RSA.COM site hacked :)

[Lachlan O'Dea]

On Mon, Feb 14, 2000 at 10:43:40AM +0100, Michael Roth wrote:
> On Mon, 14 Feb 2000, Simpson, Sam wrote:
> 
> > I wonder how long it'll take them to notice...Hhhm, would you
> > trust RSA with your data security now? ;)
> 
> When they read mailing lists, they should it notice in a few minutes. But
> currently they still not noticed it...
> 
> What is the regular IP of www.rsa.com? Currently it is 200.24.19.252.
> Maybe it's a DNS hack?

It does appear to be a DNS hack or screwup of some kind. For me,
www.rsa.com resolves to 205.181.76.22, which produces the normal RSA
home page.

isenguard ~ > nslookup www.rsa.com
Server:  rbs1.globalcenter.net.au
Address:  203.89.226.24

Non-authoritative answer:
Name:    www.rsa.com
Address:  205.181.76.22

isenguard ~ > nslookup www.rsa.com ns1.verio.net
Server:  ns1.verio.net
Address:  204.91.99.140

Name:    www.rsa.com
Address:  200.24.19.252

ns1.verio.net is listed in one of the NS records for rsa.com. I haven't
checked the others.

-- 
Lachlan O'Dea <mailto:lodea@vet.com.au>   Computer Associates Pty Ltd
Webmaster                                   Vet - Anti-Virus Software
http://www.vet.com.au/

"If a nation expects to be ignorant and free, in a state of
civilization, it expects what never was and never will be." 
- Thomas Jefferson