Damn you Murphy's law.
Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
21–30 of 148 posts
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#22I'm trying to figure out how this could have happened, but I control so few IP addresses that many of my DNS entries are manually assigned. And you'd have to be incompetent if you have access to set DNS records and you set them to RFC 1918 addresses. Anyone have any theories on how this could happen?
about ten years ago, apple added a stray record to the apple.com zone
.... a DNAME[1] record
....... that pointed to apple.com
1: https://en.wikipedia.org/wiki/DNAME_record
this had some pretty disastrous results[2]
2: https://mashable.com/archive/apple-tunes-app-store-icloud-pr...
bad things happen everywhere
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#23for uninitiated (me), why is it bad?
Since 2 out of the 7 IPs are 192.168 (private ips), 2/7 visitors to microsoft.com will load the private ones assumign equal weight and not get the page to load.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#24What could a TLA do with this if it had time to plan ahead?
Serve malicious updates from a locally controlled machine, for one. Lord knows about auth.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#25An entry-level admin is now unemployed, just before the holidays.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#26Maybe Sydney tried to breakout…
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#27Through a series of connections I know a guy that knows a guy that works at Microsoft that was made aware and the changes have been reverted. Give 'er 30 minutes TTL ;)
This is my favorite HN comment of 2023.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#28An entry-level admin is now unemployed, just before the holidays.
Nah, if it's already reverted, they're good to go. A post-mortem with how something like that got through will definitely be on the table though.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#29I get it too, with .1.0 as well Name: microsoft.com Address: 192.168.1.1 Name: microsoft.com Address: 192.168.1.0 "ooopsie!"
1.1 is gone but I'm still seeing the 1.0 entry.
Re: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
#30For the uninitiated, can some traffic get sent to 192.168.1.1. Is it round robin?