Hacker News new | past | comments | ask | show | jobs | submit login

google.ps has not been hacked.

The .ps registry was. Google DNS servers have been changed to omar.genious.net and hamza.genious.net

Hacking a registry is even more alarming.

Not all registries are created equal. I'm a heavy Internet user and I'd get along just fine without the .ps nameservers.

Still, it goes to show that even if you lock down your website, you could still be vulnerable if your registry is vulnerable.

That has been shown since the first day of DNS.

i would surely be more alarmed if google got hacked, not some 2.5-world registry. there's been worse, like CAs getting hacked.

If they hacked the .ps registry, did they redirect any other sites?

Looks like nike.com.ps (for example) still redirects to the nike homepage.

I think saying "google.ps was hacked" is a perfectly reasonable way to describe what happened.

I don't agree at all, the system which was hacked is not in Google's control at all, even though it does depend on it for DNS SOA.

Every site depends on root DNS servers to do their job right...the root for .ps was hacked...that's what happened here...google was affected, but not hacked.

You are using these words, but I don't think you know what they mean.

The SOA record is almost irrelevant in this case, unless you are seeing some trickery where they set high TTLs or something to keep the "hack" around longer after it has been corrected.

There is only one root (which is kinda what makes it a root) - and in this case the root servers are doing their job just fine. DNS is hardly even involved. As far as I can tell this was simply a compromise of the web UI that allows for the management of domains under the .ps ccTLD. Probably just another sloppy front end developer.

Forgive me, it has been several years since I dealt with DNS authority, however it still does not change the argument that it was not google who was 'hacked'...the title of this post is just blatantly wrong.

That implies the site itself was hacked, when it was not. It appears the .ps domain registry was hacked.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact