Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

All your typos belong to verisign...

Thread Tools
 
Search this Thread
 
Old 16 September 2003, 12:08 PM
  #1  
Andrewza
Scooby Regular
Thread Starter
 
Andrewza's Avatar
 
Join Date: Jan 2002
Posts: 667
Likes: 0
Received 0 Likes on 0 Posts
Post

http://www.merit.edu/mail.archives/nanog/msg13603.html

Lovely...
Old 16 September 2003, 01:11 PM
  #2  
HHxx
Scooby Regular
 
HHxx's Avatar
 
Join Date: Nov 2001
Posts: 2,576
Likes: 0
Received 0 Likes on 0 Posts
Post

How lovely. My mailservers are really gonna love this
Old 16 September 2003, 01:16 PM
  #3  
shunty
Scooby Regular
 
shunty's Avatar
 
Join Date: Aug 2001
Location: wakefield
Posts: 2,082
Likes: 0
Received 0 Likes on 0 Posts
Wink

andrew, yhm

shunty
Old 16 September 2003, 01:25 PM
  #4  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

Am I off track or does Internet Explorer do this already?
Old 16 September 2003, 01:33 PM
  #5  
fast bloke
Scooby Regular
 
fast bloke's Avatar
 
Join Date: Nov 2000
Posts: 26,619
Likes: 0
Received 0 Likes on 0 Posts
Exclamation

You are as always correct Jack. Does't work very well though
Old 16 September 2003, 02:10 PM
  #6  
Andrewza
Scooby Regular
Thread Starter
 
Andrewza's Avatar
 
Join Date: Jan 2002
Posts: 667
Likes: 0
Received 0 Likes on 0 Posts
Post

No, instead of returning NXDOMAIN for www.thisdomaindoesntwork.com, which is the correct thing to do, it returns A record 64.94.110.11 which means IE thinks it exists, connects to that IP and gets redirected to that search engine, IE's can be turned off, this cannot.

Also Hmm, Scoobynet's filtered that lovely URL that does cross site scripting on their search engine (relatively harmless, but funny)

It also means technically user@thisdomaindoesntwork.com is a valid email address, how many mail servers check the domain exists before accepting mail from an address. Score one for spammers.

And even with a valid domain that you don't want mail back to:
spammer.com IN MX mail.thisdomaindoesntwork.com
Score two for spammers.


[Edited by Andrewza - 9/16/2003 2:15:02 PM]
Old 16 September 2003, 02:10 PM
  #7  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

Oh good. I thought they were going to target people like me who use typo's in their URL's. I have www.californear.com and get quite a few accidental visitors.

Trending Topics

Old 16 September 2003, 02:11 PM
  #8  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

Thanks Andrew, makes sense.
Old 16 September 2003, 04:18 PM
  #9  
carl
Scooby Regular
 
carl's Avatar
 
Join Date: May 1999
Posts: 7,901
Likes: 0
Received 0 Likes on 0 Posts
Post

A side effect is that if you mistype a URL, IE will think it's valid and store it in the autocomplete history. Great.

BTW I'm not sure it will affect spam that much. AFAIK most mailservers, if they do anything, do a RDNS lookup on the IP addx and make sure it matches the sender's domain in the SMTP envelope. Got caught out by this when doing direct MX via NTL broadband.
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
Imprezard
ScoobyNet General
2
14 January 2002 10:15 PM
Jerome
Non Scooby Related
4
27 June 2001 06:34 PM
Neil Smalley
Non Scooby Related
4
04 June 2001 02:17 AM
Neil Smalley
ScoobyNet General
3
18 February 2000 10:02 PM



Quick Reply: All your typos belong to verisign...



All times are GMT +1. The time now is 11:03 PM.