Details Behind Today's Internet Hacks
Aug 27, 2013Matthew Prince

Summary
This post details a specific incident of a registrar compromise (MelbourneIT) that led to unauthorized DNS name server updates for multiple high-profile domains, including The New York Times, Twitter, and The Huffington Post. Cloudflare collaborated with OpenDNS and Google to mitigate the impact by correcting DNS records and advising on registry locks. It explains the roles of registries, registrars, and recursive DNS providers in the DNS chain and highlights the vulnerability of the system to registrar-level attacks. The post also discusses the use of registry locks as a protective measure.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available