North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: NXDOMAIN data needed for survey

  • From: Martin Hannigan
  • Date: Fri Mar 21 02:31:56 2008
  • Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=bZfJUDiWu6xNq/tlqBnmKKJbrnTO3hLUOOjQTg9Gtdo=; b=HmAQiL4ashf6XdxrYVKPgFYbyOMmZwz7HSKiZReLXAkK9FybWZ8mbeBhxpBtAEE6WNnEyAS4TmaTPaa1Dgu21Juu4TdQyquM6taB+Lw25jrdZjT5zxsrpxmueyNpADQapD7A0uymlLRGygaAEYS1D34vHdyE+0/nXCWQZTSU/mw=
  • Domainkey-signature: a=rsa-sha1; c=nofws;; s=beta; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=HIyz+1UW0xPVUMPPRyhC0FPY0OBrK+wog4wvECXW1pj6o76sRtMIB41oEVSYKcrVhxgPJJoePzRvdaOKRv0ch+hORhiWeBsZLigTNmekDNekbF0OYjjRqk1NtXMWiA7Ldm63iPFUtQRaPmpW1dFgE1neUPNbCF2uRxShGukxxF8=

On Thu, Mar 20, 2008 at 3:22 PM, Steve Atkins <[email protected]> wrote:

[ snip ]

>  I wonder who he's paying for his nxdomain data, and whether that
>  someone is authorized to sell it. It strikes me that it's just a small
>  step for someone with access to ISP internal data to go from selling
>  DNS logs to selling usernames too.

This is tip of the iceberg level activity. These people are exploiting
"unique identifiers" i.e. domains names and IP addresses. We need to
fear them, and respond appropriately. They are disruptive to the
Internet, to the users and commerce.