Wednesday January 24, 2001
Microsoft Web Sites Cut Off From Many Users

By Scott Hillis

SEATTLE (Reuters) - Several Microsoft Corp. (NasdaqNM:MSFT - news) Web sites, including the software giant's main corporate site, were cut off to many users on Wednesday, due to a glitch in the system that directs Web surfers to the sites, the company said.

Problems with almost every major Microsoft Web site surfaced on Tuesday night in the United States and Europe, and Microsoft technicians were diagnosing the problem and hoped to have the sites back up soon, company spokesman Adam Sohn said.

Asked if the problems could be the result of a hacker attack, Sohn said, ``We're not ruling anything out at this point. There's not enough data at this point, but the guys are working as quick as they can to get it diagnosed, treated and cured.''

As of Wednesday afternoon, the affected sites included microsoft.com, the company's main site where customers can go for product news and updates, the Expedia (NasdaqNM:EXPE - news) travel service, the Carpoint automobile shopping site, and the Homeadvisor home buying site.

The MSN.com portal that is a popular site for searches, shopping and news, the WindowsMedia entertainment guide, and the Hotmail free e-mail service were also inaccessible for some time but appeared to be normal by Wednesday afternoon.

Attack Doubted
Internet security analysts were skeptical of speculation that the problem was due to hackers carrying out denial-of-service attacks in which computers are programmed to flood a Web site with so many requests for information that it blocks anyone else from seeing the site.

Such attacks shut down high-profile sites like auction site eBay, online retailer Amazon.com, news site CNN.com and portal Yahoo.com last year.

``These do not appear to be denial-of-service attacks against their Web site,'' said Daniel Todd, chief technologist for public services at Keynote Systems Inc. (NasdaqNM:KEYN - news), a Web security firm that helped uncover last year's attacks.

But the length of time the problem lasted pointed to something seriously wrong in the Microsoft system, Todd said.

``If it's a simple software or hardware problem, then it shouldn't take that long to fix. It's hard to imagine this is a simple problem. If it's complicated or if it's something malicious against the servers, we can't be sure yet.''

Whatever the cause, the glitch was of little concern to investors as Microsoft shares rose $2-3/8, or 3.9 percent, to $62-15/16 on the Nasdaq. Expedia shares climbed 1/2, or 3.3 percent, to $15-7/8.

Translators Knocked Out
It was one of the broadest Web site outages in weeks. Earlier this month, eBay crashed for nearly 11 hours due to system failures. In December, Amazon.com was down briefly several times during the busy holiday shopping season.

If a hacker is behind Microsoft's problems, it would be the latest embarrassing attack on the world's largest software company, which was hit in October by an intruder who made off with part of the code for products in development.

Microsoft's Sohn said the root of the problem was not with the Web sites themselves, but with the DNS, or domain name server, system that directs visitors to the sites.

The DNS system translates words like ``microsoft.com'' into a string of numbers, called an IP (Internet Protocol) address. Using an analogy from Keynote's Todd, it acts like a phone book to give the right telephone number for a given name.

Some users could still get to the sites if they accessed the Internet through proxy servers, a kind of computer often used by large companies or Internet access providers to store popular Web content closer to end users, Sohn said.

Because Web site information is often stored for days on proxy servers, those computers might still point the way to Microsoft's online properties without help from Microsoft's system, Sohn said.

PART 2

an email thread that passed my way
by anonymous

hehehe... the news reports i saw were saying they "doubted" microsoft was hacked... hehehe. (see above)

I guess it depends what you mean by "being hacked"?

>Subject: [Fwd: pho: Off-topic : MS Hacking Exposed]
>Try this - go to http://www.dslreports.com/ip and do a whois
>on Microsoft.com
>
>Perhaps this is why all of thier domains are not resolving for
>some odd reason this morning..
>
>This is too classic :)
>
>Props to Kyle @ HardOCP.com for pointing it out to me.
>
>-X-
>http://x.dmusic.net
>
>~~~~~~~~~~~~~~~~~~~~~~~
>
>Whois Server Version 1.3
>
>Domain names in the .com, .net, and .org domains can now be registered
>with many different competing registrars. Go to http://www.internic.net
>for detailed information.
>
>   Server Name:
>   MICROSOFT.COM.WILL.LIVE.FOREVER.BUT.LUNIX.SUCKS-BYBIRTH.ARTISTICCHEESE.COM
>   IP Address: 209.191.22.24
>   Registrar: CORE INTERNET COUNCIL OF REGISTRARS
>   Whois Server: whois.corenic.net
>   Referral URL: www.corenic.net
>
>
>
>   Server Name: MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.COM
>   IP Address: 207.10.88.13
>   Registrar: INTERNET DOMAIN REGISTRARS
>   Whois Server: whois.registrars.com
>   Referral URL: www.registrars.com
>
>
>
>   Server Name: MICROSOFT.COM.SE.FAIT.HAX0RIZER.PAR.TOUT.LE.ZOY.ORG
>   IP Address: 138.12.12.12
>   Registrar: GANDI
>   Whois Server: whois.gandi.net
>   Referral URL: www.gandi.net
>
>
>
>   Server Name: MICROSOFT.COM.OWNED.BY.MAT.HACKSWARE.COM
>   IP Address: 211.63.57.1
>   Registrar: TUCOWS.COM, INC.
>   Whois Server: whois.opensrs.net
>   Referral URL: www.opensrs.org
>
>
>
>   Server Name: MICROSOFT.COM.N-AIME.BILL.QUE.QUAND.IL.N-EST.PAS.NU
>   IP Address: 62.220.128.7
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name: MICROSOFT.COM.MUST.STOP.TAKEDRUGS.ORG
>   IP Address: 12.5.4.8
>   Registrar: REGISTER.COM, INC.
>   Whois Server: whois.register.com
>   Referral URL: www.register.com
>
>
>
>   Server Name: MICROSOFT.COM.IS.SOON.GOING.TO.THE.DEATHCORPORATION.COM
>   IP Address: 62.92.244.245
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name: MICROSOFT.COM.IS.SECRETLY.RUN.BY.ILLUMINATI.TERRORISTS.NET
>   IP Address: 170.1.75.143
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name: MICROSOFT.COM.IS.NOTHING.BUT.A.MONSTER.ORG
>   IP Address: 213.156.2.27
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name:
MICROSOFT.COM.IS.NO.MATCH.FOR.THE.UEBER-GEEKS.AT.JIMPHILLIPS.ORG
>   IP Address: 24.240.60.24
>   Registrar: TUCOWS.COM, INC.
>   Whois Server: whois.opensrs.net
>   Referral URL: www.opensrs.org
>
>
>
>   Server Name: MICROSOFT.COM.IS.GOD.BUT.LINUX.SUCKS-FOREVER.ARTISTICCHEESE.COM
>   IP Address: 209.191.99.161
>   Registrar: CORE INTERNET COUNCIL OF REGISTRARS
>   Whois Server: whois.corenic.net
>   Referral URL: www.corenic.net
>
>
>
>   Server Name: MICROSOFT.COM.IS.BORING.COMPARED.TO.TEENEXTREME.COM
>   IP Address: 192.168.134.237
>   Registrar: TUCOWS.COM, INC.
>   Whois Server: whois.opensrs.net
>   Referral URL: www.opensrs.org
>
>
>
>   Server Name: MICROSOFT.COM.IS.AT.THE.MERCY.OF.DETRIMENT.ORG
>   IP Address: 216.229.2.231
>   Registrar: GANDI
>   Whois Server: whois.gandi.net
>   Referral URL: www.gandi.net
>
>
>
>   Server Name: MICROSOFT.COM.INSPIRES.COPYCAT.WANNABE.SUBVERSIVES.NET
>   IP Address: 208.178.101.5
>   Registrar: DOTSTER, INC.
>   Whois Server: whois.dotster.com
>   Referral URL: http://www.dotster.com/help/whois
>
>
>
>   Server Name: MICROSOFT.COM.HAS.NO.LINUXCLUE.COM
>   IP Address: 209.208.48.121
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name: MICROSOFT.COM.HACKED.BY.PSYKOJOKO.ON.A.ROOT-NETWORK.COM
>   IP Address: 193.251.82.2
>   Registrar: CORE INTERNET COUNCIL OF REGISTRARS
>   Whois Server: whois.corenic.net
>   Referral URL: www.corenic.net
>
>
>
>   Server Name: MICROSOFT.COM.HACKED.BY.HACKSWARE.COM
>   IP Address: 211.63.57.62
>   Registrar: TUCOWS.COM, INC.
>   Whois Server: whois.opensrs.net
>   Referral URL: www.opensrs.org
>
>
>
>   Server Name: MICROSOFT.COM.GUTS.NL
>   IP Address: 212.78.175.7
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name:
MICROSOFT.COM.FAIT.VRAIMENT.DES.LOGICIELS.A.TROIS.FRANCS.DOUZE.ORG
>   IP Address: 138.12.12.42
>   Registrar: GANDI
>   Whois Server: whois.gandi.net
>   Referral URL: www.gandi.net
>
>
>
>   Server Name: MICROSOFT.COM.ER.IKKE.NO.I.FORHOLD.TIL.LATHANS.NET
>   IP Address: 62.92.244.246
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>
>
>
>   Server Name: MICROSOFT.COM.AINT.WORTH.SHIT.KLUGE.ORG
>   IP Address: 216.181.127.195
>   Registrar: THE NAME IT CORPORATION
>   Whois Server: whois.nameit.net
>   Referral URL: www.nameit.net
>
>
>
>   Domain Name: MICROSOFT.COM
>   Registrar: NETWORK SOLUTIONS, INC.
>   Whois Server: whois.networksolutions.com
>   Referral URL: www.networksolutions.com
>   Name Server: DNS4.CP.MSFT.NET
>   Name Server: DNS5.CP.MSFT.NET
>   Name Server: DNS7.CP.MSFT.NET
>   Name Server: DNS6.CP.MSFT.NET
>   Updated Date: 29-sep-2000
>
>
>>>> Last update of whois database: Tue, 23 Jan 2001 10:55:29
>EST <<<
>
>The Registry database contains ONLY .COM, .NET, .ORG, .EDU domains
>and
>Registrars.