Web Hack List

Collected research

The .io Error - Taking Control of All .io Domains With a Targeted Registration

The .io Error – Taking Control of All .io Domains With a Targeted Registration

Four of the seven authoritative nameserver domains for the .io top-level domain had lapsed and were purchasable for 90 dollars. Registering one made the researcher authoritative for the entire .io zone, so DNS for every .io domain could have been forged or redirected. The write-up also covers a dead registry abuse mailbox and the registry's clumsy remediation.

Record

Document
The .io Error – Taking Control of All .io Domains With a Targeted Registration
Researcher
Matthew Bryant
Published by
The Hacker Blog
Topic
Browser

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Matthew Bryant, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .