RE: [DNS] fresh bulk AUNIC data is out in the wild

RE: [DNS] fresh bulk AUNIC data is out in the wild

From: Colin Goldrick <Colin.Goldrick§griffithhack.com.au>
Date: Thu, 22 Nov 2001 16:19:24 +1100
I suspect you should also look at the business names registries - I think
this is where the current crop I am getting is coming from
	Kind regards

	Colin Goldrick
	-----Original Message-----
	From:	Mark Hughes [SMTP:effectivebusiness&#167;pplications.com.au]
	Sent:	Wednesday, November 21, 2001 11:45 PM
	To:	dns&#167;auda.org.au
	Subject:	RE: [DNS] fresh bulk AUNIC data is out in the wild

	> I just received a whole bunch of spams to email addresses which
	> only appear in the AUNIC database

	How do you know they only appear in the AUNIC database??  I suspect
they
	also appear in the Registrar's database (i.e. for com.au names, in
Melbourne
	IT's database).

	If you look at ING's letter
	(http://www.whatsinaname.com.au/renewals/wING02a.jpg) you can see
that those
	letters included the domain name expiry date.  But domain name
expiry dates
	are NOT held in the AUNIC database (and never have been)- so the
implication
	appears to be that in this case at least (the ING letters) this data
came
	from Melbourne IT's database.  However, I do concede there may be
some other
	possibility I haven't thought of.

	You can check a com.au domain name expiry date via the Melbourne IT
web
	site - but you have to have the domain name registry key.

	Gee, I'd love to know how ING got all those expiry dates that as far
as I
	know only exist in the Registrar's database.  I sure didn't tell ING
the
	expiry date, nor did I give them my registry key.  I doubt that my
hosting
	service (the Tech contact) did either.

	I'm sure Bruce T is happy to answer the following for us:

	1. 'At any time in the past, (or at the present time), could
Melbourne IT's
	authorised re-sellers access the expiry dates of domain names for
which they
	were not the contact?'

	2. 'At any time in the past, (or at the present time), could
Melbourne IT's
	authorised re-sellers access the address details in bulk (i.e.
download the
	database or do unrestricted queries of the database to collate the
data) of
	domain names for which they were not the contact?'


	Regards, Mark

	Mark Hughes
	Effective Business Applications Pty Ltd
	effectivebusiness&#167;pplications.com.au
	www.pplications.com.au
	+61 4 1374 3959

	> -----Original Message-----
	> From: Rowe, Joshua [mailto:Joshua.Rowe&#167;auspost.com.au]
	> Sent: Wednesday, 21 November 2001 22:09
	> To: 'dns&#167;auda.org.au'; caube-au (cauce-aus§corvu.com)
	> Subject: [DNS] fresh bulk AUNIC data is out in the wild
	>
	>
	> I just received a whole bunch of spams to email addresses which
	> only appear
	> in the AUNIC database.
	>
	> One of the email addresses was only registered on the AUNIC
database in
	> February 2001.
	>
	> Given bulk access to AUNIC was stopped back in September 2000 [1],
how is
	> the data getting out?
	>
	>
	> Josh
	>
	> [1]
	> http://www.auda.org.au/policy/panel-competition-2000/submissions/k
	> eegel2.htm
	> l
	>
	> Australia Post is committed to providing our customers with
	> excellent service.  If we can assist you in any way please either
	> telephone 13 13 18 or visit our website www.auspost.com.au.
	>
	> CAUTION
	>
	> This e-mail and any files transmitted with it are privileged and
	> confidential information intended for the use of the addressee.
	> The confidentiality and/or privilege in this e-mail is not
	> waived, lost or destroyed if it has been transmitted to you in
	> error. If you have received this e-mail in error you must (a) not
	> disseminate, copy or take any action in reliance on it; (b)
	> please notify Australia Post immediately by return e-mail to the
	> sender; and (c) please delete the original e-mail.
	>
	> --
	> This article is not to be reproduced or quoted beyond this forum
without
	> express permission of the author. 320 subscribers.
	> Archived at http://listmaster.iinet.net.au/list/dns (user: dns,
pass: dns)
	> Email "unsubscribe" to dns-request&#167;auda.org.au to be removed.
	>

	--
	This article is not to be reproduced or quoted beyond this forum
without
	express permission of the author. 320 subscribers. 
	Archived at http://listmaster.iinet.net.au/list/dns (user: dns,
pass: dns)
	Email "unsubscribe" to dns-request&#167;auda.org.au to be removed.

--
This article is not to be reproduced or quoted beyond this forum without
express permission of the author. 319 subscribers. 
Archived at http://listmaster.iinet.net.au/list/dns (user: dns, pass: dns)
Email "unsubscribe" to dns-request&#167;auda.org.au to be removed.
Received on Thu Nov 22 2001 - 05:26:03 UTC

This archive was generated by hypermail 2.3.0 : Fri Dec 19 2014 - 00:00:13 UTC