whitepages.com.au becomes granny-porn portal

Telstra White Pages Online temporarily became the gateway to one of cyberspace's red light districts this morning.

It appears that pranksters conspired to redirect the site's traffic to a pornography portal.

Users who attempted to access the online telephone directory around 10.30 am E.S.T. found themselves in a sticky situation, viewing an explicit image of senior citizens engaged in an act of sexual congress.

At this stage, it appears that the problem only affected customers of South Australia-based Internet Service Provider, Internode.

John Harris of South Australia-based Impress Media, who found himself unexpectedly redirected to the online porn venue, said that the situation required immediate and thorough investigation, despite the nature of the material it would expose him to.

He said his exhaustive investigation unearthed some "asian lovelies" but, alas, no answer to the mysterious re-direct.

"It's a legitimate excuse to check out a porn site," he said.

A disappointed Harris said his investigation was brought to an end after the site requested his credit card details.

South Australian Government employee Damon Wynne also seemed more amused rather than annoyed when he found himself in similar circumstances to Harris this morning. He believes that a socially engineered infiltration rather than a conventional network attack lies behind the malady.

According to Wynne, the perpetrator probably contacted Internode under the guise of an authorised White Pages Online employee and simply asked for the site's DNS records to be changed.

According to sources close to Internode executives, the ISP has recently experienced security breaches similar to those affecting White Pages Online today. The source said that at least one executive would be -raising hell" about this should Internode be found to be responsible.

Telstra, White Pages Online's service provider, said that enquiries it placed with the site's administrator, Pacific Access, revealed nothing.

Earlier today, a spokesperson for Pacific Access told ZDNet Australia that they were investigating the problem but later declined to comment on the incident.

Harris and Wynne both said that the redirection was corrected soon after they discovered it.

For comparison, Wynne pointed to examples of other companies that have been targeted for similar, but politically motivated attacks in the past. In June 2000 'hack-tivists' redirected Nike.com to Australia-based activist site s11.org.

Thus far, there appears to be no motive for the recent attack on the White Pages site apart from schoolboy-ish fun.

Internode was contacted for comment on this report.

Like this article? Click below to send it to your mobile for free!

Talkback 6 comments

  1. FYI - I am not a Gov't employee. Still it was pretty amusing regardless to go to look up an address and get "smooth ****" dot com instead hahaha... Anonymous -- 11/03/02

    FYI - I am not a Gov't employee.

    Still it was pretty amusing regardless to go to look up an address and get "smooth ****" dot com instead hahaha...

  2. "South Australian Government employee Damon Wynne also seemed more amused rather than annoyed when he found himself in similar circumstances to Harris this morning. He believes that a socially engineered infiltration rather than a conventional networ Bron Gondwana -- 13/03/02

    "South Australian Government employee Damon Wynne also seemed more amused rather than annoyed when he found himself in similar circumstances to Harris this morning. He believes that a socially engineered infiltration rather than a conventional network attack lies behind the malady.

    According to Wynne, the perpetrator probably contacted Internode under the guise of an authorised White Pages Online employee and simply asked for the site's DNS records to be changed."

    I find this rather difficult to believe, and am disappointed that it has been posted before checking with Internode, or anyone else who understands the domain name system.

    The domain name system works on a top-down addressing system, where each level of naming from the right hand side has certain 'Authoritative' servers which will be checked with if the local server (i.e. Internode's Name Servers) don't already have a copy of the details stored locally. Every domain also has a timeout, after which the local server will try to get another copy of the domain's details from an Authoritative source.
    I'm quite certain nobody at Internode would try to over-ride this list of servers for whitepages.com.au - not only is it technically difficult, but they would know that they're only changing details for their own customers, since their servers are not Authoritative to the rest of the world.

    The list of servers for whitepages.com.au is as follows:

    Authoritative answers can be found from:
    whitepages.com.au nameserver = ns2.pacificaccess.com.au.
    whitepages.com.au nameserver = ns0.pacificaccess.com.au.
    whitepages.com.au nameserver = ns1.pacificaccess.com.au.
    whitepages.com.au nameserver = ns1.telstra.net.
    ns2.pacificaccess.com.au internet address = 144.140.254.12
    ns0.pacificaccess.com.au internet address = 203.89.229.72
    ns1.pacificaccess.com.au internet address = 203.55.45.5
    ns1.telstra.net internet address = 139.130.4.5
    ns1.telstra.net internet address = 203.50.0.24

    ----------------------------------

    Please note that none of these servers is owned by Internode. Indeed, they are owned by either Telstra or Pacific Access (who you mention in your story). In the middle of last year, Telstra's nameservers had exactly the same problem - almost everything ending in .com was redirected to a server in Korea. The server in Korea was running a default Redhat Linux install showing a 'Congratulations, you have installed Apache' page. We never worked out which virtual domains it was actually pretending to be. They could have easily hijacked windowsupdate.microsoft.com and infected hundreds of computers with fake automatic updates for all we know.

    The problem is DNS Cache poisoning - where someone manages to fool the server at Internode, or Telstra, or anyone who's server is used by many people, into believing that it already knows the address for www.whitepage.com (or in the Telstra case *.com, which is even more dangerous - that means _anything_ ending in .com that you don't already know the location of).

    Anyone who wants to know more about DNS Cache Poisoning is free to read the following links:
    http://rr.sans.org/firewall/DNS_spoof.php
    http://www.leccorder.com/content/seminars/Security-23Apr1999/Slides/sld018.htm

    DISCLAIMER: I am not associated with Internode (though my employer is a customer of theirs for one whole ADSL connection) - I just don't like to see companies unfairly blamed for something they didn't do.

  3. This article shows a clear mis-understanding of how DNS works. Anonymous -- 13/03/02

    This article shows a clear mis-understanding of how DNS works.

    1. granny porn allan marsh -- 09/09/08

      none

    2. granny **** mike black -- 21/09/08

      Granny ****

  4. Actually, I think this shows a clear example of how the media come to their own conclusions with little or no knowledge of what they are actually talking about, or without getting prior advice. This has helped me come to the conclusion to disre Anonymous -- 13/03/02

    Actually, I think this shows a clear example of how the media come to their own conclusions with little or no knowledge of what they are actually talking about, or without getting prior advice.

    This has helped me come to the conclusion to disregard articles in a particular newspaper's computer section.

    I think an apology is in order.

Add your opinion


Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Alex Serpo Will the NSW Govt put Linux in schools?
    The NSW Government's release this week of an expressions of interest tender to give low-cost laptops to every senior public school student in NSW is a big step, but will these systems be Windows or Linux?
  • Array Naked Mac versus protected PC: What wins?
    What's easier to manage — 200 Mac OS X systems without antivirus or 200 Windows systems running a leading antivirus package?
  • Array Dear Telstra: pack up your toys, go home
    Rejecting Telstra's proposal, after all, is the only conclusion Conroy can reach: as someone whose entire philosophy is built around transparency and process, he simply cannot keep Telstra as part of the NBN bidding process anymore.
  • More blogs »

Tags

Back to top

Featured