Microsoft admits security hole

Matt Cramer cramer at unix01.voicenet.com
Tue Jan 30 09:12:07 PST 2001


On Tue, 30 Jan 2001, Michael Pollak wrote:


> INTERNATIONAL ECONOMY: Hackers disrupt Microsoft sites
>
> Financial Times, Jan 29, 2001
>
> By ANDREW HEAVENS
>
> Microsoft admitted hackers had disrupted its websites for the second day
> running, using a security hole its in own computer networks.
>
> The announcement will come as a severe embarrassment to the software
> company which has just launched a Dollars 200m (Pounds 137m) advertising
> campaign, touting its e-commerce systems with the slogan "always reliable
> never needy".

M$ actually created some back-up DNS servers on a different network. How innovative!

bash-2.03$ dig microsoft.com @a.root-servers.net

; <<>> DiG 2.0 <<>> microsoft.com @a.root-servers.net ;; ->>HEADER<<- opcode: QUERY , status: NOERROR, id: 10 ;; flags: qr rd ; Ques: 1, Ans: 0, Auth: 8, Addit: 8 ;; QUESTIONS: ;; microsoft.com, type = A, class = IN

;; AUTHORITY RECORDS: microsoft.com. 172800 NS DNS4.CP.MSFT.NET. microsoft.com. 172800 NS DNS5.CP.MSFT.NET. microsoft.com. 172800 NS DNS7.CP.MSFT.NET. microsoft.com. 172800 NS DNS6.CP.MSFT.NET. microsoft.com. 172800 NS Z1.MSFT.AKADNS.COM. microsoft.com. 172800 NS Z2.MSFT.AKADNS.COM. microsoft.com. 172800 NS Z6.MSFT.AKADNS.COM. microsoft.com. 172800 NS Z7.MSFT.AKADNS.COM.

;; ADDITIONAL RECORDS: DNS4.CP.MSFT.NET. 172800 A 207.46.138.11 DNS5.CP.MSFT.NET. 172800 A 207.46.138.12 DNS7.CP.MSFT.NET. 172800 A 207.46.138.21 DNS6.CP.MSFT.NET. 172800 A 207.46.138.20 Z1.MSFT.AKADNS.COM. 172800 A 216.32.118.104 Z2.MSFT.AKADNS.COM. 172800 A 32.96.80.17 Z6.MSFT.AKADNS.COM. 172800 A 207.229.152.20 Z7.MSFT.AKADNS.COM. 172800 A 213.161.66.158

;; Sent 1 pkts, answer found in time: 13 msec ;; FROM: unix01 to SERVER: a.root-servers.net 198.41.0.4 ;; WHEN: Tue Jan 30 12:08:03 2001 ;; MSG SIZE sent: 31 rcvd: 329

Whoa - 4 new servers (*.akadns.com) on 4 differently routed networks!

Matt

-- Matt Cramer <cramer at voicenet.com> http://www.voicenet.com/~cramer/ He who makes his own liberty secure must guard even his enemy from oppression; for if he violates this duty he establishes a precedent that will reach to himself.

-Thomas Paine



More information about the lbo-talk mailing list