3 ms·
I would love to hear how this could have happened. Social engineering at the DNS provider? Unpatched server? If someone knows, please do tell. I love hearing ab
by vinhboy 14y ago
I would love to hear how this could have happened. Social engineering at the DNS provider? Unpatched server? If someone knows, please do tell. I love hearing about how people pull off these things.
Maybe even an inside job? a lot of people are sympathetic to the cause, maybe one of those people just left the window open or something?
- danielweber 14y agoAlmost all of MIT's network administration happens within MIT, so you can't hack it by social engineering an outsider.
- lawnchair_larry 14y agoYou can if the target is the registrar, which this was.
- jad73994 14y agoI doubt it was a social of educause (the edu registrar); more likely some credentials specific to MIT were compromised.
- ewillbefull 14y agoTheir registrar was probably vulnerable (or socialed), because the nameservers were changed. This is not uncommon.