Live data from Hacker News

Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

thenextweb.com

11–20 of 105 posts

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#12
The twitter frontpage is completly broken for me. Static assets like css and javascript are served by twimg.com, which are now missing. If SEA has access to a server which can take the load of twimg.com, they can inject their Javascript and possible exploits to ALL twitter users...

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#13
Woah! Has Verisign been hacked?

$ whois twitter.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information.

TWITTER.COM.GET.ONE.MILLION.DOLLARS.AT.WWW.UNIMUNDI.COM

TWITTER.COM

And then:

$ whois verisign.com

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information.

VERISIGN.COM.MIGHT.SUCK.FYRAE.COM

VERISIGN.COM

I get really crazy responses like this for almost every major site I try (cnn.com, yahoo.com, google.com).

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#15
US is about to bomb Syrian military assets so this is Iran's response. The SEA is clearly Iranian. Email them something in Farsi or PM one of their propaganda accounts on youtube they usually answer.

last time I checked ns1.syrianelectronicarmy.com was hosted out of Russia and includes " qatar-leaks.com" which seems to have disappeared

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#17
post #13

Woah! Has Verisign been hacked? $ whois twitter.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. TWITTER.COM.GET.ONE.MILLION.DOLLARS.AT.WWW.UNIMUNDI.COM TWITTER.COM And then: $ whois verisign.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be regi…

I never use CA's so didn't notice this, I only use the twitter app which Moxie Marlinspike and Charlie Miller hardened with pinned certs to avoid all authorities

Also this: http://stackoverflow.com/questions/4415269/suspicious-result...

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#18

As someone asked in the comments of the article asked (no response yet), I'm curious myself... > " twimg.com is a domain used by Twitter which is an widget company that is part of a network of sites, cookies, and other technologies used to track you, what you do and what you click on, as you go from site to site, surfing the Web. Does that not mean that SEA will be intercepting this data? "

The tweet button/widget is served by http://platform.twitter.com so this shouldn't be a problem as long as the twitter.com nameservers are unchanged.

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#19
post #13

Woah! Has Verisign been hacked? $ whois twitter.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. TWITTER.COM.GET.ONE.MILLION.DOLLARS.AT.WWW.UNIMUNDI.COM TWITTER.COM And then: $ whois verisign.com Whois Server Version 2.0 Domain names in the .com and .net domains can now be regi…

no.

VERISIGN.COM.MIGHT.SUCK.FYRAE.COM is a subdomain of FYRAE.com

See this: https://news.ycombinator.com/item?id=6204867

Re: Twitter, NYT Whois and DNS altered, Syrian Electronic Army takes responsibility

#20
post #6

How hard is this to do... I ask because I find it harder to believe that they are responsible for this. Just like I don't trust the YouTube videos either. I would find it more likely that three letter agencies are involved as PR.

I don't buy it either. Seems fishy.

Fishy enough that the SEA's own Twitter account is gloating about it?
Post reply on HN