Jumat, 05 Desember 2008

Abuses

As domain names became interesting to marketers because of their advertising and marketing potential, rather than just being used to label Internet resources in a technical fashion, they began to be used in manners that in many cases did not reflect the intended purpose of the label of their top-level domain. As originally planned, the structure of domain names followed a hierarchy in which the TLD indicated the type of organization (commercial, governmental, etc.), and addresses would be nested down to third, fourth, or further levels to express complex structures, where, for instance, branches, departments and subsidiaries of a parent organization would have addresses in subdomains of the parent domain. Also, hostnames were originally intended to correspond to actual physical machines on the network, generally with only one name per machine.

As the World Wide Web became popular, site operators frequently wished to have memorable addresses, regardless of whether they fit properly into the structure; thus, because the .com domain was the most popular and therefore most prestigious, even noncommercial sites began to obtain domains directly within that gTLD, and many sites desired second-level domain names in .com, even if they were already part of a larger entity where a subdomain would have been logical (e.g., abcnews.com instead of news.abc.com).

Shorter, and therefore more memorable, domain names are thought to have more appeal. As a convenience methods were implemented to reduce the amount of typing required when entering a web site address into the location field of a web browser. A website found at ''http://www.example.org'' will often be advertised without the http://, since the HTTP protocol is implicitly assumed when referring to web sites. In many cases, web sites can be also be reached by omitting the www prefix, as in this given example. This feature is usually implemented in DNS by the website administrator. In the case of a .com, the website can sometimes be reached by just entering example (depending on browser versions and configuration settings, which vary in how they interpret incomplete addresses).

The popularity of domain names also led to uses which were regarded as abusive by established companies with trademark rights; this has become known as cybersquatting, in which a person registers a domain name that resembles a trademark in order to profit from visitors looking for that address. To combat this, various laws and policies were enacted to allow abusive registrations to be forcibly transferred, but these were sometimes themselves abused by overzealous companies committing reverse domain hijacking against domain users who had legitimate grounds to hold their names. Such legitimate uses could include the use of generic words that are contained within a trademark, but used in a particular context within the trademark, or their use in the context of fan or protest sites with free speech rights of their own.

As of 2008, the four major Registrars have all sub-contracted their expiring domain lists to certain reseller and auctioneer partnerships, for the purpose of keeping the domain name at the original registrar and continuing to extract revenue off the renewal of premium registered names. Since this policy is not explicitly banned at ICANN, the practice has become more commonplace and as a result, complaints from individual registrants about losing their domains has tracked higher over the past two years [1].

Laws that specifically address domain name conflicts include the Anticybersquatting Consumer Protection Act in the United States and the Trademarks Act of 1999 in India. Alternatively, domain registrants are bound by contract under the UDRP to comply with mandatory arbitration proceedings should someone challenge their ownership of a domain name.

Resale of domain names

Ringkasan ini tidak tersedia. Harap klik di sini untuk melihat postingan.

McAfee Temukan Domain Berbahaya

Ketika melakukan surfing untuk Website yang aman, tidak semua domain adalah sama. antivirus McAfee Inc, vendor software anti virus, menyatakan bahwa perusahaan yang memiliki alamat yang tertera pada website sepertinya telah mengalami krisis keamanan ketika perusahaan pemilik alamat tersebut mendaftar di domain tertentu. McAfee menemukan bahwa terdapat beberapa domain yang dianggap berbahaya untuk navigasi user, seperti ".hk" (Hong Kong), ".cn" (China), dan ".info" (information).

Dari semua domain yang berbahaya, domain ".hk", setelah dites oleh McAfee, domain tersebut memberikan kontribusi 19,2% sebagai domain yang berbahaya atau berpotensi untuk menibulkan bahaya untuk pengunjung situs. Sementara ".cn" berpotensi menimbulkan bahaya sebesar 11,8% dan ".info" sebesar 11,7%. Sisanya situs di bawah domain ".com" ayg cukup populer, memiliki potensi sebesar 5%.

Banyak pembuat spam, tulisan kode-kode yang bersifat malicious code dan cyber criminal lain muncul ketika register nama domain menolak permintaan untuk register suatu situs dengan tujuan untuk lebih meningkatkan keuntungan dan promosi perusahaan. Namun, McAfee belum mengetahui hingga kini perusahaan mana saja yang melakukan register nama domain.

Dalam laporan McAfee, Mapping the Mal Web, McAfee mencoba untuk mengidentifikasi domain yang memiliki resiko situs berbahaya dengan konsentrasi tinggi. Server untuk situs dengan domain ".hk" dan ".cn" tidak harus berada di Cina sehingga operator website dapat melakukan register situs dari mana saja. Domain lain ang beresiko seperti ".ro" (Romania) dengan kadar 6,8% dan ".ru" (Russia) dengan resiko sebesar 6%.
Seorang peneliti dari McAfee, Shane Keats, mengatakan, penambahan situs di bawah ".hk" dan ".cn" yang dianggap berbahaya, telah disebabkan oleh pengkoleksian data oleh McAfee pada domain tersebut dan pada beberapa proses register alamat yang dilakukan perusahaan. Laporan McAfee ini berdasarkan 9,9 juta website yang dites dalam 265 domain untuk dimasuki malicious code, pop-up yang berlebihan atau form pengisian yang sebenarnya adalah alat untuk para spammer untuk mengirimkan email spam.

McAfee juga menemukan nama domain yang mempunyai resiko sedikit berbahaya seperti :

  • ".gov" (digunakan oleh pemerintah), dengan 0.05%.
  • ".jp" (Japan), dengan 0.1%
  • ".au" (Australia), dengan 0.3%



Diskusikan berita ini di Diskusi BeritaNET.com

Over 1,000 High Quality Domains Stolen

A story is doing the rounds on NamePros, DomainBits, DNForum and Conceptualist about an Iranian hacker who has managed to amass a collection of over 1000 stolen high quality domain names by hijacking email accounts. Examples of domain names stolen in this fashion include: Problems.com, Mistake.com, Enroll.com, Damaged.com, Statement.com, Evaluate.com, UnClear.com …

The guy has setup a “portfolio” on the domain name LuxaryDomains.com and is trying to offload the names at cheap prices. The domains were stolen by hijacking of said domains’ owners mail accounts - most likely with a technique similar to what happened to Sarah Palin’s Yahoo mail account recently.

What can you do to protect yourself? As Sahar of Conceptualist.com rightly points out, make use of registrar features like Moniker’s MaxLock or something similar at other registrars. Also, make sure you do the simple things right - don’t make it easy for the crooks to guess your mail account security questions and change your mail account and registrar passwords often.

Let’s hope these domains are recovered quickly and the crook is held accountable.


Like the blog? Read the ultimate domaining ebook!
* Domaining secrets revealed
* Easy to follow text
* Step-by-step instructions
* 80 pages of content
Click Here To Get It

5 Responses to “Over 1,000 High Quality Domains Stolen”

David
December 3rd, 2008 at 10:01 pm

Scary stuff. Surely there’s something the original owners can do to get their names back?

Looks like the website is down now - wonder why…

admin
December 3rd, 2008 at 10:40 pm

It’s probably down as registrars/domainers have got together to try and stop this crook.

Innerclick
December 4th, 2008 at 11:08 pm

Wow we are in the wild wild west.I guess that we will have to put up are guns.

Email Hacking And How To Protect Your Accounts | Domain Name News | Domain News | Expired Domains
December 5th, 2008 at 10:31 am

[...] last couple of days have seen some major concerns raised over email account security and how secure that makes your domain portfolio. If like many domainers

Hackers Hijacked CheckFree.com | Domain Name News | Domain News | Expired Domains
December 5th, 2008 at 10:32 am


[...] like bad things come in multiples. Just as the domain world learned about the hijacking of hundred’s of domain names a few days ago, we learn that CheckFree.com - the large e-bill payment website - had two of its



http://www.dnxpert.com/2008/12/03/over-1000-high-quality-domains-stolen/

Domain Name Fee Increase Set

Starting this October 15, VeriSign will increase the registration fee it charges for the popular .com and .net domain names. The .com fee, currently $6, will go to $6.42 while .net will rise to $3.85 from the current $3.50.

Last November, VeriSign reached an agreementwith ICANN (define) to continue managing the .com registry until 2012. Under the deal, VeriSign is allowed to raise wholesale domain name prices in four of the next six years (as of 2006). A number of the largest domain registrars, including GoDaddy, Network Solutions, Tucows, Register.com and BulkRegister, protested against the deal, but to no avail.

By some estimates, the deal, including the price increases, will bring as much as $3 billion in revenue to VeriSign over the period of the agreement. This is the first registry fee increase for .com and .net since the fee structure was put in place by ICANN in 1999.

VeriSign has argued it needs the fee increases to build up its security and support infrastructure and keep up with the wildly expanding growth of the Internet. VeriSign CEO Stratton Sclavos detailed the growing security threat and VeriSign's infrastructure plans at the RSA Conference in February.

As part of its $100 million Project Titan, VeriSign said it plans to increase its current 20 gigabits per second (Gbps) capacity to more than 200Gbps. The company will also expand the number of daily DNS (define) queries it can process from 400 billion to 4 trillion. VeriSign now receives 24 billion DNS queries each day.

The DNS capacity is important, because a denial-of-service (define) attack often attempts to overwhelm a system by flooding it with queries.

VeriSign also plans to reduce Internet latency and increase redundancy by opening more than 80 new Regional Internet Resolution sites. The new sites, in locations such as India, Germany, Chile and South Africa, will join current regional systems, including Korea, China, Brazil, Kenya and Egypt.

"What you're seeing is a real globalization of the infrastructure," VeriSign spokesman Tom Galvin told internetnews.com. "This helps with local access and also with the reliability of the infrastructure globally."

Galvin said a growing threat is coming from machine-to-machine interactions. "There is a finite ability for an individual or people to try and abuse the DNS on a day-to-day basis, but machines interacting with each other can really turn things up."

Galvin recalled there was a major attack on several root server operators in 2002 that threatened to at least partially paralyze the Internet.

"Those kind of attacks happen every day now, but we shrug it off because the infrastructure is fortified and developed," said Galvin. "But the attacks today are more sophisticated. It's a constant cat and mouse game."

April 5, 2007
By David Needle: More stories by this author:

Public domain

From Wikipedia, the free encyclopedia

Jump to: navigation, search
Look up Public domain in
Wiktionary, the free dictionary.

The public domain is a range of abstract materials – commonly referred to as intellectual property – which are not owned or controlled by anyone. The term indicates that these materials are therefore "public property", and available for anyone to use for any purpose. The public domain can be defined in contrast to several forms of intellectual property; the public domain in contrast to copyrighted works is different from the public domain in contrast to trademarks or patented works. Furthermore, the laws of various countries define the scope of the public domain differently, making it necessary to specify which jurisdiction's public domain is being discussed.

The public domain is most often discussed in contrast to works whose use is restricted by copyright. Under modern law, most original works of art, literature, music, etc. are covered by copyright from the time of their creation for a limited period of time (which varies by country). When the copyright expires, the work enters the public domain. It is estimated that currently, of all the books found in the world's libraries, only about 15 percent are in the public domain, even though only 10 percent of all books are still in print; the remaining 75 percent are books which remain unavailable because they are still under copyright protection.[1]

The public domain can also be defined in contrast to trademarks. Names, logos, and other identifying marks used in commerce can be restricted as proprietary trademarks for a single business to use. Trademarks can be maintained indefinitely, but they can also lapse through disuse, negligence, or widespread misuse, and enter the public domain. It is possible, however, for a lapsed trademark to become proprietary again, leaving the public domain.

The public domain also contrasts with patents. New inventions can be registered and granted patents restricting others from using the inventions without permission from the inventor. Like copyrights, patents last for a limited period of time, after which the inventions covered by them enter the public domain and can be used by anyone.