Re: Alternic takes over Internic traffic

[Paul A Vixie <vixie () vix com>]

> http://www.news.com/News/Item/0,4,12382,00.html

fyi:

Date: Tue, 15 Jul 1997 11:54:02 -0700
From: paul () vix com
X-Mailer: Mozilla 3.0Gold (X11; I; OSF1 V4.0 alpha)
MIME-Version: 1.0
To: courtm () cnet com
CC: paul () vix com
Subject: http://www.news.com/News/Item/0,4,12382,00.html
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

AlterNIC didn't invent the hack that corrupted the www.internic.net
name.  I published a paper on this three years ago, which you can read
in PostScript(tm) form at

        ftp://ftp.vix.com/pri/vixie/bindsec.psf

Note that the bug AlterNIC exploited is the same one covered by several
recent Internet mailing list security bulletins.  Noone associated with
AlterNIC is smart enough to have figured out any of this by themselves.

Recent versions of BIND (4.9.6 and 8.1.1) which are available via...

        http://www.isc.org/isc/

...fix the programming error which allowed this corruption to occur.