fyi: Date: Tue, 15 Jul 1997 11:54:02 -0700 From: paul@vix.com X-Mailer: Mozilla 3.0Gold (X11; I; OSF1 V4.0 alpha) MIME-Version: 1.0 To: courtm@cnet.com CC: paul@vix.com Subject: http://www.news.com/News/Item/0,4,12382,00.html Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit AlterNIC didn't invent the hack that corrupted the www.internic.net name. I published a paper on this three years ago, which you can read in PostScript(tm) form at ftp://ftp.vix.com/pri/vixie/bindsec.psf Note that the bug AlterNIC exploited is the same one covered by several recent Internet mailing list security bulletins. Noone associated with AlterNIC is smart enough to have figured out any of this by themselves. Recent versions of BIND (4.9.6 and 8.1.1) which are available via... http://www.isc.org/isc/ ...fix the programming error which allowed this corruption to occur.