Thursday 11 July 2013

Dutch domain registrar hacked via SQLi

On Tuesday, it came to light that malicious files were present on a number of SIDN websites – files that should not have been there. In order to prevent abuse, SIDN immediately took a number of precautionary measures: the DRS web application was shut down and zone file publication was temporarily suspended. As a result of our precautionary action, some areas of the website that registrars use to download registrarship-related data have been unavailable since Tuesday evening. We believe that the attack began with an SQL injection on the website 25jaarvan.nl. That site is therefore inaccessible for the time being. The precise nature of the vulnerability is currently being investigated. Further information about the security alert will continue to be made available on the site you are now viewing.

What is SIDN 

The Foundation for Internet Domain Registration in the Netherlands (SIDN) is a registry since 1996 and manages the domain names for the top level domains .NL (ie, all domain names ending in. Nl). For 1996 this function was delegated to the Centre for Mathematics and Computer Science (CWI).
SIDN is well respected in the fields of governance and administration, where it operates as an expert partner on technical, legal and policy matters relating to domain names and the domain name infrastructure. From that basis, SIDN is also closely involved with various wider community initiatives, with the emphasis on increasing the security, reliability, openness and accessibility of the internet.
SIDN represents the interests of .nl at the national and global levels and acts as a key discussion partner for the government. SIDN participates, for example, in international forums such as ICANN, CENTR, RIPE NCC, IETF and IGF. When developing policy for the .nl domain, SIDN works in consultation with its stakeholders, whose views are sought through on-line and off-line interaction, such as the domain name debates and discussion on the DNSSEC.nl platform.
SIDN sponsors various organisations and projects that promote internet use or counter the internet's negative side-effects. Examples include the Platform for Internet Security, the Advertising Fraud Support Centre, the Reporting Hotline for Internet Child Pornography and Bits of Freedom. SIDN is also committed to making the internet more sustainable and reducing server-related carbon emissions.

No comments:

Post a Comment