I cannot confirm this from all locations. google.ps sometimes resolve to a legitimate Google and other times to the Moroccan server. Does anyone have an idea how could that be possible?
Google.ps domain was hacked
61–70 of 92 posts
Re: Google.ps domain was hacked
#62Re: Google.ps domain was hacked
#63I cannot confirm this from all locations. google.ps sometimes resolve to a legitimate Google and other times to the Moroccan server. Does anyone have an idea how could that be possible?
DNS caching.
Re: Google.ps domain was hacked
#64Re: Google.ps domain was hacked
#65Earlier quoted context omitted.
No it was not. It implies something under Google their control was compromised which was not the case.
Really, it implies any attack or breach that is apparent to users. This is very apparent.
That is not what "hacked" means. If they had really hacked Google their servers and proxied all searches through a system of theirs without letting the users know it would not have been "apparent" yet Google was hacked in the correct sense of the definition.
They were defaced which was directly apparent to users - not hacked. At all.
Re: Google.ps domain was hacked
#66Earlier quoted context omitted.
Hacking a registry is even more alarming.
Not all registries are created equal. I'm a heavy Internet user and I'd get along just fine without the .ps nameservers.
Still, it goes to show that even if you lock down your website, you could still be vulnerable if your registry is vulnerable.
Re: Google.ps domain was hacked
#67Earlier quoted context omitted.
Doesn't look like a fake defacement, google.ps has looked like google since 2009 according to archive.org: http://web.archive.org/web/20090812080241/http://www.google....
Right, but someone just changed the domain to point to a new IP address. So no one hacked Google's server.
Yes, using google's DNS servers go to authenticated google search page.
Re: Google.ps domain was hacked
#68... and thousands of HN readers get infected by a zero-day exploit. Maybe. If you're thinking of submitting a known compromised site to HN, consider instead submitting a third-party site which explains/documents the compromise. Ideally from a respected security research company. This has several benefits: 1. You're not subjecting HN readers to a site under the control of a malicious party who may have done more than…
Now you've got me paranoid.
Re: Google.ps domain was hacked
#69Earlier quoted context omitted.
You're not subjecting HN readers to a site under the control of a malicious party who may have done more than just deface it. I don't see any malicious action here.
How is defacing a page not "malicious"?
I think they meant there was no malware being delivered from visiting the page.
Re: Google.ps domain was hacked
#70Out of six DNS servers, which are authoritative for zone .ps, only one gives out wrong NS records for google.ps . Is it pure luck for that answer to be cached at Google Public DNS, or it possibly had been done by some obscure trick?
EDIT: Ok, on the second thought it seems that the compromised server is just the closest to google. All that is left is to wonder, whether palestine guys did target that server because of it :)