Welcome to WebmasterWorld Guest from 107.23.37.199

Forum Moderators: bill

Microsoft Loses Control of Subdomain Used for "Live Tiles" in Windows

     
2:48 pm on Apr 19, 2019 (gmt 0)

Administrator from GB 

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:May 9, 2000
posts:26179
votes: 963


A security researcher has control of a subdomain that Microsoft uses to deliver news and updates to the "Live Tiles" in Windows 8 and Windows 10.

Böck registered this subdomain on his Azure account and is currently sinkholing any requests it receives. He also notified Microsoft of the issue but said the company did not reply.

"We won't keep the host registered permanently. There's a decent amount of traffic reaching this host and running up costs," the researcher said.

"Once we cancel the subdomain a bad actor could register it and abuse it for malicious attacks," he warned.

[zdnet.com...]

If you use the appropriate meta tag for this service you should remove it from the source code, or change it to deliver the appropriate XML files.
7:29 pm on May 31, 2019 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member tangor is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 29, 2005
posts:9901
votes: 970


Yikes! Somebody at corporate MS will likely have to answer some questions!

That said, how can a SUBdomain be taken over? This is something new to me, as in I have never heard of it. Then again, I don't mess with domains over than my own so call me noob on this topic.