Why are tools using hardcoded lists of WHOIS servers? Seems there is a standard ...

crote · 2024-09-11T15:17:36 1726067856

A plain

  mobi.whois.arpa. CNAME whois.nic.mobi

could've already solved the issue. But getting everyone to agree and adopt something like that is hard.

Although as fanf2 points out below, it seems you could also just start with the IANA whois server. Querying https://www.iana.org/whois for `mobi` will return `whois: whois.nic.mobi` as part of the answer.

rty32 · 2024-09-11T13:49:22 1726062562

The reality of life is that there are way more hardcoded strings than you imagine or there should be.

tryauuum · 2024-09-11T19:54:45 1726084485

I have a feeling whois is way older than the concept of SRV records even

meepmorp · 2024-09-11T20:04:33 1726085073

The first WHOIS db was created in early 70s, according to Wikipedia. So, older than DNS itself.

xyst · 2024-09-11T17:52:58 1726077178

because people build these tools as part of one time need, publish it for others (or in case they need to reference it themselves). Other "engineers" copy and paste without hesitating. Then it gets into production and becomes a CVE like discussed.

Developer incompetence is one thing, but AI-hallucination will make this even worse.