thesource.ofallevil.com

Dominic White

 
Random Entry: Killing the Evercookie - Part2 MobileSafari
< My Sword of Damocles | Work >

thesource.ofallevil.com

Someone registered a CNAME pointing thesource.ofallevil.com to www.microsoft.com. The domain was registered on the 5th June 2002 and was last updated a month ago. Currently this is rather funny, but this could pose a problem.

By piggybacking off microsoft's PageRank the domain has a nice distribution through Google (I found it while innocently looking up AD 2003 stuff). If the owner were to change the CNAME to an A and start injecting malware into the session, the chances of users being infected rises due to the higher 'trust' levels it built up.

Friday, June 30. 2006
Posted by Dominic White in Security
Comment (1) | Trackbacks (0)

 

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

#1 Shijaz Abdulla wrote (Link) (Reply)
Posted on Saturday, February 3. 2007
Check out http://theroot.ofallevil.com - It points to Verisign!!!!! LOL
 

Add Comment

E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA