ICANN reviews revoking outdated suffixes
299879
Over the past few years, the Internet has seen new domain names such as ".eu" for Europe and ".travel" for the travel industry. Now, the key oversight agency is looking to get rid of some.
633181
Gareth Heyes has a new post today talking about one of the vulnerable values in the $_SERVER superglobal - PHP_SELF.   I thought it might be a good idea to gather a few test cases demonstrating the problem. Why PHP allows these URL's is beyond me and it wouldn't take much work to filter out these malicious URL's in the PHP code.   He provides four test cases to show how simple it is to abuse - one using a HTTP header, another pushing XSS through, the third mentions search pages and the fourth a direct code injection.   You can download the code here.
112634
Update Slammed for touting unavailable but unlicensed content
106233
(InfoWorld) - The Internet Corporation for Assigned Names and Numbers (ICANN) will discuss key projects and initiatives at a meeting this week, including the internationalization of the domain name system and a new, lucrative Web site registration practice that some object to. Other topics on the agenda for ICANN's 27th International meeting, to be held in Sao Paulo, include the group's strategic plan for 2007 to 2009 and next year's operating plan. Also on the discussion table are a workshop on IPV6 that will address what this new Internet protocol is and why it's needed, as well as a forum on the introduction of TLDs (top level domains). The meeting, which began Monday and ends Friday, will feature over 30 sessions and workshops. Attendees include engineers, businesspeople, government officials and private-sector executives from around the world. A major focus this week will be on the Internationalized Domain Names (IDNs) initiative, a years-long project that aims to revamp the DNS system so that it can support domain names in a broad range of languages and alphabets that can't be represented via the ASCII character set, such as Arabic and Chinese. In Sao Paulo, ICANN will issue a status report on the IDN project and hold a training and a tutorial session. So far, through lab tests and meetings, ICANN is finding that the process to broaden the DNS' support for non-ASCII characters will be more difficult than originally thought, ICANN Chief Executive Officer and President Paul Twomey said Monday during a press conference. "This is really hard," he said, adding that ICANN hopes to have a technical solution in place by the end of 2007. "It has to be done carefully so that it works for the entire world." Attendees will also discuss a recent Web-site name registration practice called "kiting" and "tasting" that is generating much controversy. It involves the wholesale purchase of expired domain names, and the subsequent cancellation of most of them during a 5-day "grace" period allowed as part of the process. If canceled before the 5 days are up, the registration fee is fully refunded. Those who engage in this practice only keep the domain names that attract enough traffic to justify their registration fee, and proceed to "park" those Web sites and load them with pay-per-click ads. "There's a whole discussion going on in the community about whether there should be anything done about this," Twomey said. "There are people who think this isn't an appropriate behavior. [Others] think this is just the market at work." Those opposed to "kiting" are suggesting that ICANN impose some sort of fee whenever a registration is canceled before the grace period is over, a move they feel will discourage the practice.
584063
Network Solutions is standing by its controversial policy of automatically registering some domain names that are the subject of searches on the company's Web site.
13737
ICANN report says new load-balancing technology helped the Internet withstand a February attack on the domain name system.
563768
Living in the zombie domain, keeping the net safe for the free world The Internet Corporation for the Assignment of Names and Numbers - that's ICANN to you, Boris - has had enough, and decided to stick it to those godless pinko commie automotons once and for all, nukes be damned.â¦
86299
Plus: Is Microsoft search engine crawling Google? [News.com Extra]
202255
OK, we had an extended breather from our last look at BIND's zone file pri.example.org. It's time to finish up and get a sense of what these records mean. To go off-topic a little, recently, I had the task of setting up two OpenLDAP servers and putting together a test environment for a project with several developers and several applications including some LAMP applications. Without a working knowledge of DNS, the project would have gone amuck.
445056
Spamhaus gives black mark to Nic.at Anti-spam organisation Spamhaus has taken the unusual step of putting an entry for Austrian Domain Registrar Nic.at on its Spamhaus Block List (SBL).â¦
566817
ICANN officially retires the .yu domain and assigns .rs to Serbia and .me to Montenegro. In this case the delay was political, not technical.
761635
There's a tutorial over on mpwebwizard.com that's been updated and talks about using a mirror to handle hits from a popular website (like digg or slashdot).   caching services such as coral content distribution network provide an alternative for when your site goes down, but why wait until it gets to that stage? why not just send all your hits from high-end websites to the coral cache version? well, there isn't a good reason not to, so i'll show you how to do it automatically.   He provides the simple script that looks for certain sites in the "HTTP_REFERER" value of incoming calls and pushes them off to the cached location with a header() redirect. The whole thing is only 12 lines, not counting the $sites array.
176495
On his blog today, Ilia Alshanetsky has posted an update on one of the last issues before PHP 5.2 is released - the Filter extension - and some of the problems that have surrounded it.    If you have been monitoring PHP's internal mailing list you probably know that over the last few weeks we've been locked in a stalemate in regard to the API revision of the filter extension brought to light by Dan from our documentation team. This is also the reason why despite this being early October PHP 5.2 is still not out.    Fortunately, after mediation with Derick and Pierre the two protagonists of the filter conundrum a compromised was finally reached.    He mentions the commit that was made to include it into the current build, and no complaints have been lodged against it. He also comments that, with this isse out of the way, developers can look for PHP 5.2RC5 out as soon as this Thursday (10.05.06). Ilia also gives a brief tour of the filter extension's functions.
446227
Slammed for touting unavailable but unlicensed content
132922
Open-source spam blocker gets legal makeover with switch to Apache license. Oh, and tech upgrades.
542302
Only 'folksonomy' inspires more fear and loathing It's official: "folksonomy", "blogosphere", "netiquette" and "blook" are among the net-spawned terms which should be cast down into the eternal fires of hell, AFP reports.â¦
463860
Hard core for core neutrality ICANN San Juan 2007 The fight over trademark rights got a welcome rematch last week, as the "free expression" contingency took the stage.â¦