>The author assumes that because he's able to register a domain name that matches several of the authoritative name server names for the .io TLD that it is "lik

>The author assumes that because he's able to register a domain name that matches several of the authoritative name server names for the .io TLD that it is "likely that clients will randomly select our hijacked nameservers over any of the legitimate nameservers..." This is wrong. It is definitely not wrong for a large number of resolvers. This bears out in his traffic. It is very common for a resolver to take the list of nameservers from the root and resolve them rather than using the A records provided by the root. Quite wrong, but common. If they didn't, he would have received zero traffic. Thus it would have been quite easy to redirect traffic for bit.io by also supplying a different set of NS records for it.