I've read through this article several times, and I am failing to see how this could possibly be used to form an attack.
Sure - taking the provider down is bad - but that happens due to unscheduled downtime every other day?
Sure - taking the provider down is bad - but that happens due to unscheduled downtime every other day?
>> Speaking with Vince (the administrator of the .ai zone) over WhatsApp, we confirmed that compromising this server would give us full control over any .ai domain:
>> Once administrative access is gained to the CoCCA application, it is possible to control the nameservers for every domain for that ccTLD.
The point is to control domains in a ccTLD. Arbitrary domain hijacking is bad...
Looks like it was via the backup files: