cheaper prices on the same products and above all else a total internet solution. [PRWEB Jul 13, 2004]

Why is Today the Best Day Ever to Get a
Free Domain Name? .Info Domain Names
are Free Through Sept. 9


Why is Today the Best Day Ever to Get a
Free Domain Name? .Info Domain Names
are Free Through Sept. 9
09/02/2004 12:23 PM
Domainsite.com announces free domain name registration for .info domain names [PRWEB Sep 2, 2004]

Configuring Site Systems and Site to
Site Communications with Advanced
Security


Configuring Site Systems and Site to
Site Communications with Advanced
Security
08/16/2004 10:22 AM

PSP hacked into something more useful


PSP hacked into something more useful 04/06/2005 06:17 PM
Apparently hackers have turned Sony's latest portable game player, the PSP handheld, into a device for online chat, Web browsing, and a venue for movies and music. Leave it to hackers who managed to add an online chat function by hijacking a Web browser built into a racing game called "Wipeout Pure." Once the hackers are able to change the PSP's network settings, they can point the browser to a Web portal. There's also a way for hackers to transfer TV programs recorded on the TiVo service to the PSP player, a program for reading e-books, and a viewer for...

You've Been Hacked!


You've Been Hacked! 06/24/2005 09:40 PM
Seven signs that a bad guy has commandeered your financial life.

Is It Illegal To Get Hacked?


Is It Illegal To Get Hacked? 04/21/2004 03:53 PM
Tower Records and the FTC have apparently reached a settlement after the FTC accused them of allowing hackers to access customer records. This brings up a very interesting question that isn't often discussed. Since hack attacks to get at customer data happen all the time how does anyone determine whether or not the company itself is negligent in not protecting the data? At what point is it negligence rather than just being vulnerable? If the standard is set too low, then companies have less incentive to protect their data (though, pissed off customers may provide that incentive). However, blaming the victim for being hacked seems to present a lot of slippery slope style questions.

Hacked for Spam


Hacked for Spam 12/08/2003 11:18 PM

From the New York Times:

Computer security researchers have been watching the evolution of remote-access rogue programs as they have become more common and have put more machines under the control of hackers. Programs like Sinit infect target machines and surreptitiously open back doors that allow outsiders to control the PC's. The rings of infected computers have been used to send spam, to present online advertisements for pornographic Web sites or to trick people into giving up information like credit card numbers.

In fact, at least a third of all spam circulating on the Internet is now sent from or relayed by personal home computers that have been taken over, said Jesse Dougherty, director of development at Sophos, an antivirus and antispam company.

Emphasis mine. Of course, whether or not you want to believe a director from a company that directly profits from people's fear of security attacks is up to you. That said, I've seen plenty of supporting evidence in the past few months that indicates that spamming is now the number one reason that a cracker would want to take over a PC, not least this Wired article.

Continuing on the same theme, The Rise of the Spammers is a fascinating article by David Barroso Berrueta describing how one of his servers was turned in to a spam relay after being compromised through a vulnerability in a PHP script. The technical details are intriguing; the attacker downloaded and uncompressed a daemon which then communicated with another host using an extended version of the SMTP protocol, receiving spam email bodies along with lists of addresses to send the spam on to.

Let's talk about the PHP vulnerability in question: yet again, it was the classic problem where an attacker can instruct PHP to download and execute code from their own server by feeding in a query string parameter that is passed un-checked to an include() function call. While there are a number of steps that can be taken to deny this kind of attack, it unveils a fundamental problem with PHP itself - that it will execute code retrieved from a URL in the first place! This feature should be removed from PHP - it has almost no purpose in the real world aside from allowing servers to be cracked in to. The feature exists because PHP has the extremely useful ability to open remote files over HTTP. Unfortunately, this feature extends to the include() and require() functions which will execute any PHP code in the file passed to the functions. The most obvious solution to my mind would be for these functions to refuse to execute PHP in files that were opened via HTTP. I have no doubt that this would involve an ugly hack on behalf of PHP's maintainers, but I believe the number of security problems it would solve would be well worth the trade-off.

Incidentally, I know you can disable opening files over HTTP and I know you shouldnt allow the direct creation of variables from the query string in the first place. The problems here are two-fold: firstly, opening files over HTTP is actually a very useful feature, one that would be all the more useful if it didn't carry the risk of executing arbitrary code. Secondly, the problem is mainly down to third party software which often requires insecure PHP settings (such as register_globals) in order to work.


Help: I Got Hacked. Now What Do I Do?
Part II


Help: I Got Hacked. Now What Do I Do?
Part II
08/01/2004 12:27 AM

Direct and Related Links for 'Help: I Got Hacked. Now What Do I Do? Part II'

If you missed part 1 of this series, I strongly suggest that you read it here. “On This Page: There Is More to Information Security Than Viruses Salvaging Data in the Absence of Backups Recovering After an Attack – What Tools Will Help? Conclusion”…

"Blogrolling.com has been hacked"


"Blogrolling.com has been hacked" 11/18/2003 10:22 AM

""We have a policy that we are not being
hacked.""


""We have a policy that we are not being
hacked.""
07/03/2004 02:10 AM

Will the election be hacked?


Will the election be hacked? 02/10/2004 02:44 AM
A Salon special report reveals how new voting machines could result in a rigged presidential race -- and we'd never know.

I Hacked at O'Reilly


I Hacked at O'Reilly 03/19/2003 10:24 PM
The O'Reilly Hacks site now has a hacks page for each contributor; mine's here.

How your phone could be hacked


How your phone could be hacked 04/25/2004 08:41 PM
ZDNet Apr 26 2004 0:36AM GMT

Cisco Hacked?


Cisco Hacked? 05/17/2004 10:38 AM
Spooky news for the biggest makers of the Internet's infrastructure.

E-Voting company gets hacked


E-Voting company gets hacked 12/30/2003 01:18 PM
Now another firm specializing in e-voting technology, Bellevue WA-based VoteHere, has been hacked.
Grok Description matches for Domain registry site gets hacked
GrokA matches for Domain registry site gets hacked

Domain registry site gets hacked

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Report: Third of
spam spread by
RAT-infested PCs

ink 0.3
OraRep Basis 0.1.7
streamtuner 0.10.2
(World Cup)

GNU Talk Filters 2.2
kahakai ace 0.2
Pansophica 1.2-2
ArtwizIce 1.2.13
Bibi 1.6
H-Sphere VPS 1.1
FreeVPS 1.1
U.S. Techies Working
At Overseas
Salaries?

Boat Nerd
Latest media stunt:
hot girl-on-girl
gridiron action!

Framley Museum
Few Agencies
Prepared To Enact
E-Gov Privacy Rules

Intellectual
property piracy is
form of terrorism:
WIPO chief

Random thoughts
Version 34.5

FCC staff recommends
conditional approval
of News Corp.
purchase of DirecTV

Satan's Retirement
Plan

Willow offers
carrying case for
20-inch iMac

Onyx pulls Pivotal
bid

IBM repackages
software offerings

EDS to support Sun
Desktop products

Is your PC sending
Viagra spam?

PC Buyers: Speeds &
Feeds Out, Add-Ons
In

FindWhat, Verizon Go
Local in Tandem

Briefly: McCaw takes
wing from Nextel

New e-mail worm
targets antispammers

New Technology
Licensing Program:
Microsoft

Web Virus Authors
'Winning
Battle'--Microsoft

What Has Number
Portability Done For
You?

EPG downloader of
sukapa

Mockrunner
IM with support of
ICQ, AOL, Yahoo

Ocaml Curl Library
The Spoke
oxerp
OCERA
packetfence
SDL.Net
BX Clanportal System
Police Cruiser Hits
Deer

Animal, Vegetable,
Video

Bye bye Blogshares
Onyx kills bid for
Pivotal

Red Hat begins
education discounts

Police are
investigating drug
sales online

Compulsory ID card
trial scheme
launched

Microsoft to License
More Intellectual
Property

what is grok?