ICANN: The TRUTH about that hacker attack on our DNS zone file database

The internet's critical IANA body – which allocate IP addresses and manage global DNS – was not compromised by hackers who broke into domain-name overseer ICANN's systems, the organization has stressed. In a brief update published Friday morning, ICANN noted: "We have confirmed that the attack has not impacted any IANA-related …

[Anonymous Coward]

El Reg uses two factor authentication?

Apparently Team Register values a few dozen news stories a day and associated commentard boards more highly than Sony values IP worth billions!

[Ole Juul]

Re: El Reg uses two factor authentication?

Good point, but isn't it really the other way around? ... Sony values their own IP less than a few dozen news stories a day.

[Anonymous Coward]

Re: El Reg uses two factor authentication?

I can't speak for anyone else but I really do value The Register more highly than I value Sony.

[Trevor_Pott]

Re: El Reg uses two factor authentication?

There are people who value Sony? How odd.

[Will Godfrey]

But but but

We are the Internet, we can't possibly be wrong.

[Destroy All Monsters]

Re: But but but

"We are obfuscating ... and we have become exceedingly good at it!"

[streaky]

El Reg Plz..

"The seeming unwillingness to share even basic information on its operational security raises the question over whether they are in place at all"

You can't possibly serious.

This sounds like those people who say there's aliens at Roswell because the US govt doesn't release all it's data and that proves that Jesus killed Kennedy.

The most basic security measure of them all is to not go around telling people about your security measures in the same way as you don't let a team of bank robbers inspect your vault if you can possibly avoid it.

Obscurity isn't security it's true but it's a start, anything you can do to slow people down.

[diodesign]

Re: El Reg Plz..

Take the article as a whole, rather than reading too much into a single sentence :-) Later we note: "any information provided publicly could be used by miscreants to shape an attack."

What we're saying is: more detail of procedures/policy would be welcome. It's tricky. Some will say you should be able to disclose everything about your security implementation to prove you're confident it's built right. Others will say there's no need to just hand over the blueprints to enemies.

It's tricky.

C.

[streaky]

Re: El Reg Plz..

I took the article as a whole - it reads like you're saying that because they're not splashing around info about security measures it's entirely possible they don't really exist; which is a pretty big leap. They've given as much information as I'd be happy for them to give if I was personally involved.