Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-09-07 Thread Rich Kulawiec
Two comments. First, it's everyone's responsibility to do what's necessary to prevent their operation from being an abuse source, vector, or support service. That includes registrars, web hosts, DNS providers, email services, consumer ISPs, webmail services, corporations, end-users -- *everyon

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread william(at)elan.net
On Wed, 31 Aug 2005, Fergie (Paul Ferguson) wrote: Someone is... or trying to, at least, watch and contact the responsible owners/registrars, but in some cases they aren't apparently eager to assist. Some registrars are good and some are bad and without better controls being developed by ICA

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Fergie (Paul Ferguson)
Someone is... or trying to, at least, watch and contact the responsible owners/registrars, but in some cases they aren't apparently eager to assist. That's why the ones that are caught end up in various RBL's... - ferg -- Alex Rubenstein <[EMAIL PROTECTED]> wrote: Shouldn't someone be watchin

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Alex Rubenstein
Shouldn't someone be watching these, though? [EMAIL PROTECTED]:~# whois paypal.com [...] PAYPAL.COM.SV04.COM PAYPAL.COM.LIMITSPEED.NET PAYPAL.COM While I agree in concept that this is not how the internet runs, and I am not proposing a domain name police force be instituted, it seems to me

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Fergie (Paul Ferguson)
There are still remaining issues... - ferg -- Florian Weimer <[EMAIL PROTECTED]> wrote: > That's good, however, I regret that the issue had to be > aired here because it didn't get attention it deserved > through "proper channels" and elsewhere... If I read the timestamps correctly, your pos

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Florian Weimer
> That's good, however, I regret that the issue had to be > aired here because it didn't get attention it deserved > through "proper channels" and elsewhere... If I read the timestamps correctly, your posting arrived via the NANOG list *after* the domain had been pulled.

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Fergie (Paul Ferguson)
That's good, however, I regret that the issue had to be aired here because it didn't get attention it deserved through "proper channels" and elsewhere... - ferg -- Florian Weimer <[EMAIL PROTECTED]> wrote: > But it caught my eye that SOMEBODY at Yahoo! ought to be reviewing > domain names like

Re: Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-31 Thread Florian Weimer
> But it caught my eye that SOMEBODY at Yahoo! ought to be reviewing > domain names like "bankofthewestupdate.com" Registrars should as well, but this is not the way the Internet works. Sometimes, this is a good thing, sometimes, it's not. It seems that the A RR has been pulled around 2005-08-30

Yahoo! -- A "Phisher-friendly" hosting domain?

2005-08-30 Thread Fergie (Paul Ferguson)
This would probably be better posted to NSP-SEC, but since I'm not subscribed (and have tried at least once), I'll share it here. For what it's worth, I'm involved in several security and anti-malware, anti-botnet, etc. group efforts, and I personally think that this particlar situation has gaine