Fine on my end, what ISP are you guys on? On Saturday, 21 September 2013, Amarjit Labhuram wrote:

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com <javascript:_e({}, 'cvml', 'lusiola@gmail.com');>> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke <javascript:_e({}, 'cvml', 'skunkworks@lists.my.co.ke');> ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards: blog.denniskioko.com <http://www.denniskioko.com/>

its true brian On Sat, Sep 21, 2013 at 5:26 PM, Amarjit Labhuram < amarjit.labhuram@gmail.com> wrote:

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- "If i'm not on the list, then there is no list" pmugeni on the list of 100 most influential people Mugeni Polyhedrix Email pmugeni@egerton.ac.ke pvisita@yahoo.com pmugeni@linuxmail.com TEL.NO 0733-581746 0725-765900 "A smooth sea never made a skilled mariner."

Just google.com and you shud be fine

It seems it is a DNS Hijack...coz some machines are loading the page just fine...mmmh

...

its true brian

On Sat, Sep 21, 2013 at 5:26 PM, Amarjit Labhuram < amarjit.labhuram@gmail.com> wrote:

...

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- "If i'm not on the list, then there is no list" pmugeni on the list of 100 most influential people Mugeni Polyhedrix Email pmugeni@egerton.ac.ke pvisita@yahoo.com pmugeni@linuxmail.com

TEL.NO 0733-581746 0725-765900 "A smooth sea never made a skilled mariner." _______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Mungai S. Mbugua

CTO Elimu Holdings Limited

sospeter@elimu.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Mungai S. Mbugua CTO Elimu Holdings Limited sospeter@elimu.co.ke

Safaricom But I'm not so sure as well, could it be a case of DNS Hijack? On Sat, Sep 21, 2013 at 5:26 PM, Amarjit Labhuram < amarjit.labhuram@gmail.com> wrote:

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Lusiola Brian |3 R 1 /-\ |\|

Looks to me like a DNS hijack. On Sat, Sep 21, 2013 at 5:32 PM, Adam Nelson <adam@varud.com> wrote:

Problem for me too on jtl

Sent from my iPhone

On Sep 21, 2013, at 5:26 PM, Amarjit Labhuram <amarjit.labhuram@gmail.com> wrote:

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Even on the Google DNS servers they've changed the nameserver ... This is similar to the nytimes.com attack but much more significant since Google is so much more serious than nytimes about security... ➜ ~ dig @8.8.8.8 ns www.google.co.ke ; <<>> DiG 9.8.5-P1 <<>> @8.8.8.8 ns www.google.co.ke ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8053 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;www.google.co.ke. IN NS ;; AUTHORITY SECTION: google.co.ke. 1567 IN SOA b0x2.madleets.com. admin.google.co.ke. 2013092101 10800 3600 604800 86400 ;; Query time: 189 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Sep 21 17:57:56 EAT 2013 ;; MSG SIZE rcvd: 93 ➜ ~ -- Kili.io - OpenStack for Africa: kili.io Musings: twitter.com/varud <https://twitter.com/varud> About Adam: www.linkedin.com/in/adamcnelson On Sat, Sep 21, 2013 at 5:51 PM, Dennis Kioko <dmbuvi@gmail.com> wrote:

Anyone not on JTL seeing the same?

On Saturday, 21 September 2013, Adam Nelson wrote:

...

Problem for me too on jtl

Sent from my iPhone

On Sep 21, 2013, at 5:26 PM, Amarjit Labhuram <amarjit.labhuram@gmail.com> wrote:

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

...

Any one else right now 1719hrs Saturday 21st September

-- Lusiola Brian |3 R 1 /-\ |\|

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

It appears to be a DNS hijack across some Internet Service Providers On 9/21/13, Edwin Nguku <edwinnguku@gmail.com> wrote:

Last time when Google.co.ke was also hacked (less than 3 months ago), it was a similar case. They found a way to update the nameserver records for the domain name and point it to their servers.

On Sat, Sep 21, 2013 at 5:54 PM, Adam Nelson <adam@varud.com> wrote:

...

Even on the Google DNS servers they've changed the nameserver ... This is similar to the nytimes.com attack but much more significant since Google is so much more serious than nytimes about security...

➜ ~ dig @8.8.8.8 ns www.google.co.ke

; <<>> DiG 9.8.5-P1 <<>> @8.8.8.8 ns www.google.co.ke ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8053 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION: ;www.google.co.ke. IN NS

;; AUTHORITY SECTION: google.co.ke. 1567 IN SOA b0x2.madleets.com. admin.google.co.ke. 2013092101 10800 3600 604800 86400

;; Query time: 189 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Sat Sep 21 17:57:56 EAT 2013 ;; MSG SIZE rcvd: 93

➜ ~

-- Kili.io - OpenStack for Africa: kili.io Musings: twitter.com/varud <https://twitter.com/varud> About Adam: www.linkedin.com/in/adamcnelson

On Sat, Sep 21, 2013 at 5:51 PM, Dennis Kioko <dmbuvi@gmail.com> wrote:

...

Anyone not on JTL seeing the same?

On Saturday, 21 September 2013, Adam Nelson wrote:

...

Problem for me too on jtl

Sent from my iPhone

On Sep 21, 2013, at 5:26 PM, Amarjit Labhuram < amarjit.labhuram@gmail.com> wrote:

I am using JTL On 21 Sep 2013 17:26, "Dennis Kioko" <dmbuvi@gmail.com> wrote:

...

Fine on my end, what ISP are you guys on?

On Saturday, 21 September 2013, Amarjit Labhuram wrote:

...

Yeah....just seen it On 21 Sep 2013 17:21, "Brian L" <lusiola@gmail.com> wrote:

> Any one else right now 1719hrs Saturday 21st September > > -- > Lusiola Brian > |3 R 1 /-\ |\| > > > _______________________________________________ > skunkworks mailing list > skunkworks@lists.my.co.ke > ------------ > List info, subscribe/unsubscribe > http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks > ------------ > > Skunkworks Rules > http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 > ------------ > Other services @ http://my.co.ke >

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- with Regards:

blog.denniskioko.com <http://www.denniskioko.com/>

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------

Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

-- Never give up your right to be wrong, because then you will lose the ability to learn new things....