News for hackers. Stuff that matters.
Re:Microsoft takes down No-IP.com domains by Zancarius on Monday June 30, 2014 @05:03PM (#7967693)
> On June 26, the court granted our request and made Microsoft the DNS authority for the company’s 23 free No-IP domains, allowing us to identify and route all known bad traffic to the Microsoft sinkhole and classify the identified threats.

Something about this bothers me. So the courts granted MS the rights to essentially take over No-IP's DNS in order to "identify" ... "bad traffic?"

The implications of this are... chilling. As much as I want to reserve judgement, this makes me uneasy (malware aside).

Re:Microsoft takes down No-IP.com domains by teraflop on Monday June 30, 2014 @05:23PM (#7967802)
Agreed. Arguably the net effect in this particular case was positive, but I can easily imagine reading this press release in a parallel universe:

"Today, Sony Pictures has upped the ante against global cybercrime, taking legal action to clean up piracy... We're taking YouTube to task as the owner of infrastructure frequently exploited by cybercriminals to infringe copyrights by uploading unauthorized movie clips... On June 26, the court granted our request and made Sony the DNS authority for youtube.com, allowing us to identify and route all known infringing traffic to the Sony sinkhole and identify users who posted unauthorized content."

Re:Microsoft takes down No-IP.com domains by ntakasaki on Monday June 30, 2014 @05:46PM (#7967924)
Isn't that close to what happened to Mega Upload and domain handed over to the government?
Re:Microsoft takes down No-IP.com domains by andor on Monday June 30, 2014 @06:04PM (#7968019)
Of course a court can seize domains. But if an investigation follows, it should be carried out by the police, not by private companies (and especially not by the plaintiff).

At least that's what I'd expect from a constitutional state ;-)

Re:Microsoft takes down No-IP.com domains by DanBC on Tuesday July 01, 2014 @09:36AM (#7970510)
Police have failed to take any action on this.

If people gave the money they can (at least in England) mount a private criminal prosecution. That's very rare, but it does happen.

I'm pleased that MS is doing this. So long as it stays open, scrutinised by the courts, and restricted to massive malware botnets the results are good for almost everyone.

Re:Microsoft takes down No-IP.com domains by Labrynth2014 on Tuesday July 01, 2014 @04:35PM (#7973354)
The Police DO NOT have the necessary hardware and software to take on such a task Andor. The Private Sector does because that is what they do.
Re:Microsoft takes down No-IP.com domains by AJ007 on Monday June 30, 2014 @06:36PM (#7968126)
Exactly. Here is another one:

Microsoft failed to secure Windows XP against malware and botnets, so all Windows XP users will now be redirected to Ubuntu.com when they try to access the internet through Internet Explorer.

Re:Microsoft takes down No-IP.com domains by wfjackson on Monday June 30, 2014 @08:01PM (#7968451)
That's quite a stretched analogy. A fully updated Windows XP computer will still be vulnerable to malware and botnets.

That is because Windows, OS X, Android and Linux allow their users to install third party programs without whitelisting them. There is nothing stopping users from installing malware. OS X and Linux have less malware because they're not as popular as Windows and Android.

That's opposite to iOS, Windows Phone/RT, XBox and Playstation which are pretty much free from malware because everything has to go through an app store.

Re:Microsoft takes down No-IP.com domains by Silhouette on Monday June 30, 2014 @08:17PM (#7968526)
A fully updated Windows XP computer will still be vulnerable to malware and botnets.

That is because Windows, OS X, Android and Linux allow their users to install third party programs without whitelisting them.

<Devil's advocate>Then clearly Microsoft aren't doing enough to look after their own back yards, and their domains should be seized and potential Microsoft customers rerouted to information about the dangers of using Microsoft products and safer alternatives.</Devil's advocate>

This is a highly impractical response to the problem of malware, of course, but I don't find the analogy stretched at all. The action Microsoft have reportedly taken -- and the support they appear to have been given by the courts -- are just about as absurd as my tongue-in-cheek response above.

We seem to have grown up and stopped assuming everyone using P2P protocols obviously wants to pirate films, and we don't assume everyone using Windows XP obviously wants to be part of a botnet, so why would we assume everyone using Dynamic DNS obviously wants to distribute malware?

[Edit: There are now quite a few HN posters in multiple discussions about this action who are saying their innocent use of No-IP is being undermined because Microsoft's sinkhole is getting in the way.]

Re:Microsoft takes down No-IP.com domains by moblahbl4hblah on Tuesday July 01, 2014 @06:52AM (#7969993)
Because you're a fucking expert, huh?
Re:Microsoft takes down No-IP.com domains by Swizec on Monday June 30, 2014 @08:11PM (#7968499)
On OSX you actually have to whitelist software as a user. If something doesn't come from an approved developer, user has to say "Yup, I really do actually want this to be able to run"

(unless we're talking things installed through homebrew, pip, gems and whatnot, but those aren't likely to be used by inexperienced users)

Re:Microsoft takes down No-IP.com domains by ZachPruckowski on Monday June 30, 2014 @09:17PM (#7968688)
Yeah but what fraction of home users are going to consider that prompt as opposed to just clicking on the OK button? I've noticed a lot of software will include that in its install steps.
Re:Microsoft takes down No-IP.com domains by zevyoura on Monday June 30, 2014 @09:25PM (#7968717)
You now actually need to specifically open the application with a right click to even have the option to open it, simply double clicking just says it's unsafe and closes. I think that safeguard probably has saved significant numbers of people from unsavory malware.
Re:Microsoft takes down No-IP.com domains by EdwardDiego on Monday June 30, 2014 @11:42PM (#7969081)
That's the very first option everyone turns off because it gets in the way.
Re:Microsoft takes down No-IP.com domains by semanticist on Tuesday July 01, 2014 @09:31AM (#7970490)
It's the first option everyone you know turns off, but don't mistake anyone who even knows that Hacker News exists with a typical computer user.
Re:Microsoft takes down No-IP.com domains by EdwardDiego on Tuesday July 01, 2014 @09:23PM (#7974568)
Good point.
Re:Microsoft takes down No-IP.com domains by AlyssaRowan on Tuesday July 01, 2014 @03:50AM (#7969582)
It seems highly irregular: did the court misunderstand, or were they misrepresented to, that No-IP themselves were playing a witting part in botnet C&C coordination?

I doubt No-IP will settle out of court. They'll probably countersue - they have nothing to lose, and that sounds like a company lawyering up and getting ready to kick ass - and I'd expect they'd ask for very big, even punitive damages. The $200k bond isn't even two orders of magnitude enough to hedge against MS literally destroying their business, in what may have been an ultimately well-intentioned, but spectacularly reckless, action.

How long until MS reverse the DNS changes, I wonder, especially given they can't keep up and they're all effectively down? 12 hours? 24?

It's no surprise, btw, that domains in US jurisdiction are under US jurisdiction.

We could use some more TLDs that aren't, I think, and I've held for some time that the root DNS should be held by some kind of international treaty entity acting as IANA.

Re:Microsoft takes down No-IP.com domains by DINKDINK on Monday June 30, 2014 @06:33PM (#7968113)
https://en.wikipedia.org/wiki/Namecoin Distributed DNS is the only solution
Re:Microsoft takes down No-IP.com domains by zanny on Monday June 30, 2014 @07:29PM (#7968313)
And meshnets. DNS is just a layer on top of an already vulnerable IP stack.

IP can work between broad and anonymous mesh nets, but when an IP address can be resolved to a business or person it provides an exploit vector.

Re:Microsoft takes down No-IP.com domains by walden42 on Monday June 30, 2014 @08:48PM (#7968628)
Like MaidSafe? Are there other alternatives?
Re:Microsoft takes down No-IP.com domains by livingparadox on Monday June 30, 2014 @08:12PM (#7968501)
It doesn't serve No-IP's market, because No-IP is for frequently changing IP addresses. Namecoin charges for each record change, to my knowledge.
Re:Microsoft takes down No-IP.com domains by Buge on Tuesday July 01, 2014 @12:23AM (#7969160)
How often are updates necessary? It costs 0.8 cents to update a namecoin domain.
Re:Microsoft takes down No-IP.com domains by therealunreal on Tuesday July 01, 2014 @12:35AM (#7969177)
It depends on how often a router may disconnect; they typically receive a new IP address every time they connect. It's also a matter of the ISP's policy, some ISP's force a disconnection once per day while others don't.
Re:Microsoft takes down No-IP.com domains by cookiecaper on Wednesday July 02, 2014 @02:00PM (#7978515)
One of the main reasons to use a dynamic DNS service is because your IP address changes frequently. A service that requires you to pay for each record update is a non-starter for that use case.
Re:Microsoft takes down No-IP.com domains by runn1ng on Tuesday July 01, 2014 @04:14AM (#7969626)
> It costs 0.8 cents to update a namecoin domain That's not fair to say.

It costs like this because the namecoin price is so low. However, if it was used more, the price would skyrocket.

Re:Microsoft takes down No-IP.com domains by dsl on Monday June 30, 2014 @07:30PM (#7968318)
So malware authors will be able to operate with impunity? As in all things, the solution is somewhere in the middle.
Re:Microsoft takes down No-IP.com domains by Fuxy on Tuesday July 01, 2014 @08:46AM (#7970294)
And they say America is a democracy... this is one step away from the courts granting Microsoft the power to take over no-ip's business and domains permanently.

Reminds me of the old days of communism when you could have your "property" sized since legally speaking everything belonged to the state.

And no you can't say this is different because the courts ordered it since no-ip was not given a chance to defend itself.

How much would like to bet Microsoft presented the case as some rogue Arab sounding names(terrorists?) running shady bot-nets in cooperation with no-ip a company obviously involved in that criminal activity.

Not the largest and well known freed DNS provider in the world that happens to be used by a large number of bot-nets as well.

If this is ok I'm sure you could find millions of reasons to seize goggles domains like indexing warez sites or websites like the pirate bay.

Re:Microsoft takes down No-IP.com domains by mikedenney on Wednesday July 02, 2014 @04:04AM (#7975746)
This is the singlemost monstrously misrepresentational and dubious thing I have seen any tech company do in my 20 years experience as a tech. It also profoundly concerns us all that this type of judgment can be made by our government without any of warning or consent by the people. Millions of users lost their home security and surveillance systems instantly due to this ill-advised decision. We should hold the federal government and Microsoft directly responsible for any losses that happened today, and any that happen in the future as a result of any such action. We might as well go ahead with emotional damages for causing the concern in the first place.
Re:Microsoft takes down No-IP.com domains by mihai_ionic on Monday June 30, 2014 @06:04PM (#7968020)
This decision is very disturbing indeed.
Re:Microsoft takes down No-IP.com domains by informatimago on Sunday July 06, 2014 @11:53PM (#7996973)
Don't use .com, .net, .org, .edu; use domain names in your own sovereignty! Microsoft would have it much harder to get no-ip.ru or no-ip.zh (granted, a little easier grabbing no-ip.fr).
Re:Microsoft takes down No-IP.com domains by moblahbl4hblah on Tuesday July 01, 2014 @06:46AM (#7969972)
Microsoft was able to demonstrate that they were actually involved in committing the crimes. The court didn't give them the domains so that they could then come up with evidence. They already had the evidence.

Oh nevermind...NSA...M$ is teh suxor...oh mer gurd!!!!

Re:Microsoft takes down No-IP.com domains by Geiko on Tuesday July 01, 2014 @04:59PM (#7973470)
Really... so the hundreds of thousands innocent users that was not doing any crimes? What about them?

This just proves that the current authorized domain system is not working, and its the beginning of the end.