full-disclosure - Whois acting funny in FreeBSD

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1072810573.21305.1.camel@finalaeon>
From: kronovohr at finalaeon.net (Rev. Kronovohr)
Subject: Whois acting funny in FreeBSD

this is a common occurrance...all one must do is register a nameserver
with the "target" domain as the beginning of the subdomain. Do a WHOIS
on microsoft.com and you'll see what I mean.

Several companies are now doing this to their competition

On Tue, 2003-12-30 at 12:42, Chris McGinnis wrote:
> Today I've noticed something weird on all my FreeBSD boxes.  When I whois 
> domains like msn.com, microsoft.com, aol.com and others I get stuff like:
> 
> $ whois msn.com
> 
> Whois Server Version 1.3
> 
> Domain names in the .com and .net domains can now be registered
> with many different competing registrars. Go to http://www.internic.net
> for detailed information.
> 
> MSN.COM.TW
> MSN.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
> MSN.COM
> 
> My linux boxes seem to work fine.  When I query a specific whois server 
> such as whois.networksolutions.com it works fine also.  Is anyone else 
> getting anything like this?  I'm thinking maybe the default whois server 
> that the whois program queries has been compromised?  I'm not sure what the 
> default whois server is.
> 
> -Chris
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 
Rev. Kronovohr <kronovohr@...alaeon.net> The Brotherhood of the Final Aeon
finger kronovohr@...alaeon.net   or
http://www.finalaeon.net/finger.php?user=kronovohr&host=finalaeon.net
fingerprint: 37C4 B78A 770E 9D85 79E3  532F BB29 03FE 0759 CF8B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031230/82c97bae/attachment.bin