full-disclosure - Fw: Removal of wildcard A records from .com and .net zones

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: scheidell at secnap.net (Michael Scheidell)
Subject: Fw: Removal of wildcard A records from .com and
 .net zones

> 
> So that leaves 13 hours to spam VeriSign's data mining basis
> with meaningless requests like 
> 
>   while (1) {
>     ($v, $w) = two_random_words_from("/usr/share/dict/words");
>     system("lynx -source http://$v.$w.net > /dev/null 2>&1");

not sure that is all that nessessary.
The spammers are actually helping DDOS verisign.

There are a lot of web sites running 'wpoision' which creates random
usernames and domain names already, ripe for the email harvesters.

See the bottom of http://www.secnap.com/contact.html for the 'Special link
for email gathering bots.'

spammers are sending email by the bizillions to verisign.
Even if verisign is dumping them, that is still bizillions of smtp
connects per second.
-- 
Michael Scheidell
SECNAP Network Security, LLC 
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/