Verisign Screws The World

"William Tasso" <ngx.RemoveThis@tbdata.com> wrote in message
news:bk6gai$pu5ed$1@ID-139074.news.uni-berlin.de...
 > Bill Logan wrote:
  > > ...
  > > Verisign for all their evil do not control the dns.
  > > It is simply a wildcard in the dns at the level they do have control
  > > over
  > > ...
  > > I have just run a series of very thourough tests on names I know are
  > > not registered and every time I still get a page cannot be displayed
  > > - I do not get taken to that page you refer to unless I input the IP#!
 >
 > propogation delay? I suspect you will shortly
 >
No delay William - simply a different network - I don't use Verisigns dns -
pure and simple:-)
That means what Verisign does or says pays me no never mind!<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"David Venn-Brown" <davidvb.RemoveThis@ozemail.com.au> wrote in message
news:Pcz9b.3289$vQ1.164103@nnrp1.ozemail.com.au...
 > McWebber wrote:
  > > Does your server reject email from .com and .net that don't exist? Not
any
  > > more it doesn't. Thanks to Verislime now making all domains resolve in
an
  > > apparent effort to hijack the MSN or whatever your default search is for
"no
  > > DNS" results. Now every .net resolves to 64.94.110.11 and by tomorrow I
  > > believe every .com will as well.
  > >
  > > Yes, I've tested it, not-a-real.net or make up your own.
 >
 > Can anyone explain why Verisign can do this and how in really dumb
 > language for me?

Anyone who manages a dns can do it - it has been happening for years, only
not on the same scale is all.
Your local ISP can do it - and overide Verisigns effort if they wish. Simply
by adding a wild card A record to their dns pointing to a single IP# and
then requests to all non registered domains will follow.

 > I'm getting the effect here for both .com and .net. but not .com.au and
 > I don't like it (as much as the 404 page bores me).
..com.au is a sub domain of the cc au which means only the au domain is part
of the root servers zone records. As au is a registered domain Verisigns
efforts cannot touch it. It then follows that all sub domains of au such as
..com.au, .net.au and so on are also immune.

Simple solution if you don't like it take the following two steps
1. Do not use your ISP's dns
2. Do use an alternative dns on a network that does not use the Verisign
root server.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"Bill Logan" <who RemoveThis @what.com> wrote in message news:3f66d684@clear.net.nz...
 >
 > Anyone who manages a dns can do it - it has been happening for years, only
 > not on the same scale is all.
 > Your local ISP can do it - and overide Verisigns effort if they wish.
Simply
 > by adding a wild card A record to their dns pointing to a single IP# and
 > then requests to all non registered domains will follow.

Wrong, because the root servers will now resolve any .net/.com now so the
wildcard will not be checked.

--- contacting nameserver: a.gtld-servers.net [192.5.6.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: b.gtld-servers.net [192.33.14.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: c.gtld-servers.net [192.26.92.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: d.gtld-servers.net [192.31.80.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: e.gtld-servers.net [192.12.94.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: f.gtld-servers.net [192.35.51.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: g.gtld-servers.net [192.42.93.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: h.gtld-servers.net [192.54.112.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: i.gtld-servers.net [192.43.172.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: j.gtld-servers.net [192.48.79.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: k.gtld-servers.net [192.52.178.30]
not-a-real.net A 64.94.110.11
--- contacting nameserver: l.gtld-servers.net [192.41.162.30]
not-a-real.net A 64.94.110.11

 >
 > Simple solution if you don't like it take the following two steps
 > 1. Do not use your ISP's dns
 > 2. Do use an alternative dns on a network that does not use the Verisign
 > root server.

It's not a question of what you do at home, it's what the rest of the world
is doing. It's what your ISP does.


--
McWebber
No email replies read
If someone tells you to forward an email to all your friends
please forget that I'm your friend.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"William Tasso" <ngx.RemoveThis@tbdata.com> wrote in message
news:bk6h78$psup2$1@ID-139074.news.uni-berlin.de...
 > McWebber wrote:
  > > Does your server reject email from .com and .net that don't exist?
  > > Not any more it doesn't. Thanks to Verislime now making all domains
  > > resolve in an apparent effort to hijack the MSN or whatever your
  > > default search is for "no DNS" results. Now every .net resolves to
  > > 64.94.110.11 and by tomorrow I believe every .com will as well.
  > >
  > > Yes, I've tested it, not-a-real.net or make up your own.
 >
 > yep unresolved .com domains now bring up the veri-thing page. I was happy
 > with trial and error domain name searching on product/company/"things I
 > heard down the pub" names. I don't like the way it screws with the
address
 > line in my browser.
So use an alternative dns network:-)


 > they also try to send 3rd party cookies from the page in a poor attempt to
 > collect marketing data.
Dont use their network for your dns

 >
 > Note to data collection agencies: you are welcome to track my net usage
(in
 > all browsers/UAs/connections) and demographic profile - however that
 > information will cost you. subscription deals can be arranged.
 >
I can see em lining up now <holds breath - (not)>
Just joking William - I find it amusing that people are so concerned about
that which is relatively simple to overcome.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

Bill Logan wrote:
 > "William Tasso" <ngx RemoveThis @tbdata.com> wrote in message
 > news:bk6h78$psup2$1@ID-139074.news.uni-berlin.de...
 >
  >>
  >> Note to data collection agencies: you are welcome to track my net
  >> usage (in all browsers/UAs/connections) and demographic profile -
  >> however that information will cost you. subscription deals can be
  >> arranged.
  >>
 > I can see em lining up now <holds breath - (not)>
 > Just joking William - I find it amusing that people are so concerned
 > about that which is relatively simple to overcome.

;o)

back in the heady days of innernet boom (just before the bust) there were
companies queing up to pay £50 a time for 6 months unfettered access to
online activity

now if only we could tie in net activity with physical location activity
(gps ankle bracelets?) and credit card usage - then we may have some
marketing info worth selling.

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

McWebber wrote:
 > and by tomorrow I believe every .com will as well.
 >

some whacky back end they have there.

domain: <a style='text-decoration: underline;' href="http://www.bleakhouses.com" target="_blank">www.bleakhouses.com</a> the first "Did You Mean ?" is:
<a style='text-decoration: underline;' href="http://www.breakhouse.com" target="_blank">www.breakhouse.com</a> - click on it and you get the same page with a different
set of 'did you means'

dead useful - not.

--
William Tasso - <a style='text-decoration: underline;' href="http://WilliamTasso.com" target="_blank">http://WilliamTasso.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"McWebber" <mcwebber.DeleteThis@my-deja.com> wrote in message
news:LtednRyID9LHY_uiXTWJlg@comcast.com...
 > "Bill Logan" <who.DeleteThis@what.com> wrote in message news:3f66a942@clear.net.nz...
  > >
  > > Verisign for all their evil do not control the dns.
 >
 > Yes, they control the root servers.

Sionce when?
They 'own' the .com and .net domains and control the dns for them but the
root servers???? Get on the planet and learn how dns works



  > > As far as your mail is concerned, reject of non existance domains will
 > still
  > > apply as they are a dns lookup function and that is not effected!
 >
 > Yes it is. The domain appears to exist because Verislime has an A record
for
 > every domain. The default action by RFC is when there is no MX to try the
A
 > record, so now every domain appears to be valid.
 >
Well now that is funny - when my bind queries the existance of a non
Registered name I receive a name does not exist. - Perhaps your bind is not
configured right? You do use bind, I assume??<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"Bill Logan" <who.TakeThisOut@what.com> wrote in message news:3f675358@clear.net.nz...
 >
 > "McWebber" <mcwebber.TakeThisOut@my-deja.com> wrote in message
 > news:LtednRyID9LHY_uiXTWJlg@comcast.com...
  > > "Bill Logan" <who.TakeThisOut@what.com> wrote in message
news:3f66a942@clear.net.nz...
   > > >
   > > > Verisign for all their evil do not control the dns.
  > >
  > > Yes, they control the root servers.
 >
 > Sionce when?
 > They 'own' the .com and .net domains and control the dns for them but the
 > root servers???? Get on the planet and learn how dns works

I never said they own the root servers.

   > > > As far as your mail is concerned, reject of non existance domains will
  > > still
   > > > apply as they are a dns lookup function and that is not effected!
  > >
  > > Yes it is. The domain appears to exist because Verislime has an A record
 > for
  > > every domain. The default action by RFC is when there is no MX to try
the
 > A
  > > record, so now every domain appears to be valid.
  > >
 > Well now that is funny - when my bind queries the existance of a non
 > Registered name I receive a name does not exist. - Perhaps your bind is
not
 > configured right? You do use bind, I assume??

I'm looking up directly on the various root servers. Perhaps you're not
querying the root servers and are running your own root server.

--
McWebber
No email replies read
If someone tells you to forward an email to all your friends
please forget that I'm your friend.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"McWebber" <mcwebber.RemoveThis@my-deja.com> wrote in message
news:JPednR1Zc-AgYvuiXTWJkg@comcast.com...
 > "Bill Logan" <who.RemoveThis@what.com> wrote in message news:3f66d684@clear.net.nz...
  > >
  > > Anyone who manages a dns can do it - it has been happening for years,
only
  > > not on the same scale is all.
  > > Your local ISP can do it - and overide Verisigns effort if they wish.
 > Simply
  > > by adding a wild card A record to their dns pointing to a single IP# and
  > > then requests to all non registered domains will follow.
 >
 > Wrong, because the root servers will now resolve any .net/.com
1. Not if there is already a wildcarp - IP# in your ISP'dns
2. Not if you use different networks for name resolotion - Not the root
servers


 > wildcard will not be checked.
Depends entirely how your ISP has their NS bind configured. They CAN
configure it to require all names are verified to exist. In other words to
not accept wild cards 'blindly'
Any ns lookup shows if a name is registered or not!


  > > Simple solution if you don't like it take the following two steps
  > > 1. Do not use your ISP's dns
  > > 2. Do use an alternative dns on a network that does not use the Verisign
  > > root server.
 >
 > It's not a question of what you do at home, it's what the rest of the
world
 > is doing. It's what your ISP does.
 >
B/S - you can, and a growing number of people do, by pass - not use - the
ISP's dns, which by default probably uses the root server network of dns

Anyone can use the available alternatives such as the alternate, (non ICANN)
root servers. Such as installing bind on your own local machine and
configuring it the way YOU want. etc, etc, etc.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"Bill Logan" <who RemoveThis @what.com> wrote in message news:3f6755e1@clear.net.nz...
  > >
 > B/S - you can, and a growing number of people do, by pass - not use - the
 > ISP's dns, which by default probably uses the root server network of dns

Tell you what, you query a - m.gtld-servers.net for a domain that doesn't
exist and see what they respond.

 >
 > Anyone can use the available alternatives such as the alternate, (non
ICANN)
 > root servers. Such as installing bind on your own local machine and
 > configuring it the way YOU want. etc, etc, etc.

Yeah, and when you can convince the world to stop clicking on links in spam
that problem will be solved as well.

--
McWebber
No email replies read
If someone tells you to forward an email to all your friends
please forget that I'm your friend.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"McWebber" <mcwebber.RemoveThis@my-deja.com> wrote in message
news:JDSdnTapltWA-PqiU-KYvg@comcast.com...

 > Yeah, and when you can convince the world to stop clicking on links in
spam
 > that problem will be solved as well.

Yep, and if we concentrate on the real problem (the spammer) and not the
user, or ISP, or host, then that problem will be solved too!
--
Charles Sweeney
<a style='text-decoration: underline;' href="http://www.CharlesSweeney.com" target="_blank">www.CharlesSweeney.com</a><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"Charles Sweeney" <me.DeleteThis@charlessweeney.com> wrote in message
news:bk718a$q5qa0$1@ID-162618.news.uni-berlin.de...
 > "William Tasso" <ngx.DeleteThis@tbdata.com> wrote in message
 > news:bk6h78$psup2$1@ID-139074.news.uni-berlin.de...
 >
  > > yep unresolved .com domains now bring up the veri-thing page. I was
happy
  > > with trial and error domain name searching on product/company/"things I
  > > heard down the pub" names. I don't like the way it screws with the
 > address
  > > line in my browser.
 >
 > Wow! Thank you Verisign!!!
 >
 > I deliberately mistyped one of my domains, and got the verisign page.
 >
 > It suggested the CORRECT domain!!!
 >
 > Think of all those new visitors that previously I would have lost!
 >
 > I love it!!

From the comments here you are in the minority. For some reason people are
getting upset for what I do not know. They seem think Verisign has done
something wrong. I don't like a lot of things Verisign does but in this
case, not only is what they have done perfectly within their rights, it is
something that has been practiced to a lesser degree for years by others -
in fact, anyone who 'owns' a domain can do it within and below their domain.
In reality I also think it can be useful - sure as hell beats those yukky
browser generated not found pages - (I havent had time to modify them!)<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World 

"Bill Logan" <who DeleteThis @what.com> wrote in message news:3f67573b$1@clear.net.nz...
 >
 >
 > From the comments here you are in the minority. For some reason people are
 > getting upset for what I do not know.

Maybe this will explain why:

<a style='text-decoration: underline;' href="http://www.iab.org/Documents/icann-vgrs-response.html" target="_blank">http://www.iab.org/Documents/icann-vgrs-response.html</a>

<a style='text-decoration: underline;' href="http://www.washingtonpost.com/wp-dyn/articles/A996-2003Sep12.html" target="_blank">http://www.washingtonpost.com/wp-dyn/articles/A996-2003Sep12.html</a> has some
details as well.

--
McWebber
No email replies read
If someone tells you to forward an email to all your friends
please forget that I'm your friend.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Verisign Screws The World