<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Domain Name Owners Must Fight ROGERS DNS Hijack</title>
	<atom:link href="http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/feed/" rel="self" type="application/rss+xml" />
	<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/</link>
	<description>the serial fix</description>
	<pubDate>Tue,  6 Jan 2009 05:48:09 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.5</generator>
		<item>
		<title>By: jb</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-2639</link>
		<dc:creator>jb</dc:creator>
		<pubDate>Sun, 23 Nov 2008 23:53:19 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-2639</guid>
		<description>Rogers has a DNS that will allow you to avoid their supported search service. Not a total fix but if people use this they avoid some of the problems listed above. The DNS to avoid their supported search service is 64.71.255.202</description>
		<content:encoded><![CDATA[<p>Rogers has a DNS that will allow you to avoid their supported search service. Not a total fix but if people use this they avoid some of the problems listed above. The DNS to avoid their supported search service is 64.71.255.202</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mike van Lammeren</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-140</link>
		<dc:creator>Mike van Lammeren</dc:creator>
		<pubDate>Tue, 22 Jul 2008 16:25:32 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-140</guid>
		<description>Hi Kobra!

You're right that there are technical work-arounds to defeat Rogers new heavy-handed tactics, but there comes a point where it is important for technically-minded people to help others stand up for themselves, and to stand up to an organization like Rogers.

Mike van Lammerens last blog post..&lt;a href="http://mike.van.lammeren.net/2008/07/rogers-is-now-hijacking-invalid-dns.html" rel="nofollow"&gt;Rogers is now Hijacking invalid DNS requests&lt;/a&gt;</description>
		<content:encoded><![CDATA[<p>Hi Kobra!</p>
<p>You&#8217;re right that there are technical work-arounds to defeat Rogers new heavy-handed tactics, but there comes a point where it is important for technically-minded people to help others stand up for themselves, and to stand up to an organization like Rogers.</p>
<p>Mike van Lammerens last blog post..<a href="http://mike.van.lammeren.net/2008/07/rogers-is-now-hijacking-invalid-dns.html" rel="nofollow">Rogers is now Hijacking invalid DNS requests</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-136</link>
		<dc:creator>Dan</dc:creator>
		<pubDate>Tue, 22 Jul 2008 04:24:38 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-136</guid>
		<description>thanks again for your input kobra.  I am currently using the hosts method to redirect rogers to localhost and it works like a charm.  Hell if I had the resources id have launched a ddos already ;)

the problem here though is that other website owners not on Rogers should be more aware of how their DNS is handled.

for example the majority of shared web hosting companies do not check for invalid subdomains.  Using your domain name in this example if you were selling products online, sdfasf.kobrascorner.com would result in a rogers redirection to all rogers users who are not aware of how to opt-out or hard code their hosts file thus resulting in a possible lost customer to a competitor.  Website owners need to inquire about catch-all subdomains so that *.kobrascorner.com gets mapped to something on your host's server to protect your own site.

Most people wouldn't think to inquire about this type of feature but if Rogers is able to get away with this it is only a matter of time before more ISP's utilize the same dirty practice and it becomes mainstream.</description>
		<content:encoded><![CDATA[<p>thanks again for your input kobra.  I am currently using the hosts method to redirect rogers to localhost and it works like a charm.  Hell if I had the resources id have launched a ddos already <img src='http://serial-box.net/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>the problem here though is that other website owners not on Rogers should be more aware of how their DNS is handled.</p>
<p>for example the majority of shared web hosting companies do not check for invalid subdomains.  Using your domain name in this example if you were selling products online, sdfasf.kobrascorner.com would result in a rogers redirection to all rogers users who are not aware of how to opt-out or hard code their hosts file thus resulting in a possible lost customer to a competitor.  Website owners need to inquire about catch-all subdomains so that *.kobrascorner.com gets mapped to something on your host&#8217;s server to protect your own site.</p>
<p>Most people wouldn&#8217;t think to inquire about this type of feature but if Rogers is able to get away with this it is only a matter of time before more ISP&#8217;s utilize the same dirty practice and it becomes mainstream.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kobra</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-135</link>
		<dc:creator>Kobra</dc:creator>
		<pubDate>Tue, 22 Jul 2008 04:00:20 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-135</guid>
		<description>I already gave my two cents on this. Use your hosts file to ignore it or, if you want to be a real dick, launch a DDOS against their server with a nice message that will expose their bullshit if they go to the media.</description>
		<content:encoded><![CDATA[<p>I already gave my two cents on this. Use your hosts file to ignore it or, if you want to be a real dick, launch a DDOS against their server with a nice message that will expose their bullshit if they go to the media.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dan</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-134</link>
		<dc:creator>Dan</dc:creator>
		<pubDate>Mon, 21 Jul 2008 13:31:51 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-134</guid>
		<description>Hi Tim,

Thank you for your input. While this information is definitely useful for preventing some types of URL redirection, Rogers is doing something completely different.



I do not use Internet Explorer therefore the Live Search function should never come into play when I use Firefox on my PC or Safari on my Mac.

What Rogers is doing right now is taking any non-existent addresses and serving sponsored ad pages if the domain or subdomain you entered does not exist. If this was only a URL redirection related to Internet Explorer then performing a ping from the command line on a non-existent domain should not be returning a ROGERS IP address

The redirections in this case are going through a link similar to www20.search.rogers.com/?q=searchrsults.

Even the error pages are displaying Internet Explorer errors when you browse with a MAC using safari.

There a number of forum discussions going on about this such as http://www.digitalhome.ca/forum/showthread.php?p=771150#post771150 .

I dont imagine this type of behaviour will last very long.  If it does Rogers will be losing a nice chunk of business.  We pay to use the internet so why are we being forced to see ad plastered search pages?</description>
		<content:encoded><![CDATA[<p>Hi Tim,</p>
<p>Thank you for your input. While this information is definitely useful for preventing some types of URL redirection, Rogers is doing something completely different.</p>
<p>I do not use Internet Explorer therefore the Live Search function should never come into play when I use Firefox on my PC or Safari on my Mac.</p>
<p>What Rogers is doing right now is taking any non-existent addresses and serving sponsored ad pages if the domain or subdomain you entered does not exist. If this was only a URL redirection related to Internet Explorer then performing a ping from the command line on a non-existent domain should not be returning a ROGERS IP address</p>
<p>The redirections in this case are going through a link similar to www20.search.rogers.com/?q=searchrsults.</p>
<p>Even the error pages are displaying Internet Explorer errors when you browse with a MAC using safari.</p>
<p>There a number of forum discussions going on about this such as <a href="http://www.digitalhome.ca/forum/showthread.php?p=771150#post771150" rel="nofollow">http://www.digitalhome.ca/forum/showthread.php?p=771150#post771150</a> .</p>
<p>I dont imagine this type of behaviour will last very long.  If it does Rogers will be losing a nice chunk of business.  We pay to use the internet so why are we being forced to see ad plastered search pages?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tim Jones</title>
		<link>http://serial-box.net/2008/07/20/domain-name-owners-must-fight-rogers-dns-hijack/#comment-133</link>
		<dc:creator>Tim Jones</dc:creator>
		<pubDate>Mon, 21 Jul 2008 12:26:27 +0000</pubDate>
		<guid isPermaLink="false">http://serial-box.net/?p=182#comment-133</guid>
		<description>This is not entirely a DNS related issue. Rogers is manipulating DNS along with monitoring the URL's we are all attempting to browse to and selectively manipulating those.

A feature of Internet Explorer is "Address Bar Searching". This feature can actually be configured using Tools/Internet Options, then under the Search area, select Settings. This option allows you to select a search provider. By default Microsoft's live.com service is selected, however you can install additional providers such as Google. This is an open service and any provider, including Rogers are capable of creating and distributing providers.

What Rogers has done is review the URL structure used by this feature when using the Microsoft Live.com search provider. This particular provider takes what is typed into the address bar, when DNS name resolution fails redirects your entry too:

http://search.live.com/results.aspx?q=yoursearch&#38;src=IE-Address

The important aspect of this URL is the src=IE-Address component. This particular component is what Rogers is using to decide if they should steal the request and redirect it to their own service. If you browse to the link I provided directly your request will be stolen and sent to Rogers.

If you change your search provider to something other than Live.com, Roger's manipulation will not take into effect, unless they decide to steal this traffic as well.

This is disturbing because Rogers has made the decision for all Internet Explorer users to prevent you from using the Address Bar searching feature for Live.com. They are preventing individuals from accessing a public search engine as intended. This is not only something to be reported to the various sites already mentioned, but to Microsoft and Live.com themselves.</description>
		<content:encoded><![CDATA[<p>This is not entirely a DNS related issue. Rogers is manipulating DNS along with monitoring the URL&#8217;s we are all attempting to browse to and selectively manipulating those.</p>
<p>A feature of Internet Explorer is &#8220;Address Bar Searching&#8221;. This feature can actually be configured using Tools/Internet Options, then under the Search area, select Settings. This option allows you to select a search provider. By default Microsoft&#8217;s live.com service is selected, however you can install additional providers such as Google. This is an open service and any provider, including Rogers are capable of creating and distributing providers.</p>
<p>What Rogers has done is review the URL structure used by this feature when using the Microsoft Live.com search provider. This particular provider takes what is typed into the address bar, when DNS name resolution fails redirects your entry too:</p>
<p><a href="http://search.live.com/results.aspx?q=yoursearch&amp;src=IE-Address" rel="nofollow">http://search.live.com/results.aspx?q=yoursearch&amp;src=IE-Address</a></p>
<p>The important aspect of this URL is the src=IE-Address component. This particular component is what Rogers is using to decide if they should steal the request and redirect it to their own service. If you browse to the link I provided directly your request will be stolen and sent to Rogers.</p>
<p>If you change your search provider to something other than Live.com, Roger&#8217;s manipulation will not take into effect, unless they decide to steal this traffic as well.</p>
<p>This is disturbing because Rogers has made the decision for all Internet Explorer users to prevent you from using the Address Bar searching feature for Live.com. They are preventing individuals from accessing a public search engine as intended. This is not only something to be reported to the various sites already mentioned, but to Microsoft and Live.com themselves.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
