full-disclosure - Possible DNS compromise/poisoning?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya,
	Aditya Lalit Deshmukh)
Subject: Possible DNS compromise/poisoning?

>- --SNIP--
>;; QUESTION SECTION:
>;www.microsoft.com.             IN      A
>
>;; ANSWER SECTION:
>www.microsoft.com.      2415    IN      CNAME
>www.microsoft.com.nsatc.net.
>- --SNIP--
>
>Notice that www.microsoft.com is a cname for
>www.microsoft.com.nsatc.net.  It's not limited to www.microsoft.com
>and to the best of my knowledge the correct web content is
>displayed.


Ms and all other big players have a round robin dns setup to prevent
slowdown of their sites. It this what you are seeing ? 

-aditya


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)