Internet management body ICANN has said no applicant information was compromised in the glitch which led to the new top-level domain application system being taken offline, but has as yet given no date when it will be reinstated.
The registration system, with which organisations can apply for £185,000 top level “dot-brand” domains such as .google or .disney, was withdrawn from use on the closing date for applications last Thursday after the system showed unusual behaviour and a possible data breach. The system is still offline while ICANN thoroughly checks what data has been exposed, according to a video interview with ICANN’s chief security officer Jeff Moss, posted on ICANN’s site.
A problem with the system’s file deletion function meant that some users saw a minor class of data – another user’s file names. The leak was random and did not allow file access to any other user’s data, said Moss.
“Under certain circumstances, users that had previously deleted a file, could end up seeing the filneame of another user who had uploaded a file,” he explained, “Certain data was being revealed to users who were not seeknig that data. It would just show up on their screen.”
All they saw were file names, and they were not able to access those files. In fact that problem was first seen on 19 March, but ICANN thought that random data was being shown.
When ICANN is sure who saw what information, every user will be contacted, said Moss. “We want to prevent any monkey business,” he said.
Later tonight, ICANN will make a further announcement.
Do you understand the Internet as well as ICANN does? Try our quiz
British regulator invites feedback on major partnerships Microsoft and Amazon have struck with smaller AI…
Another 20 staff have been fired by Google over Israel protest and their “completely unacceptable…
Censorship row brewing down under, after the Australian Prime Minister calls Elon Musk an 'arrogant…
Financial regulator asks New York judge to impose $5.3 billion in fines against Terraform Labs…
Lightweight artificial intelligence model launched this week by Microsoft, offering more cost-effective option for Azure…
ByteDance protest falls on deaf ears, as Senate passes TikTok ban or divest bill, with…