Forum Moderators: open

Message Too Old, No Replies

Microsoft Loses Control of Subdomain Used for "Live Tiles" in Windows

         

engine

2:48 pm on Apr 19, 2019 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



A security researcher has control of a subdomain that Microsoft uses to deliver news and updates to the "Live Tiles" in Windows 8 and Windows 10.

Böck registered this subdomain on his Azure account and is currently sinkholing any requests it receives. He also notified Microsoft of the issue but said the company did not reply.

"We won't keep the host registered permanently. There's a decent amount of traffic reaching this host and running up costs," the researcher said.

"Once we cancel the subdomain a bad actor could register it and abuse it for malicious attacks," he warned.

[zdnet.com...]

If you use the appropriate meta tag for this service you should remove it from the source code, or change it to deliver the appropriate XML files.

tangor

7:29 pm on May 31, 2019 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Yikes! Somebody at corporate MS will likely have to answer some questions!

That said, how can a SUBdomain be taken over? This is something new to me, as in I have never heard of it. Then again, I don't mess with domains over than my own so call me noob on this topic.