Earlier quoted context omitted.
Which would imply that their backend was compromised, not just DNS.
The CDN could have simply refreshed its DNS cache couldn't it? That would mean it loaded the files from somewhere else.
Malaysia Airlines Defaced - 404 Plane Not Found
21–30 of 45 posts
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#22Earlier quoted context omitted.
The CDN could have simply refreshed its DNS cache couldn't it? That would mean it loaded the files from somewhere else.
Unless there was something horribly wrong with their setup, akamai would have prevented that from happening.
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#23Re: Malaysia Airlines Defaced - 404 Plane Not Found
#24Earlier quoted context omitted.
Unless there was something horribly wrong with their setup, akamai would have prevented that from happening.
I'm not sure how they are supposed to prevent this. If you have access to the dns, you can change the record for the origin server that the cdn pulls from. Nothing "horribly wrong" with that.
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#25"The browser window of the website" It is the first time i am hearing such a definition.
"It's 'homepage' not 'browser window'... unless you're 80"
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#26Earlier quoted context omitted.
The job of a journalist is to fact-check and separate fact from fiction. Which is to say, when the subject of an article claims something, you should probably not print it verbatim without thinking it through at least a little bit, and maybe determine the credibility of what's being said. It is not the job of a journalist to regurgitate sources blindly. Otherwise... hey journalists, I am literally the second coming o…
> hacked by a group claiming be aligned with the Islamic State extremist group The article claims that the website was hacked by a group claiming to be aligned with the Islamic State. > hey journalists, I am literally the second coming of Jesus, you guys should interview me and tell people I'm the Son of God. Good journalism would be to report that you are claiming to be Jesus. Which is what happened here; they repor…
Just reporting ( alarming / scandalous ) claims have been usually called tabloid journalism.
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#27Earlier quoted context omitted.
Not really, the page is being served from MAS's own servers now.
Not if the other comment by... you... about it being served by an external CDN is correct. HSTS could easily stop a CDN from picking up a bad version during a DNS hijack.
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#28Earlier quoted context omitted.
The job of a journalist is to fact-check and separate fact from fiction. Which is to say, when the subject of an article claims something, you should probably not print it verbatim without thinking it through at least a little bit, and maybe determine the credibility of what's being said. It is not the job of a journalist to regurgitate sources blindly. Otherwise... hey journalists, I am literally the second coming o…
In your example journalists would say that you claim to be the son of god. They wouldn't say that you are the son of god. You seem to be asking journalists to say "he claims to be the son of god (but he isn't, obvs)" which is asking th journalists to provide information they don't have.
Re: Malaysia Airlines Defaced - 404 Plane Not Found
#29Re: Malaysia Airlines Defaced - 404 Plane Not Found
#30Earlier quoted context omitted.
I'm not sure how they are supposed to prevent this. If you have access to the dns, you can change the record for the origin server that the cdn pulls from. Nothing "horribly wrong" with that.
Akamai makes you to set your own DNS server for it to pull records from, the domain getting hijacked should not have any effect on what that DNS server is returning.
>It added that its domain name system was compromised.
sounds like their DNS server was compromised.
Also, I've never worked with Akamai, but every cdn I have worked with just follows the ns records and resolves against that, which could be changed with access to the domain/registrar. Does Akamai not do that?