I'm sorry but what exactly indicates that it's hacked? It says it belongs to Google Inc, the nameservers end in .google.com, what's wrong here?
Google.ie DNS was hacked (now fixed)
31–38 of 38 posts
Re: Google.ie DNS was hacked (now fixed)
#32If the likes of Google (tech-savvy, security-savvy, loads of cash) can't stay safe, the problem is huge.
The IEDR works on a fax based authorisation system for a lot of procedures which is low hanging fruit for an attacker. Any other type of compromise might be more interesting so curious if they'll release how this happened.
Actually, you can just log directly into the IEDR site to make these changes.
I've done this many times..
Re: Google.ie DNS was hacked (now fixed)
#33I'm sorry but what exactly indicates that it's hacked? It says it belongs to Google Inc, the nameservers end in .google.com, what's wrong here?
The story was posted 2 hours ago, do you think that might be enough time for them to have changed the nameservers back?
Re: Google.ie DNS was hacked (now fixed)
#34I'm sorry but what exactly indicates that it's hacked? It says it belongs to Google Inc, the nameservers end in .google.com, what's wrong here?
The story was posted 2 hours ago, do you think that might be enough time for them to have changed the nameservers back?
Oh, then perhaps it should have linked to a cached page. Now it's just confusing...
Re: Google.ie DNS was hacked (now fixed)
#35Earlier quoted context omitted.
It's definitely NOT Google's servers hacked, since at least one other domain (yahoo.ie) was affected.
Ooo - Interesting. I was about to say that points the finger at the IEDR, but.. "eMarkmonitor Inc" are involved with them too.. # whois yahoo.ie ... person: eMarkmonitor Inc ... That basically means eMarkmonitor or the IEDR were hacked/had passwords stolen.
Markmonitor handles all the ccTLDs (.ie, .co.uk, .de, etc) for almost all the Fortune 500 companies. If they were hacked you'd see more than two changed .ie domains.
Re: Google.ie DNS was hacked (now fixed)
#36Earlier quoted context omitted.
The IEDR works on a fax based authorisation system for a lot of procedures which is low hanging fruit for an attacker. Any other type of compromise might be more interesting so curious if they'll release how this happened.
Actually, you can just log directly into the IEDR site to make these changes. I've done this many times..
Just speculating on an attack vector that's pretty low-tech and open to abuse.
Re: Google.ie DNS was hacked (now fixed)
#37Unfortunately last year Google Ireland barely broke even. A tiny €24mil profit on a turnover of €12.5 BILLION [1] Perhaps some charitable Irish taxpayer could sort their domain name out for them? 1: http://www.irishtimes.com/newspaper/finance/2012/1006/122432...
Not sure how that's relevant to this DNS issue?
Not sure if it's relevant but one of the major "DNS providers" (that preceded Google) also chooses to domicile their operations in Ireland. They could just as well locate anywhere, but I doubt they chose Ireland for tax purposes. That just wouldn't make sense, right?
Re: Google.ie DNS was hacked (now fixed)
#38Earlier quoted context omitted.
Not sure how that's relevant to this DNS issue?
Not sure if it's relevant but one of the major "DNS providers" (that preceded Google) also chooses to domicile their operations in Ireland. They could just as well locate anywhere, but I doubt they chose Ireland for tax purposes. That just wouldn't make sense, right?
Secondarily, the amount of internet services hosted in Dublin makes it a good spot to host DNS servers too.