nanog mailing list archives

RE: Reclaiming hijacked handle


From: Martin Hannigan <hannigan () fugawi net>
Date: Mon, 10 Jun 2002 12:37:44 -0400 (EDT)





The operational signifigance, security, and the latter, my
personal need, have been addressed. The former was the intention,
the latter became the issue.

If for some reason security of ARIN <not necc. NetSol>
isn't an on topic operational subject, feel free to slap
me about.

Thanks to Richard/ARIN for answering both aspects of the
query.

-M


On Mon, 10 Jun 2002, Stephen J. Wilcox wrote:


Am I missing the importance of this somewhere or is this really not worth
100s of list members and the ARIN Director of Operations looking into it?

Steve


On Mon, 10 Jun 2002, Richard Jimmerson wrote:


Hello Martin,

I noticed my handle was hijacked by a company I used
to work for.

There is no match for MH309-ARIN in ARIN WHOIS.

Naturally, I want it back since I went to use it and it's
incorrect.
My old handle, MH309, is now MH569.

Since March of 2001 ARIN has removed many POC handles from
its database that were no longer associated with
registration records.

MH309-ARIN is one of the handles that was removed.

If you wish to have MH309-ARIN reactivated in place of
MH569-ARIN, I would be glad to speak to you about this.

Please contact me off this list.

Best Regards,

Richard Jimmerson
Director of Operations
American Registry for Internet Numbers (ARIN)


-----Original Message-----
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu] On
Behalf Of Martin Hannigan
Sent: Monday, June 10, 2002 10:07 AM
To: nanog () merit edu
Subject: Reclaiming hijacked handle




I noticed my handle was hijacked by a company I used
to work for.

Naturally, I want it back since I went to use it and it's
incorrect.

My old handle, MH309, is now MH569.

Question 1: Did ARIN start expiring unused handles or did
something in the process of the hijack cause my handle to increment up
to 569, which I'm assuming was the next open number in the
in the scheme for 'MH'.

Question 2: If an account is passworded, how were they able to
take it? Does ARIN not ask for a copy of a license or other
photo ID when making voice/fax based changes to POC's?

[ Then again, they could've used my photo from the HR files
  ala I9 documentation ]

Thanks,

-M








Current thread: