Purloined Domain Name Is an Unsolved Mystery
556138
In the latest case of Internet names being hijacked, panix.com saw its name slip out of its control and become the center of a cyberhunt to get it back.
97426
Rumors abound linking Ask Jeeves and Firefox.
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
481357
(InfoWorld) - With tropical storm Ernesto now blowing off the coast of Florida, Internet security experts are warning that fraudsters may be hard at work claiming Ernesto-related Web site domains. On Tuesday, 18 domains related to the storm became live, said Johannes Ullrich, chief research officer at the SANS Institute. They include such names as Ernestoinsurance.com, Ernestomoney.com, and Ernestodamage.com. Ullrich's Web posting on this topic can beÂ found here. Scammers began cashing inÂ on natural disasters in a widespread way following the December 2004 earthquake and Tsunamis that killed hundreds of thousands in southeast Asia, Ullrich said. Last year there wereÂ reports of large-scale fraudÂ in the weeks after Hurricane Katrina devastated New Orleans and parts of the U.S. Gulf Coast. In September, the U.S. Federal Bureau of Investigation warned that more than half of the Hurricane Katrina aid sites that it had reviewed were registered to people outside of the U.S. and likely to be fraudulent. SANS saw about 1,000 Katrina-related domains registered in the wake of Hurricane Katrina, Ullrich said. The majority of these domains were set up for what he called "domain parking," an attempt to make money by placing ads on a Web site that surfers seem likely to stumble upon. Ernestoinsurance.com, for example was registered by Julian Luby a graduate student in Portland, Oregon, who said he registered between 30 and 50 Ernesto-related domains, beginning Sunday. Luby registered the domains for the dual purposes of providing information on the storm and raising money for a group of social networking sites he is developing. Luby, who also registered the Ernestomoney.com and Ernestodamage.com sites, has listed many of his domains for sale, asking from $400 to $1,000 per domain. He is also maintaining a blog of Ernesto-related news on some of the sites. On one day shortly after Hurricane Katrina made landfall, more than 400 Katrina-related domains were registered. Ultimately dozens of the sites proved to be fraudulent, and Ullrich is worried that this pattern may repeat itself with Ernesto. However, it seems unlikely that Ernesto will attract the attention of Katrina, which was one of the worst natural disasters in U.S. history. By Tuesday, the National Hurricane Center had downgraded Ernesto from hurricane to Tropical storm. "It doesn't look like Ernesto will amount to much, so I don't think we'll see much in terms of domain fraud," Ullrich said. But this is a pattern he expects scammers to repeat as other storms form during this 2006 hurricane season. "Basically they're waiting for the right hurricane to come around," he said. In any case, anyone looking to register Ernesto domain names may already be late to the game. The U.S. National Weather Service publishes its list of hurricane names years in advance, and many scammers have pre-registered their fraudulent sites, according to Rich Miller, an analyst with Web site tracking service Netcraft Ltd. "A lot of the premium names are long gone," he said. That list of National Weather Service's list of Hurricane names can beÂ found here.
612800
Over the past few years, the Internet has seen new domain names such as '.eu' for Europe and '.travel' for the travel industry.Comment
186682
Network Solutions is standing by its controversial policy of automatically registering some domain names that are the subject of searches on the company&#39;s Web site.After testing the concept in December, the domain name registration company quietly began doing this over the past weekend. Potential customers who used the company&#39;s &quot;Find a domain&quot; search engine would suddenly find the domain names they had been searching for were registered to Network Solutions itself, making them temporarily unable to purchase the domain from another provider.Industry watchers were quick to blast the new policy, saying that it either forced searchers to become Network Solutions customers, or exposed their ideas to scammers, who would be able to snatch up the domains the second they were released. &quot;It is a deplorable action that Network Solutions would announce potential domain names to the entire world,&quot; wrote Jay Westerdal, on the DomainTools blog.If cutting down on domain name scamming was the goal, &quot;someone should be fired over the implementation,&quot; wrote Andrew Allemann, a blogger with Domain Name Wire .On Wednesday, Network Solutions CEO Champ Mitchell said that his company planned to change the site&#39;s design to ensure that users are notified of this policy. The company is also looking into adding a feature that would make give users the option of keeping their searches un-registered, although that would require cooperation from domain name registries, he said.Ironically, Mitchell said that Network Solutions came up with the search registration process in an effort to cut down on the scamming that has plagued the industry over the past two years. &quot;We are not trying to make a bunch of money off of this,&quot; he said.By registering the domains immediately, Network Solutions is keeping them out of the hands of scammers who take advantage of a loophole in the way names are registered. It has become increasingly common for scammers to register large number of domains for a short period of time and then to keep the ones that generate Web traffic, a practice called domain tasting. Because a domain can be held without charge for up to five days, this practice costs the scammer almost nothing, but it can be lucrative.In another practice, called front running, scammers have found ways -- some of them illegal -- to keep track of domain name searches and then hold onto those domains themselves, hoping to sell them to the people doing the searching.Some critics have said that Network Solutions&#39; new practice amounts to front running, but Mitchell disagrees, saying the point of the system is to protect customers from the front-runners.His company has developed an algorithm, designed to identify legitimate domain name searches and then automatically register the domain names being searched for on behalf of Network Solutions. These domains are held with a Web-page notice saying that they are available for sale for a four-day period. This gives the Network Solutions customer a window of opportunity to purchase the domain before it snatched up by a scammer, Mitchell aid.Mitchell added that if ICANN (Internet Corporation for Assigned Names and Numbers), the organization that oversees the domain name system, would move to cut down on these type of scams, then his company wouldn&#39;t have to engage in this kind of automatic search registration. &quot;We would be perfectly happy to end this process if ICANN or the registries would do something to protect small businesses or other small users,&quot; he said.A $0.25 non-refundable domain name registration fee would probably be enough to make domain tasting or front running unprofitable, he added.
6384
We have a few domains hosted on Network Solutions.  For one reason or another we were in a hurry and just used NetSol as our registrar.  BIG mistake!  They are one *pathetic* organization!  They are a DNS company.  That's what they DO!  Their DNS admin only allows 10 IPs. Of course they don't tell you this when you signup.  You only find out that the UI doesn't allow for additional IPs until try to add them.  To add insult to injury when you try to move AWAY from NetSol by changing your primary and secondary they drop your IP configuration immediately.  You're just out of luck if there are clients which have cached your primary and secondary DNS servers.  Now of course the solution would be  ...
502248
The project supports domain names from different languages and alphabets, such as Arabic and Chinese, that can't be rendered in the ASCII character set.
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
303593
Internet users may soon see two new domain name suffixes in their browser window: &quot;.post&quot; to identify the postal community and &quot;.
450170
Plus: Was Einstein a plagiarist? [News.com Extra]
446227
Slammed for touting unavailable but unlicensed content
451674
It can be difficult to determine who owns pictures on the web. Why not create an attribute for the image tag that clarifies the confusion? In Monkey Bites.
31095
Network Solutions is standing by its controversial policy of automatically registering some domain names that are the subject of searches on the companyâs Web site.
371389
The Internet's key oversight agency is investigating suspicions that insider information is being used to snatch desired domain names before an individual or business can register them.
119349
Internet sleuths are turning their attention to the mystery of Lonelyboy43
494652
A picture caption last week with an article about an invitation-only social networking Web site misstated its address. It is aSmallWorld.net, not aSmallWorld.com.