elgato
Joined: 24 Feb 2005
Posts: 17240
Location: Texas
|
| Posted: Thu May 19, 2011 7:00 pm Post subject: Here's How Expired Domains Expose You To Embarrassment |
|
|
As if you’re not scared enough of the Internet (and its potential to ravage your personal information), something comes along to make you even more paranoid. Just ask PlayStation users, or those that were on the receiving end of Firesheep’s eavesdropping. Today’s vulnerability du jour? Expired domains. The technical veterans among us are likely already familiar with this, but it seems that letting a domain name expire, especially those tied to other online accounts, exposes your personal information and makes you vulnerable to potential identity theft.
Today, British developer and hacker Ben Reyes wrote a post describing how he was able to use an expired domain to access to another person’s Gmail, Google calendar, contacts, and more, which then, in turn, allowed him to access further web accounts, like Amazon.
It started when Reyes recently attempted to link a newly registered domain to Google Apps. The Google Apps page immediately responded to the request, saying that the domain had already been registered. Thank you, try again. This was because the previous owner of the domain name had left it tied to Google Apps. So Reyes went through the domain reclamation process, proved he was the new owner, and shabang, he was granted access.
more.. link to news article |
|
