CircleID

Comments

Nation of Cameroon Typo-Squats the Entire .com Space

• Comment posted Aug 09, 2006 1:52 am PDT — by Carl Byington
  I think that the BIND root-delegation-only option was added specifically to deal with the Verisign .com issue, but it nicely handles this one as well. http://www.isc.org/products/BIND/delegation-only.html contains a suggested list of exceptions, and .cm is not on that list. Anyone…

Domain Names Registered Globally Now Over 138 Million

• Comment posted Aug 30, 2007 10:53 pm PDT — by Carl Byington
  Whenever I see such headlines of "total domain names hit new high", I read that as "spammers continue to register millions of junk names".

Microsoft's Offer to Buy Yahoo: An Anti-Spam Point of View

• Comment posted Feb 05, 2008 6:33 am PST — by Carl Byington
  Just a waste of time and effort. Hotmail currently publishes ~all form hotmail.com. 3600 IN TXT "v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all" So if we ask "should ip address a.b.c.d be sending email from the hotmail.com domain", hotmail explicitly answers…

New Generic Top-Level Domains and Internet Standards

• Comment posted Jul 08, 2008 9:51 pm PDT — by Carl Byington
  The following ccTLDs have MX records: ai # Anguilla as # American Samoa bj # Benin cf # Central African Republic dj # Djibouti dm # Dominica gp # Guadeloupe gt # Guatemala hr # Croatia/Hrvatska io # British Indian…

Not a Guessing Game

• Comment posted Jul 16, 2008 2:56 am PDT — by Carl Byington
  note, if you can do a "dig porttest.dns-oarc.net in txt" from a client of that router or any other DNS server, you can learn a lot about how random its UDP ports are. That port test seems to claim it…

Study Assesses Potential Impact of DNSSEC on Broadband Consumers, Results Not Good

• Comment posted Sep 17, 2008 12:52 am PDT — by Carl Byington
  Yes, the customer will be talking to their provider's dns server, but eventually those questions will be asking for dnssec answers, and it is those dnssec answers that may or may not make it back thru the residential gateway proxy…

Spam Volumes Dropped by Two-Thirds After Major Spam Hub Shut Down

• Comment posted Nov 14, 2008 11:48 pm PST — by Carl Byington
  host canadianpharmacycorp2.com canadianpharmacycorp2.com has address 208.72.168.23 curl http://canadianpharmacycorp2.com/welcome.php 2>/dev/null | grep TITLE License Pharmacy Online

• Comment posted Nov 14, 2008 1:30 am PST — by Carl Byington
  > Not sure where you came up with that From a bgp speaking router. > BGP routing table entry for 208.66.192.0/22 > 3277 3216 3549 26780 Your own test via routeviews shows them connected via as3549 gblx.net. Or am I…

• Comment posted Nov 13, 2008 5:29 pm PST — by Carl Byington
  From looking at the bgp logs, it seems that mccolo never lost connectivity. They brought up a new connection via Los Nettos before dropping (or being dropped by) HE. show ip bgp 208.66.194.0 7397 226 26780

The Problem With HTTPS SSL Runs Deeper Than MD5

• Comment posted Jan 05, 2009 4:40 pm PST — by Carl Byington
  In the specific case of http://www.wachovia.com/, they used http to deliver the original form to the browser. However, that content includes form method="post" action="https://onlineservices.wachovia.com/auth/AuthService" which should send the user credentials to wachovia wrapped in ssl. It would be nice if…