Live data from Hacker News

Malaysia Airlines Defaced - 404 Plane Not Found

wsj.com

21–30 of 45 posts

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#21
post #19

Earlier quoted context omitted.

Which would imply that their backend was compromised, not just DNS.

The CDN could have simply refreshed its DNS cache couldn't it? That would mean it loaded the files from somewhere else.

Unless there was something horribly wrong with their setup, akamai would have prevented that from happening.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#22
post #21

Earlier quoted context omitted.

The CDN could have simply refreshed its DNS cache couldn't it? That would mean it loaded the files from somewhere else.

Unless there was something horribly wrong with their setup, akamai would have prevented that from happening.

I'm not sure how they are supposed to prevent this. If you have access to the dns, you can change the record for the origin server that the cdn pulls from. Nothing "horribly wrong" with that.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#23
post #9
post #8

HSTS could prevent this from working.

Not really, the page is being served from MAS's own servers now.

Not if the other comment by... you... about it being served by an external CDN is correct.

HSTS could easily stop a CDN from picking up a bad version during a DNS hijack.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#24
post #22
post #21

Earlier quoted context omitted.

Unless there was something horribly wrong with their setup, akamai would have prevented that from happening.

I'm not sure how they are supposed to prevent this. If you have access to the dns, you can change the record for the origin server that the cdn pulls from. Nothing "horribly wrong" with that.

Akamai makes you to set your own DNS server for it to pull records from, the domain getting hijacked should not have any effect on what that DNS server is returning.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#26
post #17

Earlier quoted context omitted.

The job of a journalist is to fact-check and separate fact from fiction. Which is to say, when the subject of an article claims something, you should probably not print it verbatim without thinking it through at least a little bit, and maybe determine the credibility of what's being said. It is not the job of a journalist to regurgitate sources blindly. Otherwise... hey journalists, I am literally the second coming o…

> hacked by a group claiming be aligned with the Islamic State extremist group The article claims that the website was hacked by a group claiming to be aligned with the Islamic State. > hey journalists, I am literally the second coming of Jesus, you guys should interview me and tell people I'm the Son of God. Good journalism would be to report that you are claiming to be Jesus. Which is what happened here; they repor…

Traditionally good journalism includes credibility checks and at least gives some kind of possibility to see uncertain facts in bigger context.

Just reporting ( alarming / scandalous ) claims have been usually called tabloid journalism.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#27
post #9

Earlier quoted context omitted.

Not really, the page is being served from MAS's own servers now.

Not if the other comment by... you... about it being served by an external CDN is correct. HSTS could easily stop a CDN from picking up a bad version during a DNS hijack.

MAS's CDN that is. The same CDN they were using before the hack even happened.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#28
post #16

Earlier quoted context omitted.

The job of a journalist is to fact-check and separate fact from fiction. Which is to say, when the subject of an article claims something, you should probably not print it verbatim without thinking it through at least a little bit, and maybe determine the credibility of what's being said. It is not the job of a journalist to regurgitate sources blindly. Otherwise... hey journalists, I am literally the second coming o…

In your example journalists would say that you claim to be the son of god. They wouldn't say that you are the son of god. You seem to be asking journalists to say "he claims to be the son of god (but he isn't, obvs)" which is asking th journalists to provide information they don't have.

My local newspaper stretched it a bit further by saying that the website was defaced bt "sympathizers of IS". Which is doubly funny, because they obviously took the bait.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#29

"The browser window of the website" It is the first time i am hearing such a definition.

I enjoyed the sole comment on the article at the time too: "It's 'homepage' not 'browser window'... unless you're 80"

It's actually called "Page title" though.

Re: Malaysia Airlines Defaced - 404 Plane Not Found

#30
post #24
post #22

Earlier quoted context omitted.

I'm not sure how they are supposed to prevent this. If you have access to the dns, you can change the record for the origin server that the cdn pulls from. Nothing "horribly wrong" with that.

Akamai makes you to set your own DNS server for it to pull records from, the domain getting hijacked should not have any effect on what that DNS server is returning.

I may be missing something, but this:

>It added that its domain name system was compromised.

sounds like their DNS server was compromised.

Also, I've never worked with Akamai, but every cdn I have worked with just follows the ns records and resolves against that, which could be changed with access to the domain/registrar. Does Akamai not do that?

Post reply on HN