News for hackers. Stuff that matters.

A comment on Snapshot of North Korea’s DNS data taken from zone transfers. Parent comment

Re:Snapshot of North Korea’s DNS data taken from zone transfers by jason_slack on Tuesday September 20, 2016 @07:57AM (#12538795)
Sorry, I need a little more explanation.

Are you saying that North Korea would otherwise be keeping these domains out of sight from users that aren't in North Korea? So now that these domains are out there anyone can view them and lurk/spy/gather info?

[ Parent | on HN ]
Re:Snapshot of North Korea’s DNS data taken from zone transfers by itsnotlupus on Tuesday September 20, 2016 @10:11AM (#12539601)
You'd need to know those domains exist to resolve them.

This unusual (mis-) configuration allowed to enumerate those domains exhaustively.

[ Parent | on HN ]
Re:Snapshot of North Korea’s DNS data taken from zone transfers by jason_slack on Tuesday September 20, 2016 @12:48PM (#12540927)
So if I had a friend in North Korea and they told me about one of those domains, I would not have been able to resolve it in my browser?

But now that this has happened anyone can?

[ Parent | on HN ]
Re:Snapshot of North Korea’s DNS data taken from zone transfers by griffinmb on Tuesday September 20, 2016 @01:10PM (#12541112)
Rather, if you had a friend in North Korea and they told you about the domains, you WOULD be able to resolve them.

Now that this has happened, you know all of the domain names and no longer need a friend in North Korea to tell you what they are.

[ Parent | on HN ]