4 ms·
Next time, read the rest of the article? > Microsoft has seen more than 7.4 million Bladabindi-Jenxcus detections over the past 12 months, which doesn’t accoun
by lstamour 12y ago
Next time, read the rest of the article?
> Microsoft has seen more than 7.4 million Bladabindi-Jenxcus detections over the past 12 months, which doesn’t account for detections by other anti-virus providers. Despite numerous reports by the security community on No-IP domain abuse, the company has not taken sufficient steps to correct, remedy, prevent or control the abuse or help keep its domains safe from malicious activity.
> On June 19, Microsoft filed for an ex parte temporary restraining order (TRO) from the U.S. District Court for Nevada against No-IP. On June 26, the court granted our request and made Microsoft the DNS authority for the company’s 23 free No-IP domains, allowing us to identify and route all known bad traffic to the Microsoft sinkhole and classify the identified threats.
No-IP in the past has denied allegations, e.g. the Cisco blog post linked to by Microsoft was denied here: http://www.noip.com/blog/2014/02/12/cisco-malware-report/ http://www.noip.com/blog/2014/02/12/cisco-malware-report/
This is also a temporary order, it's not permanent.
Sure, it's creepy when courts have control over DNS entries, but ... they do. The Internet isn't lawless, it operates within the legal bounds of each country that participates.
I wonder what No-IP will say next and if figures collected by independent groups verify their "swift action" against security threats. As a company providing DDNS services, I wouldn't expect them to understand and use the latest in packet filtering techniques, but ... abuse is abuse and I'm sure they submitted evidence that this was required, temporarily.
- blacksmith_tb 12y agoIt's not clear who determines what "sufficient steps" would be, however. That could range from 'No-IP did nothing at all' to 'they tried and we weren't impressed'. The MS claim that "free dynamic dns is frequently exploited by cybercriminals" seems like hand-waving, to me. It's also used legitimately by millions of people who have home routers which came with support for No-IP baked into firmware...
- andylei 12y ago> It's not clear who determines what "sufficient steps" would be its perfectly clear. the courts.
- blacksmith_tb 12y agoWell, no, it isn't perfectly clear from the article - are the courts in a position to independently evaluate No-IP's efforts, or did they trust Microsoft's legal team regarding their insufficiency?
- hsod 12y agoisn't this how all lawsuits work all the time? there's a finding of fact where each side presents arguments.
- marcosdumay 12y agoExcept that only one side presented any arguments on this case.
- rurounijones 12y ago> Sure, it's creepy when courts have control over DNS entries, but ... they do. In this case it was a US court and between two US companies, what if no-ip.com was French or UK or... Would the US court still have authority in this case? Would MS have to go to a French / UK court?
- misnome 12y ago.com is US-owned, so it wouldn't have to. See e.g. megaupload
- rurounijones 12y agoWhich makes it infinitely creepier / problematic for non US companies.