Google is now an ICANN-accredited registrar of domain names, providing it with yet another potential line of expansion. The fast-growing search provider is approved to sell names in seven top-level domains (TLDs) including .com, .net, .org, .biz., info, .name and .pro.

Google's registrar status, first noted by LexText, is likely to prompt speculation about its ambitions in web hosting and blogging. Google operates Blogger, the free blog hosting service with a huge user base. Cheap or free domain names could prove useful to Google in the notoriously price-sensitive blog hosting sector, where most bloggers use subdomains (i.e. myblog.bloghost.com) rather than full domain names (www.myblog.com).

Posted by Rich Miller at 31 January 2005 in Around the Net | Print this Page
SBC Communications' $16 billion purchase of AT&T will create America's largest telecom company. But it will also boost SBC's profile in the web hosting business, where AT&T has an impressive portfolio of blue-chip customers - including SBC's biggest competitor in the U.S. broadband market.

Comcast Communications, the largest U.S. provider of broadband, currently hosts its high-speed Internet service at AT&T WorldNet, while its corporate site resides at Digex, a unit of MCI. SBC is America's largest provider of high-speed ISDN Internet access over phone lines, and is in a pitched battle for subscribers with Comcast, reflecting a larger war for broadband supremacy between cable providers and phone companies.

Posted by Rich Miller at 31 January 2005 in Hosting | Print this Page
Domain registrar Go Daddy has decided to purchase a second ad during next Sunday's Super Bowl, for an overall $4.8 million investment in 60 seconds worth of air time. But the advertisement Go Daddy submitted for its second 30-second slot was rejected by the Fox Network, according to a weblog post by CEO Bob Parsons.

Go Daddy will instead use the newly-purchased ad slot - to appear in the final minutes of the game - to repeat a first-half ad, which has already been approved by Fox. Go Daddy will make the rejected ad available on its web site Monday, apparently hoping to get additional publicity from Internet buzz, and leaving skeptics to wonder whether the "rejection" was a strategic ploy to gain extra mileage from the Super Bowl investment.

Posted by Rich Miller at 30 January 2005 in Hosting | Print this Page
A malicious bot program is breaking into poorly-secured MySQL databases running on Windows web servers, and appears to have compromised several thousand systems. The malware is using a brute force password attack to gain access to MySQL installations with weak administrative (root) passwords, according to an analysis by the Internet Storm Center.

Once the bot has gained access to MySQL, it uses the MySQL UDF Dynamic Library Exploit to upload malicious code to the infected system and then connects to an IRC channel. Once incorporated into the bot network, the "zombie" machines attempt to infect other servers, but could easily be used for other purposes.

Posted by Rich Miller at 27 January 2005 in Security | Print this Page
1&1 Internet AG, the world's largest hosting company, has launched a promotion offering free full-featured web hosting accounts for up to six months. The "Test Drive" features 1&1’s BusinessPro Package, which is its most popular hosting plan and normally costs $9.99 a month. The free trial includes a domain name and participants do not have to submit any credit card information.

The offer is similar to an earlier 1&1 campaign to promote the launch of its U.S. hosting operation, which offered up to three years of unpaid hosting. 1&1 is clearly hoping to convert the free accounts to paid customers, which it presumably has not yet done with the approximately 100,000 accounts it signed up under its U.S. launch promotion. The free hosting offer debuts as many hosting companies are seeking to attract customers with enhanced disk space and bandwidth allowances, rather than price cuts that further erode profit margins.

Posted by Rich Miller at 24 January 2005 in Hosting | Print this Page

Yahoo has extended its $4.98 a year domain name promotion through at least Feb. 8, the third such extension since it introduced the offer on Dec. 10. The promotion was intially scheduled to end Dec. 31, but the extension suggests the offer is generating business for Yahoo, which is seeking to attract small business customers.

In other domain pricing movements, Go Daddy has lowered its one-year .com price from $8.95 to $7.95, having shfted back and forth between the two prices periodically over the last year. The registrar recently expanded its hosting offerings, will be an advertiser in the Super Bowl on Feb. 6, but has not indicated whether it will support its $2.4 million commercial with any special pricing offers.

Retail Domain Name Prices, January 2005
Company One-year
.com price
 Primary Business  Primary Region
Yahoo $4.98 Shared Hosting America
1&1 Internet AG $5.99 Mixed Hosting Europe
EV1Servers $6.49 Dedicated Hosting America
Hostway $6.95 Shared Hosting America
Go Daddy Inc $7.95 Domain Registrar America
Interland $7.95 Mixed Hosting America
Web.com $7.95 Mixed Hosting America
AIT Domains $7.99 Mixed Hosting America
RegisterFly $9.99 Domain Registrar America
Dotster $14.95 Domain Registrar America
FastHosts/UKReg $16.86 Mixed Hosting Europe
Pipex/123Reg $17.21 Mixed Hosting Europe
Network Solutions $34.99 Domain Registrar America
Register.com $35.00 Domain Registrar America
Posted by Rich Miller at 24 January 2005 in Hosting | Print this Page

While The SCO Group has become famed for its Linux-related lawsuits, its corporate motto continues to be "The Power of Unix."; but SCO customers might be forgiven for thinking that it should be "The Power of Unpatched Unix."

On Thursday SCO issued a security advisory announcing the release of UnixWare patches for flaws in OpenSSL that could leave secure servers open to denial of service attacks. The only problem is that the flaw was made public more than 10 months ago.

Posted by Rich Miller at 23 January 2005 in Security | Print this Page

Domain registrar Melbourne IT today acknowledged that it failed to properly confirm a transfer request for Panix.com, allowing the domain for the New York ISP to be hijacked for most of the weekend. The Panix incident has focused attention on recent ICANN rule changes that allow domains to be transferred more easily, which some registrars warned would also make it easier to hjack domains.

The hijacking disabled all email and Internet access for thousands of Panix customers, and persisted despite active efforts by the North American Network Operators Group (NANOG) to assist Panix in recovering the domain. The delays were blamed on unresponsiveness by several providers within the domain management system, but especially Melbourne IT, which appears to have no readily-accessible support on weekends. The Panix.com hijacking was not reversed until Melbourne IT's offices opened in Australia Monday morning (late Sunday in New York).

Posted by Rich Miller at 18 January 2005 in Around the Net | Print this Page
Earthlink hosts more than 140,000 active web sites, and has been marketing its Trellix Site Builder to its customers as an ideal blogging tool. So when Earthlink decided to launch a corporate weblog to provide security tips to its customers, it was a perfect opportunity to showcase its in-house blogging capabilities. Right?

Apparently not. The Earthlink Protection Blog is hosted by Six Apart on its TypePad blog hosting service, which is in turn hosted in an Internap data center in San Jose.

Posted by Rich Miller at 18 January 2005 in Hosting | Print this Page
A number of recent phishing sites blocked by the Netcraft Toolbar community have had a common technique of using JavaScript to create a narrow popup window, which is then placed on top of the Address bar. A fake URL is entered into the popup, using the same default font as the real address bar. The script continually checks the location of the browser window and moves the popup accordingly, ensuring that it is always placed on top of the Address bar, thus obscuring the real URL of the phishing site.

PaylPalResized.png

The image above illustrates a live phishing site in action. In this case, the content looks genuine, as the URL appears to belong to the PayPal web site, https://www.paypal.com/cgi-bin/webscr?cmd=_login-run, but the content is really being served from a phishing site at http://quith.info/paypal/index.html. The only clue that something is wrong is that the browser is not displaying the padlock in the bottom right hand corner, indicating that this is not really a secure web page. A bug in the script also causes the popup window to remain visible even when the browser is minimized.

toolbar.png

However, the Toolbar reveals the true location of the web site, which is hosted in Poland. People using the toolbar are then able to report the site, and thereby block access to the page for other less alert people using the Toolbar.

Similar attacks against institutions including PayPal, eBay, TCF Bank, Regions, GarantiBank and LloydsTSB, have been reported and blocked by the Toolbar community in the last few days. In all cases, nearly-identical scripts have been used, suggesting either that the same fraudsters are responsible for all of the attacks, or perhaps simply that fraudsters are copying ideas from each other.

This can affect all versions of Internet Explorer on Windows XP although the popup window does not correctly obscure the real URL if Service Pack 2 is installed.

The Netcraft Toolbar is currently available for Internet Explorer, and automatically blocks access to known phishing sites whilst displaying the longevity, hosting location and country for each site you visit. The toolbar can be freely downloaded.

Posted by Paul Mutton at 16 January 2005 in Security | Print this Page
The BitTorrent hub LokiTorrent is experiencing outages and slowdowns today, as it continues to try and restore full service following a server hard drive failure last week. Administrators said the site is operating on a backup server "only on a 10Mbit pipe" rather than its usual 200MB connection.

LokiTorrent is among the most visible portals supporting BitTorrent, the popular distributed file-serving technology developed by Bram Cohen. LokiTorrent is among the sites facing lawsuits from the Motion Picture Association of America (MPAA) over the use of BitTorrent in illegal file-sharing.

Performance for LokiTorrent

A dynamically upgrading chart of www.lokitorrent.com is available here.

Posted by Rich Miller at 14 January 2005 in Performance | Print this Page
What happens when hordes of Mac enthusiasts stress-test Apple and Microsoft products in head-to-head performance? Macintosh and Windows web server products got a real-world workout Tuesday following Apple's unveiling of its new Mac Mini and iPod Shuffle products at the MacWorld Expo conference in San Francisco.

The Apple web site, which runs on Mac OS X, experienced some slowdowns but was largely available. Apple's online store (also on Mac OS X) struggled, however, experiencing outages and lengthy response times. Faring even worse was the official site for MacWorld Expo, which runs on Windows Server 2003, and was offline for hours following the show's keynote address by Apple CEO Steve Jobs.

macsites.png

Dynamically updating performance charts are available for the www.apple.com, store.apple.com and www.macworldexpo.com sites.

Posted by Rich Miller at 12 January 2005 in Performance | Print this Page
The open source Firefox web browser has made headlines as it chips away at the dominant market position of Microsoft's Internet Explorer. But Firefox is also grabbing market share as an RSS reader, according to new data from RSS service provider Feedburner, which says the browser is now the third-most popular RSS client in its usage stats.

Feedburner's data, based on an analysis of its 800 most popular feeds, show that web-based feedreader Bloglines is the clear market leader with 32.8 percent of the volume, followed by the NetNewsWire client for Mac OS X with 16.9 percent. Firefox is next with 7.8 percent, placing it ahead of established RSS clients including Pluck (7.2%), NewsGator (4.5%), FeedDemon (3.8%) and the web-based My Yahoo (2.6%).

The Firefox browser autodetects the availablility of an RSS feed for a site, and can integrate feeds using Live Bookmarks feature or extensions such as Sage.

Posted by Rich Miller at 11 January 2005 in Around the Net | Print this Page
Domain registrar Go Daddy has begun selling virtual private servers (VPS) and dedicated servers, continuing an expansion that helped it become one of the fastest-growing hosting providers of 2004 in our Hosting Provider Switching Analysis. The move comes as the Scottsdale, Ariz. provider is preparing a major publicity campaign to increase its visibility, kicked off by a Super Bowl ad.

Go Daddy is using SWSoft's Virtuozzo to power its VPS offering, following in the footsteps of EV1Servers, which announced a major VPS hosting initiative in September. VPS uses "virtual partitions" that allow a single machine to be used by multiple customers, with better security than shared hosting but many of the features of a dedicated server. While it has been a pioneer in discount pricing of domains and shared hosting, Go Daddy's dedicated server offerings start at $219 a month and VPS at $39.95 a month, well above the offerings of current price leaders in those categories.

Discount dedicated servers have been enormously popular in recent years, driving huge growth for EV1Servers and a succession of competitors who matched or undercut its $99 a year pricing. Hosting resellers and resource-intensive web sites have been the primary users of dedicated offerings, but the customer pool has expanded dramatically as prices decreased, making them more accessible to sites previously housed on shared servers.

Go Daddy Growth (Active Sites)

Posted by Rich Miller at 10 January 2005 in Hosting | Print this Page
The blogosphere is abuzz over Six Apart's acquisition of Danga Interactive, the operators of the popular LiveJournal blogging service. Amid the debates about blog culture and whether online diaries will be "monetized," little has been said about a key driver of the deal - the hosting backend, where Six Apart hopes to leverage LiveJournal's experience scaling a Perl-based hosting architecture to maximize revenue-per-server.

Six Apart publishes Movable Type and operates the paid blog hosting service TypePad. LiveJournal is a free blog service based on open source code with more than 2.5 million active accounts, with the majority of its users between the ages of 14 and 22. About 860,000 of those blogs are updated at least once a week.

The deal comes amid growing interest in blogging's commercial potential, and comes a year after Google purchased Blogspot, LiveJournal's chief competitor in the free blogging space. LiveJournal's services will remain free and its code will remain open, which was a concern in light of Six Apart's rocky free-to-paid transition for Movable Type last May.

Posted by Rich Miller at 6 January 2005 in Hosting | Print this Page
Of the leading hosting company sites monitored by Netcraft over the second half of 2004 only one hosting company site amassed over a day’s downtime during the period, while at the other end of the spectrum, seventeen providers went through the entire six months with no outages at all.

From a customers’ point of view, the percentage of failed requests is more pertinent than outages on the hosting companies’ own sites, as this gives a pointer to reliability of routing, and this is why we choose to rank our table by fewest failed requests, rather than shortest periods of outage. Six hosting companies went through the period with 0.2% or less of requests failing from our seven measurement points.

Four companies in the top 10 were also in the corresponding top 10 a year ago, with Datapipe moving from second place last year to top the chart. Other companies in last years list include Pair Networks and iPowerWeb.

The distribution of operating systems commonly used by hosting companies amongst the sites is quite even with three of the top ten sites running on each of Windows, FreeBSD and Linux.

Ranking by Failed Requests and Connection Time,
July 1st - December 31st 2004

hoster_performance_dec04.PNG

Posted by mandy at 3 January 2005 in Performance | Print this Page

In the January 2005 survey we received responses from 58,194,836 sites, a robust gain of 1.27 million sites from the December survey.

After months of little change in market share between the two major web servers, Apache added nearly a full percentage point to its lead over Microsoft, which is now 47.5 percentage points (68.4% to 20.9%) as measured by hostnames, with a slightly smaller gain in active sites.

While this month's 1 percent shift is modest by historic standards, it follows a 12-month period in which Apache's lead grew by just 0.09 percent (from 46.56 to 46.65%), despite adding 7.6 million sites between Dec. 2003 and Dec. 2004. Microsoft added 2.46 million sites during the same period.

Total Sites Across All Domains August 1995 - January 2005

Total Sites Across All Domains, August 1995 - January 2005

Graph of market share for top servers across all domains, August 1995 - January 2005

Top Developers
DeveloperDecember 2004PercentJanuary 2005PercentChange
Apache3861467367.843982136868.430.59
Microsoft1206276121.191213744620.86-0.33
Sun18129663.1818300083.14-0.04
Zeus6875081.216901931.19-0.02
Posted by wss at 1 January 2005 in Web Server Survey | Print this Page