{
  "id": "e238d6853582",
  "url": "https://arstechnica.com/security/2024/09/rogue-whois-server-gives-researcher-superpowers-no-one-should-ever-have/",
  "title": "Rogue WHOIS server gives researcher superpowers no one should ever have | Ars Technica",
  "note": "This is a pretty incredible story and I’m surprised that there is no cryptographic signing requirements for a WHOIS server like this. In this case this researcher simply setup a WHOIS server where one previously was and a bunch of things just trusted it because it was there!\n\n> To Harris’s surprise, his server received queries from slightly more than 76,000 unique IP addresses within a few hours of setting it up. Over five days, it received roughly 2.5 million queries from about 135,000 unique systems. The entities behind the systems querying his deprecated domain included a who’s who of Internet heavyweights comprising domain registrars, providers of online security tools, governments from the US and around the world, universities, and certificate authorities, the entities that issue browser-trusted TLS certificates that make HTTPS work.\n\nIt seems wild that such a critical function wouldn't require some form of certificate to prove it is valid. ",
  "voice": "mixed",
  "saved": "2024-09-13T01:28:01Z",
  "host": "arstechnica.com",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/e238d6853582/",
  "markdown": "https://links.thingelstad.xyz/links/e238d6853582.md",
  "issues": [
    {
      "number": 293,
      "slug": "293",
      "title": "Weekly Thing 293 / WHOIS, Glowtime, Place",
      "date": "2024-09-14T12:20:58.332267Z",
      "section": "Notable",
      "position": 6,
      "url": "https://weekly.thingelstad.com/archive/293/",
      "page": "https://links.thingelstad.xyz/issues/293/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 186,
      "page": "https://links.thingelstad.xyz/hosts/arstechnica.com/",
      "nearest": [
        {
          "id": "f018ee92a977",
          "title": "Reviewing iOS 18 for power users: Control Center, iCloud, and more | Ars Technica",
          "url": "https://arstechnica.com/gadgets/2024/09/a-quick-guide-to-ios-power-user-features-the-new-control-center-and-beyond/",
          "record": "https://links.thingelstad.xyz/links/f018ee92a977/"
        },
        {
          "id": "f57b97090a57",
          "title": "Vaporizing plastics recycles them into nothing but gas | Ars Technica",
          "url": "https://arstechnica.com/science/2024/09/vaporizing-plastics-recycles-them-into-nothing-but-gas/",
          "record": "https://links.thingelstad.xyz/links/f57b97090a57/"
        },
        {
          "id": "3c1c10b1d7e5",
          "title": "Google calls for halting use of WHOIS for TLS domain verifications | Ars Technica",
          "url": "https://arstechnica.com/security/2024/09/google-calls-for-halting-use-of-whois-for-tls-domain-verifications/",
          "record": "https://links.thingelstad.xyz/links/3c1c10b1d7e5/"
        },
        {
          "id": "f08de805839a",
          "title": "NIST proposes barring some of the most nonsensical password rules | Ars Technica",
          "url": "https://arstechnica.com/security/2024/09/nist-proposes-barring-some-of-the-most-nonsensical-password-rules/",
          "record": "https://links.thingelstad.xyz/links/f08de805839a/"
        },
        {
          "id": "9252bf79ee50",
          "title": "Your doctor’s office could be reading your blood pressure all wrong - Ars Technica",
          "url": "https://arstechnica.com/health/2024/10/your-doctors-office-could-be-reading-your-blood-pressure-all-wrong/",
          "record": "https://links.thingelstad.xyz/links/9252bf79ee50/"
        }
      ]
    },
    "same_week": {
      "count": 12,
      "nearest": [
        {
          "id": "873b4d4fc195",
          "title": "Why AI Can Push You to Make the Wrong Decision at Work",
          "url": "https://www.brainfacts.org/neuroscience-in-society/tech-and-the-brain/2024/why-ai-can-push-you-to-make-the-wrong-decision-at-work-090324",
          "record": "https://links.thingelstad.xyz/links/873b4d4fc195/"
        },
        {
          "id": "7ee9c458e4da",
          "title": "My Thoughts About Apple’s iPhone 16 “Glowtime” Event – On my Om",
          "url": "https://om.co/2024/09/10/my-thoughts-about-apples-iphone-16-glowtime-event/",
          "record": "https://links.thingelstad.xyz/links/7ee9c458e4da/"
        },
        {
          "id": "a678ccb7abe9",
          "title": "The new reMarkable Paper Pro adds a color display",
          "url": "https://www.engadget.com/mobile/tablets/the-new-remarkable-paper-pro-adds-a-color-display-120059067.html?utm_id=590396&guccounter=1",
          "record": "https://links.thingelstad.xyz/links/a678ccb7abe9/"
        },
        {
          "id": "8802b65f3bf1",
          "title": "Windows NT vs. Unix: A design comparison by Julio Merino",
          "url": "https://blogsystem5.substack.com/p/windows-nt-vs-unix-design",
          "record": "https://links.thingelstad.xyz/links/8802b65f3bf1/"
        },
        {
          "id": "bacc2e780b02",
          "title": "LLM Visualization",
          "url": "https://bbycroft.net/llm",
          "record": "https://links.thingelstad.xyz/links/bacc2e780b02/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://arstechnica.com/security/2024/09/rogue-whois-server-gives-researcher-superpowers-no-one-should-ever-have/"
  }
}