News for hackers. Stuff that matters.

A comment on The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability. Parent comment

Re:The Orphaned Internet – Taking Over 120K Domains via a DN... by jwcrux on Tuesday December 06, 2016 @11:09PM (#13120407)
The author specified that his source for finding the domains in the first place was the .com and .net zone files. This means that the domains were actively pointing to Google/DO/Rackspace's nameservers.

The author would therefore have complete control over the orphaned domains after the takeover.

[ Parent | on HN ]
Re:The Orphaned Internet – Taking Over 120K Domains via a DN... by tyingq on Wednesday December 07, 2016 @07:42AM (#13122107)
The reason for the emphasis is that the article isn't clear on two points.

- By definition, his method of finding domains only finds domains that aren't in active use. (domain servers in the ns records return fail/refused).

- It uses the terminology "taking over", and you're saying "complete control". However, if the real owner of the domain wanted control back, they would simply log into their registrar and change the NS records...very low effort.

[ Parent | on HN ]