Kashpureff stuff online

CBC has put together a short (7 mins or so) news piece on the
Kashpureff/Alternic situation - it's available via RealVideo (which seems
to run reasonably over my 28.8 modem at home) at
<http://www.tv.cbc.ca/undercurrents/tv/week09/fugitive.ram>.

They've also made an image of his US arrest warrant and the criminal
complaint filed in the US district court (ED NY, 97-1343M) available at
<http://www.tv.cbc.ca/undercurrents/stories/internic/warrant.html>.

--
Greg Broiles                | US crypto export control policy in a nutshell:
gbroiles@netbox.com         | Export jobs, not crypto.
http://www.io.com/~gbroiles | http://www.parrhesia.com

Greg Broiles <gbroiles@netbox.com> writes:
> CBC has put together a short (7 mins or so) news piece on the
> Kashpureff/Alternic situation - it's available via RealVideo (which seems
> to run reasonably over my 28.8 modem at home) at
> <http://www.tv.cbc.ca/undercurrents/tv/week09/fugitive.ram>.

So what did Kashpureff do?  Who is Kashpureff?  Is he the guy at
Alternic who did some advanced DNS hacking to get Internic DNS root to
point to him?  Or something else?

Adam
-- 
Now officially an EAR violation...
Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/

print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

> So what did Kashpureff do?  Who is Kashpureff?  Is he the guy at
> Alternic who did some advanced DNS hacking to get Internic DNS root to
> point to him?  Or something else?

Yup, that's him. 

IIRC, he exploited Bind's failure to check input in certain cases: 
He set his DNS server to be the delegating authority for .com, 
say; then sent a recursive query to his victim's DNS server to get 
the victim to query _his_ server; his server mixed the bogus info 
into its response to the query, thus poisoning the victim's DNS.

Cypherpunks write code.
Crackerpunks read code.



 
Ng Pheng Siong 
<ngpsstoi@pacific.net.sg>