Re: Here comes the changes from rumor mill

From: Bogdan Sass (bogdan.sass@catc.ro)
Date: Sat Jan 17 2009 - 12:50:35 ARST


Henry Ugwuadu wrote:
> Hello Guys,
>
> This discussion started from this url: "ciscocert.custhelp.com"
>
> When you do nslookup for this url, you will get the following IP
> Address for the url:
>
>
> Macintosh:~ henry$ nslookup ciscocert.custhelp.com
> Server: 172.30.0.40
> Address: 172.30.0.40#53
>
> Non-authoritative answer:
> Name: ciscocert.custhelp.com
> Address: 216.136.168.73
>
> Next do nslookup for "www.cisco.com", you will get this IP Address for
> the url..
>
>
> Macintosh:~ henry$ nslookup www.cisco.com
> Server: 172.30.0.40
> Address: 172.30.0.40#53
>
> Non-authoritative answer:
> Name: www.cisco.com
> Address: 198.133.219.25
>
> Next go to "www.dnsstuff.com" and plug in the above IP Addresses, you
> will discover that "ciscocert.custhelp.com" does not have any
> connection with CISCO. You will see that it was registered by a HIDDEN
> identity. On the other hand, you will discover that www.cisco.com was
> duly registered by Cisco.
>
    Welcome to the "wonderful" world of outsourcing...

    I've been having the same problem for quite a while - I teach my
students about security, I tell them "don't give out personal
information on sites with strange domain names", and then... I break
that rule every time I need to contact Cisco.

    The certification tracker has moved to "xxxxx.integral7.com". And I
have to provide my CSCO and password there.
    The certification support site is registered by an unknown entity.
And yet, I have to provide another set of personal details there.
    Various surveys/newsletters are hosted on "jivesoftware.com" (see
the thread about the new CCIE logos - the Cisco Learning Network is on
jivesw). Yet another site I'm supposed to trust.

    Great job raising the security awareness, Cisco! :|

-- 
Bogdan Sass
CCAI,CCSP,JNCIA-ER,CCIE #22221 (RS)
Information Systems Security Professional
"Curiosity was framed - ignorance killed the cat"

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:38 ARST