Archives

April 2004 (7)
March 2004 (12)
February 2004 (12)
January 2004 (22)
December 2003 (19)
November 2003 (16)
October 2003 (26)
September 2003 (18)
August 2003 (38)
July 2003 (80)
June 2003 (13)
May 2003 (24)
April 2003 (76)
March 2003 (75)
February 2003 (51)
January 2003 (73)

Category

Family (5)
FYI (18)
Games (2)
Geek (88)
Geographic (3)
Hacks (13)
Home (15)
Humor (54)
Ideas (20)
Ideaspace (15)
Local (15)
Metadata (10)
Microsoft (2)
MovableType (5)
Nitwits (66)
PKI (2)
Politics (22)
Quotes (3)
RDF (15)
RSS (4)
Security (3)
Semantic Web (13)
Site Info (13)
Social Networks (1)
Spam (9)
Sysadmin (1)
Tips (2)
Tivo (2)
TMFTOTHD (1)
To Do (1)
Unlisted (1)
Web (3)
Windows (1)

Local

« MetroBlogs »
DC metroblogs
beltway bloggers

Links


Assorted bits

Blogroll Me!
GeoURL
Listed on BlogShares




September 30, 2003

Yet another stupid idea

It seems Network Solutions, part of Verisign, has added what's known as a wildcard A record to the root DNS servers.

For the non-geeks out there this means they've added a hack that confuses how web sites are found.

Before this hack when you tried loading a web page with the wrong URL it would fail with the familiar 404 page. Now it resolves to Versign's advertisement page.

Why is this bad you say?

Think of it this way, let's say you try sending a fax and accidentally dial the wrong number. If there's no fax machine at that number your machine will beep and/or print an error. This way you'll know right away the fax didn't go through. You can double-check the number and try again. It'd be a real disaster if the phone company started redirecting your faxes to a special wrong-number fax machine, wouldn't it? Your fax machine would think the fax went through! To the wrong number, but you wouldn't see an error. If your machine is smart enough and you're dilligent enough you might check the tranmission receipt. Yeah right.

Before if you tried using the wrong URL you'd get an error. Now if you try the wrong URL you get a Versign advertising page.

From a geek perspective this has even worse complications. But it's one that affects mere mortals as well. By putting up this wildcard answer-anything address they're making it easier for spammers to fill your inbox with junk mail and viruses!

Before Versign made this hack your mail software could be configured to check if the person sending you mail was actually coming from a real network domain. More often than not spammers send mail that's incapable of receiving replies. They'd forge the outgoing address to a non-existant domain. Your mail server could do a quick lookup and if the domain was bogus they could immediately block the mail as junk. Now that Verisign has screwed things up you'll be getting more spam. Idiots.

This is yet another example of marketing idiots run amok with technology. Instead of asking if what they're doing will cause problems they just go ahead and do it. All for the sake of peddling some advertising junk.

For more on this read: nsi horror stories, All your *.COM./*.NET. are belong to us and IAB's response.

What this boils down to is Versign is abusing one of the most important aspects of the Internet. They've deliberately broken what was an otherwise important and valuable part of the Internet. They've done this for no other reason that to spam you with advertising. This is wrong and it must be returned to it's previous state.

Geek
Perma  | TrackBack (0) | 08:27 AM  | xml

Navigation

Recent Entries

America and Europe: Vive la différence?
Server changes afoot
Diet behavior mod
Googling for sensitive info
Outlook 2003 and IMAP, a marriage made in Hell
Bike to Work Day, May 7th
Speakeasy rocks
Zippo USB?
When geographic data is nowhere 'near' correct
Local campaign contributions

User comments
Trackbacks

Contact

send me an e-mail E-mail
chat with me using MS messenger MSN Messenger
chat with me via AIM America Online
chat with me on ICQ ICQ
chat with me on Yahoo! Yahoo
Add my vCard to your electronic addressbook vCard
Friend of a Friend FoaF

Syndication

XML  RDF  CDF

Comments

XFML

Extra Stuff

foaf
vCard
pgp info
Linked In
Powered by
Movable Type 2.64