Originally Published: Sunday, 9 January 2000 Author: Derrick H. Lewis
Published to: news_enhance_security/Security News Page: 1/1 - [Printable]

Identical website addresses?

[CNN/IDG] A software glitch allowed people to register nearly identical names to already registered sites. The glitch gave people the ability to register names such as "www.Boston-.com", "www.aol-.com" or even "www.linux-.com", you wish :P .

   Page 1 of 1  

Software error allows 845 improper domain names

January 9, 2000 Web posted at: 6:15 p.m. EST (2315 GMT)

by Kathleen Ohlson

(IDG) -- A software mistake has allowed hundreds of domain names to be ncorrectly listed, allowing the creation of addresses which are nearly identical to established Web sites.

Because the software failed to disqualify addresses which include trailing dashes, third-party companies that register names were allowed to create addresses such as "www.abc-.com," "www.Boston-.com" and "www.microsoft-.com."

According to Network Solutions Inc., which lists the domain names submitted by registrars, 845 names have been improperly listed with hyphens.

Don Telage, spokesman for Network Solutions, said the registry doesn't permit addresses to be listed with trailing dashes because some protocols, such as FTP (file transfer protocol) don't recognize those trailing dashes.

He said five registrars didn't properly implement filtering software that rejects incorrect domain names. The company discovered the problem New Year's Eve but waited to take corrective action until after the Y2K turnover.

According to the Internet Corporation for Assigned Names and Numbers (ICANN), registrars have the right to revoke any addresses that don't comply with its standards, said Mike Roberts, the group's president. ICANN is a nonprofit group that oversees Internet domain name registration.

Telage said any further action regarding the illegal names will be taken by the five registrars. He declined to name those registrars.





   Page 1 of 1