Category Archives: namespace collision

Local Networks Go Global When Domain Names Collide

Posted on by

The proliferation of new top-level domains (TLDs) has exacerbated a well-known security weakness: Many organizations set up their internal Microsoft authentication systems years ago using domain names in TLDs that didn’t exist at the time. Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Here’s a look at one security researcher’s efforts to map and shrink the size of this insidious problem. Continue reading Local Networks Go Global When Domain Names Collide→

Microsoft buys ‘corp.com’ to protect customer infrastructure

Posted on by

Microsoft Corp finally agreed earlier this week to acquire corp.com, a domain that poses security risks to Microsoft users due to a namespace collision issue. In February, security researcher Brian Krebs noted that the owner of corp.com was ready to se… Continue reading Microsoft buys ‘corp.com’ to protect customer infrastructure→

Dangerous Domain Corp.com Goes Up for Sale

Posted on by

As an early domain name investor, Mike O’Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O’Connor refused to auction perhaps the most sensitive domain in his stable — corp.com. It is sensitive because years of testing shows whoever wields it would have access to an unending stream of passwords, email and other proprietary data belonging to hundreds of thousands of systems at major companies around the globe. Continue reading Dangerous Domain Corp.com Goes Up for Sale→