[nsp-sec] Comcast.net

[Smith, Donald]

We flushed our caches.
Broadband reports have some information and comments wrt this incident.
http://www.broadbandreports.com/forum/r20555206-Comcast-hacked~start=140

If anyone needs a screen scrape (bmp) of the under construction site let
me know.

Security through obscurity WORKS against some worms and ssh attacks:)
Donald.Smith at qwest.com giac 

> -----Original Message-----
> From: nsp-security-bounces at puck.nether.net 
> [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Rob Thomas
> Sent: Thursday, May 29, 2008 9:33 AM
> To: Sweeney, William- CIPS
> Cc: nsp-security at puck.nether.net
> Subject: Re: [nsp-sec] Comcast.net
> 
> ----------- nsp-security Confidential --------
> 
> Hi, Bill.
> 
> Sorry to hear about the mess!  We're doing some digging now.  
> We'll let 
> you know what we find.
> 
> Thanks,
> Rob.
> 
> 
> Sweeney, William- CIPS wrote:
> > ----------- nsp-security Confidential --------
> > 
> > Hi all,
> > Clearing your domain caches is all we need right now, and would be a
> > help.  
> > 
> > I may be asking for some other data at some point...
> > 
> > Thanks much,
> > Bill
> > 
> > 
> > -----Original Message-----
> > From: nsp-security-bounces at puck.nether.net
> > [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of 
> Rodney Joffe
> > Sent: Thursday, May 29, 2008 11:05 AM
> > To: nsp-security at puck.nether.net
> > Subject: [nsp-sec] Comcast.net
> > 
> > ----------- nsp-security Confidential --------
> > 
> > I know that Bill Sweeney and Severin Walker at least are on 
> the list....
> > 
> > Anything we can do to help with the domain name/dns hijack of  
> > comcast.net?
> > 
> > We've cleared our caches, but I suspect there is more that 
> we/others  
> > on NSP-SEC can do...
> > 
> > 
> > 
> > 
> > _______________________________________________
> > nsp-security mailing list
> > nsp-security at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/nsp-security
> > 
> > Please do not Forward, CC, or BCC this E-mail outside of the
> > nsp-security
> > community. Confidentiality is essential for effective 
> Internet security
> > counter-measures.
> > _______________________________________________
> > 
> > 
> > _______________________________________________
> > nsp-security mailing list
> > nsp-security at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/nsp-security
> > 
> > Please do not Forward, CC, or BCC this E-mail outside of 
> the nsp-security
> > community. Confidentiality is essential for effective 
> Internet security counter-measures.
> > _______________________________________________
> 
> -- 
> Rob Thomas
> Team Cymru
> The WHO and WHY team
> http://www.team-cymru.org/
> 
> 
> 
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
> 
> Please do not Forward, CC, or BCC this E-mail outside of the 
> nsp-security
> community. Confidentiality is essential for effective 
> Internet security counter-measures.
> _______________________________________________
> 
> 


This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly 
prohibited and may be unlawful.  If you have received this communication 
in error, please immediately notify the sender by reply e-mail and destroy 
all copies of the communication and any attachments.