Forwarded from Pegasus NSO & other spyware
I accidentally logged hundreds of thousands of phone calls to military bases | lina's blog –
@cKure
#DNS #DNSHijacking
DNS hijacking is silly. I already took over different .gov and .edu domains in the past, but I just immediately reported that and moved on.
This one is a little different though, it's about how I took over phone-network infrastructure domains (e164.arpa) of entire territories, and accidentally logged hundreds of thousands of phone calls to military bases. But let's start at the beginning.What is e164.arpa anyway?
ENUM (e164.arpa) was an idea from the early 2000s1: take a phone number, reverse the digits, put dots between them, and add .e164.arpa at the end, so +49 30 123456 becomes something like 6.5.4.3.2.1.0.3.9.4.e164.arpa. You can see that every German number will end up under .9.4.e164.arpa, which is the zone for all +49 numbers, and that zone is controlled by DENIC (the same organization that runs .de). @cKure
#DNS #DNSHijacking