Bugtraq mailing list archives
Re: Privacy leak in VeriSign's SiteFinder service #2
From: "Timothy J. Biggs" <tjb () bluegravity com>
Date: Thu, 25 Sep 2003 11:20:53 -0400
They did setup a mail server for the wild card tld. You send that mail you suggested and they get your to and from out of it then disconnect you.
--tim nslookup -type=MX sdfsgggdfasfasdf.com Server: ns1.bluegravity.com Address: 64.57.64.2 com origin = a.gtld-servers.net mail addr = nstld.verisign-grs.com serial = 2003092500 refresh = 1800 (30M) retry = 900 (15M) expire = 604800 (1W) minimum ttl = 86400 (1D) At 05:37 AM 9/25/2003, you wrote:
On Wed, 24 Sep 2003, Marco Ivaldi wrote: > What if Verisign is planning to open more similar TCP/IP services on that > host? What if they're going to further modify the existing ones, to better > invade individuals' privacy? Up to now, e-mails addressed to misspelled mail domains will not be sent to Verisign's Fake-SMTP-service as MX records are used for mail-domain resolving. Verisign did not set up wildcard MX records. However, if you configure your E-Mail-Program or local Mail-Transfer-Agent and misspell the hostname of the SMTP-Server for outgoing mail, all outgoing mail will be sent to their Fake-SMTP service. What if Versign is planning to add wildcard MX records as well, so that any mail addressed to mistyped/non-existant mail domains like "foobar () sdfsgggdfasfasdf com" will be sent to their fake SMTP service? Expect the worst! hepp... Henning --
Timothy J. Biggs -- CIO / Senior Vice President BLUE GRAVITY COMMUNICATIONS, INC. 3495 Haddonfield Rd. Suite 6 Pennsauken, NJ 08109 Toll Free: 1-877-8 HOSTING Tel:(856)662-9100, Fax:(856) 662-9101 Email: tim () bluegravity com WWW: www.bluegravity.comCustomer login: http://www.bluegravity.com/login
Current thread:
- Privacy leak in VeriSign's SiteFinder service Richard M. Smith (Sep 24)
- Privacy leak in VeriSign's SiteFinder service #2 Mark Coleman (Sep 24)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Marco Ivaldi (Sep 24)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Diego Bitencourt Contezini (Sep 24)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Henning Rust (Sep 25)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Niels Bakker (Sep 25)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Marco Ivaldi (Sep 24)
- Re: Privacy leak in VeriSign's SiteFinder service #2 der Mouse (Sep 24)
- Re: Privacy leak in VeriSign's SiteFinder service #2 Hugo van der Kooij (Sep 24)
- Message not available
- Re: Privacy leak in VeriSign's SiteFinder service #2 Timothy J. Biggs (Sep 25)
- Privacy leak in VeriSign's SiteFinder service #2 Mark Coleman (Sep 24)