> I just received a whole bunch of spams to email addresses which
> only appear in the AUNIC database

How do you know they only appear in the AUNIC database??  I suspect they
also appear in the Registrar's database (i.e. for com.au names, in Melbourne
IT's database).

If you look at ING's letter
(http://www.whatsinaname.com.au/renewals/wING02a.jpg) you can see that those
letters included the domain name expiry date.  But domain name expiry dates
are NOT held in the AUNIC database (and never have been)- so the implication
appears to be that in this case at least (the ING letters) this data came
from Melbourne IT's database.  However, I do concede there may be some other
possibility I haven't thought of.

You can check a com.au domain name expiry date via the Melbourne IT web
site - but you have to have the domain name registry key.

Gee, I'd love to know how ING got all those expiry dates that as far as I
know only exist in the Registrar's database.  I sure didn't tell ING the
expiry date, nor did I give them my registry key.  I doubt that my hosting
service (the Tech contact) did either.

I'm sure Bruce T is happy to answer the following for us:

1. 'At any time in the past, (or at the present time), could Melbourne IT's
authorised re-sellers access the expiry dates of domain names for which they
were not the contact?'

2. 'At any time in the past, (or at the present time), could Melbourne IT's
authorised re-sellers access the address details in bulk (i.e. download the
database or do unrestricted queries of the database to collate the data) of
domain names for which they were not the contact?'


Regards, Mark

Mark Hughes
Effective Business Applications Pty Ltd
effectivebusiness§pplications.com.au
www.pplications.com.au
+61 4 1374 3959

> -----Original Message-----
> From: Rowe, Joshua [mailto:Joshua.Rowe§auspost.com.au]
> Sent: Wednesday, 21 November 2001 22:09
> To: 'dns§auda.org.au'; caube-au (cauce-aus§corvu.com)
> Subject: [DNS] fresh bulk AUNIC data is out in the wild
>
>
> I just received a whole bunch of spams to email addresses which
> only appear
> in the AUNIC database.
>
> One of the email addresses was only registered on the AUNIC database in
> February 2001.
>
> Given bulk access to AUNIC was stopped back in September 2000 [1], how is
> the data getting out?
>
>
> Josh
>
> [1]
> http://www.auda.org.au/policy/panel-competition-2000/submissions/k
> eegel2.htm
> l
>
> Australia Post is committed to providing our customers with
> excellent service.  If we can assist you in any way please either
> telephone 13 13 18 or visit our website www.auspost.com.au.
>
> CAUTION
>
> This e-mail and any files transmitted with it are privileged and
> confidential information intended for the use of the addressee.
> The confidentiality and/or privilege in this e-mail is not
> waived, lost or destroyed if it has been transmitted to you in
> error. If you have received this e-mail in error you must (a) not
> disseminate, copy or take any action in reliance on it; (b)
> please notify Australia Post immediately by return e-mail to the
> sender; and (c) please delete the original e-mail.
>
> --
> This article is not to be reproduced or quoted beyond this forum without
> express permission of the author. 320 subscribers.
> Archived at http://listmaster.iinet.net.au/list/dns (user: dns, pass: dns)
> Email "unsubscribe" to dns-request§auda.org.au to be removed.
>

--
This article is not to be reproduced or quoted beyond this forum without
express permission of the author. 320 subscribers. 
Archived at http://listmaster.iinet.net.au/list/dns (user: dns, pass: dns)
Email "unsubscribe" to dns-request§auda.org.au to be removed.