Log in

View Full Version : Uhmm, am I reading this right? Using a DNS lookup tool now days is considerd a hack?


SUBMAN1
01-17-08, 03:43 PM
What technology <...insert expletive here...> idiot judge was ruling over this case? Careful about using a DNS lokup tool you big l33t Hax0rs out there! You could get in trouble!

Rediculous!

http://www.theregister.co.uk/2008/01/17/anti_spam_activist_lawsuit/

-S

StdDev
01-17-08, 03:55 PM
From what the article describes.. his "crime" would be equivalent to looking up someones phone number in the telephone directory.. and then publishing that information! [GASP]

SUBMAN1
01-17-08, 04:03 PM
From what the article describes.. his "crime" would be equivalent to looking up someones phone number in the telephone directory.. and then publishing that information! [GASP]Yeah - exactly! [SECOND GASP!]

-S

StdDev
01-17-08, 04:21 PM
Our network manager just made the analogy of telling a carpenter that hammers are now illegal.

When DNS tools are outlawed, only outlaws will use DNS tools :know:

SUBMAN1
01-17-08, 04:52 PM
That is a perfect analogy. :up:

I sent this off to a couple people at Microsoft. The dns devs will get a kick out of it.

-S

antikristuseke
01-17-08, 05:40 PM
Oh wow, this is the stupidest thing i have read all day:damn:

FIREWALL
01-17-08, 05:54 PM
I'm kinda computer terminology DUMB.

What doe's DNS and DNS look up tool mean ?

sonar732
01-17-08, 05:59 PM
:huh::huh::huh::huh::huh::arrgh!::arrgh!::arrgh!:: arrgh!:

SUBMAN1
01-17-08, 06:45 PM
I'm kinda computer terminology DUMB.

What doe's DNS and DNS look up tool mean ?Stands for Domain Name Server, and when you type an address like www.subsim.com (http://www.subsim.com), your computer doesn't know what www.subsim.com (http://www.subsim.com) is, so it goes out and queries the DNS server and asks the actual address. The DNS server would then return an address of http://207.44.214.111 so it knows where to go. Names like www.subsim.com (http://www.subsim.com) are only for your benefit so you can remember where to go to find web sites, but your computer has no idea what that means and really needs to know the actual IP address to find it.

-S

PS. WOuld this judge rule that I hacked something by posting subsim's IP address? She probably would - idiot.

FIREWALL
01-17-08, 07:18 PM
I'm kinda computer terminology DUMB.

What doe's DNS and DNS look up tool mean ?Stands for Domain Name Server, and when you type an address like www.subsim.com (http://www.subsim.com), your computer doesn't know what www.subsim.com (http://www.subsim.com) is, so it goes out and queries the DNS server and asks the actual address. The DNS server would then return an address of http://207.44.214.111 so it knows where to go. Names like www.subsim.com (http://www.subsim.com) are only for your benefit so you can remember where to go to find web sites, but your computer has no idea what that means and really needs to know the actual IP address to find it.

-S

PS. WOuld this judge rule that I hacked something by posting subsim's IP address? She probably would - idiot.

THX SUBMAN1 :up:

TarJak
01-17-08, 09:39 PM
In reading this: http://www.spamsuite.com/node/351 which elaborates futher on the case it would appear that the ruling really swings off these three findings:
8. The intended purpose of a zone transfer is primarily one of redundancy. Zone
-3-
transfers are the means by which a primary authoritative domain name server copies the domain structure to a secondary authoritative domain name server for the purpose of redundancy. Generally, both of those servers pertain to the same domain. In all intended uses of a zone transfer, the secondary server is operated by the same party that operates the primary server. A secondary intended purpose for zone transfers is to permit trouble shooting in which case zone transfers may sometimes be undertaken via the manually conducted host -l command. In those instances, however, the person conducting the diagnosis acts with the authorization of the operator of the system and is usually the network administrator for the system.

9. The evidence presented at trial produced no treatises or authoritative sources to suggest that any other intended purpose exists for a zone transfer. The academic and technical resources put in evidence at trial uniformly indicate that zone transfers have no intended purposes beyond those mentioned above.

10. The literature available on the subject all refers to access attempts such as the host -l command issued by Ritz under the circumstances of this case as "unauthorized." Microsoft itself, as well as various other, authorities all refer to zone transfers conducted by an individual other than the network administrator or an authoritative name server as "unauthorized."

Therefore the question of law at issue is one of authorised use of the tool. which given the evidence or lack of counter evidence shown would mean that the ruling is still in question.

I like the analogy that was posted in the blog below the decision:


Here is an analogy of the zone transfer (correct me if you disagree):

A company has a large office building in downtown. The front doors of said building are open. Any citizen (employee or not) may walk into the front doors. Once inside, the citizen is standing in a lobby. This is a public waiting area.

There can be a security guard preventing further access into the building, or it could be unguarded allowing access. However, if there is an office directory hanging on the wall, telling who is in what office, the citizen may look at this because it is in the public domain. Using the information from this directory to commit a crime does not make the use of the directory a crime. And if the company did not want to let people know the information contained in the directory, they merely have to take it down.
Make sense?


I think that there are quite a few problems with the ruling and in particular the order below:
12. Defendant Ritz is directed to immediately destroy any and all copies of Sierra's computers, websites, servers, network, or computer systems and any information about Sierra that are in their possession, whether such copies and information are in digital, electronic or physical form.


It looks like an interesting case notwithstanding the poor writing of the findings.