Home page logo
/

pauldotcom logo PaulDotCom mailing list archives

Re: RES: New IP addresses range for google?
From: KP <kepjr1 () gmail com>
Date: Tue, 10 Dec 2013 12:07:35 -0600

Yoi just have to love the French.  Nice job to those that found it so
quickly and lets hope not much was taken from those that did it thos time.
On Dec 10, 2013 1:02 PM, "Samuel Riesz" <samuel () cecred coop br> wrote:


http://nakedsecurity.sophos.com/2013/12/09/serious-security-google-finds-fake-but-trusted-ssl-certificates-for-its-domains-made-in-france/

  __________________________________
*Samuel Riesz*
   ------------------------------
*De:* pauldotcom-bounces () mail pauldotcom com [
pauldotcom-bounces () mail pauldotcom com] em nome de Liam Randall [
liam.randall () gigaco com]
*Enviado:* terça-feira, 10 de dezembro de 2013 12:42
*Para:* PaulDotCom Security Weekly Mailing List
*Assunto:* Re: [Pauldotcom] New IP addresses range for google?


http://www.reddit.com/r/AskNetsec/comments/1s9nd5/googlecom_dns_hijack_or_something_else/

 Liam


On Mon, Dec 9, 2013 at 9:03 PM, Bacon Zombie <baconzombie () gmail com>wrote:

" Late on December 3rd, we became aware of unauthorized digital
certificates for several Google domains. We investigated immediately and
found the certificate was issued by an intermediate certificate authority
(CA) linking back to ANSSI, a French certificate authority. Intermediate CA
certificates carry the full authority of the CA, so anyone who has one can
use it to create a certificate for any website they wish to impersonate."


http://googleonlinesecurity.blogspot.ro/2013/12/further-improving-digital-certificate.html?m=1
 On 10 Dec 2013 01:59, "Bacon Zombie" <baconzombie () gmail com> wrote:

Looks like a French based CA has generate a "fake" Google Cert which they
have just found out about.
 On 10 Dec 2013 01:47, "Jim Halfpenny" <jim.halfpenny () gmail com> wrote:

The SSL certificate looks legit. It's a wildcard for a whole load of
Google services and I've seen this before on some kind of Google CDN or
content accelerator. Makes me wonder what one of those certs is worth on
the black market....

 Jim


On 7 December 2013 14:18, chilli34 . <chilton.brian () gmail com> wrote:

 Has anybody heard of Google spinning up some new IP address ranges in
Mexico?  We currently are having issues resolving requests for
google.com and our ISP Is sending us to some 201.130.208.45 addresses
which have the Google front page but the subnet range isn't owned by
google.com.  Hoping somebody out there might have some info on this,
anything you can provide would be great!

Thanks,
 p.s. here is a full list of IP's that we are hitting.
          201.130.208.45
          201.130.208.49
          201.130.208.53
          201.130.208.57
          201.130.208.59
          201.130.208.15
          201.130.208.19
          201.130.208.23
          201.130.208.27
          201.130.208.29
          201.130.208.30
          201.130.208.34
          201.130.208.38
          201.130.208.42
          201.130.208.44

Brian

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



--
Esta mensagem foi verificada pelo sistema de antivirus e
acredita-se estar livre de perigo.

--
Esta mensagem foi verificada pelo sistema de antivirus e
acredita-se estar livre de perigo.

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]