News for hackers. Stuff that matters.

StuntPope

So you're saying a phishing QR code is not malicious?
We've added agentic skills for five DNS utils we've had on the Domainhelp site for awhile (formerly easyWhois)

These ones are handy:

1. What is my public IP

2. What is my DNS resolver (handy)

3. Is this a homoglyph (have your openclaw check this before blindly following a link)

4. SPF Flattener

5. DNS Twister

More to come.

That's an excellent point.
Re:Age verification now required for DNS resolution on Wednesday April 01, 2026 @06:10PM (#47607177)
You're thinking of resolvers.
Re:Age verification now required for DNS resolution on Wednesday April 01, 2026 @11:18AM (#47602064)
[flagged] lol.
Re:Age verification now required for DNS resolution on Wednesday April 01, 2026 @10:24AM (#47601380)
just one?
Re:A Dark Adtech Empire Fed by Fake CAPTCHAs on Friday June 13, 2025 @10:40AM (#44268955)
Lost me at "Kremlin disinformation".

Krebs need to ditch the TDS.

His "Red Herring DNS flaw" garbage was when I realized that 90% of what he spits out is Gell-Mann amnesia.

One thing I didn't realize until after this was posted was that the wiretaps ISPs will be ordered to perform under C-2 are warrantless. Just ministry orders.
Re:Itch.io Taken Down by Funko on Monday December 09, 2024 @01:37PM (#42369016)
easyDNS here. Our ears were burning as multiple people have mentioned us in this thread.

If you want to get with a registrar who is actually clueful about takedowns, we can help you out.

Re:Don't Let Your Domain Name Become a "Sitting Duck" on Thursday August 01, 2024 @12:50PM (#41131082)
The Gell-Mann Amnesia is strong in this story and thead.

As I posted on Krebs' article:

This is neither news nor new. There have been prior panics around this “water is wet” type issue going back at least a decade.

(Search up “Floating Domains – Taking Over 20K DigitalOcean Domains via a Lax Domain Import System” – and others).

I also wrote about this on CircleID from the DNS operator’s perspective (“Nameserver Operators Need the Ability to “Disavow” Domains”) – after this same issue was used to DDoS attack another DNS provider by delegating a domain to their DNS servers without having setup an account there, and then doing a DNS reflection attack on that domain. That was over ten years ago.

The fact that people can delegate their own domains to somebody else’s nameservers without ever properly setting up a zone on those nameservers, or ever keeping track of where THEIR OWN DOMAINS point is 100% the responsibility of the domain owner – and to varying degrees a function of their REGISTRAR – who is the only entity that has any control over it.

It’s a weird flex for corporate registrars who purport to be “high touch” and exclusive, to simply shrug their shoulders and turn a blind eye to their own clients’ obviously broken and vulnerable nameserver delegations.

For our part this is specifically one of things we actively monitor and alert our clients about.

Re:VC Says Half of Google Staff Do 'No Real Work' on Thursday May 09, 2024 @11:02AM (#40308939)
easyDNS and OpenDNS have completely different founders. You are probably confused with EveryDNS - was founded by the same person who started OpenDNS.

Older »