Story of the Day

[Duston, Hal]

Dustin Decker [mailto:dustind at moon-lite.com] wrote:
> 
> On Mon, 1 Apr 2002, zscoundrel wrote:
> 
> > This sounds too much like an April Fools Joke.
> >
> > Rich Edelman wrote:
> >
> > > Apparently, as part of Microsoft and Unisys's combined 
> > > effort anti-Unix ad campaign, they have started a web 
> > > site dubbed "We Have The Way Out"
> > > (http://www.wehavethewayout.com). The kicker: the web 
> > > site is run on Unix.
> 
> I kinda thought it might be April Fools as well, but it looks like
> Unisys at least owns the domain.  Netcraft has the scoop here:
>
http://uptime.netcraft.com/up/graph/?mode_u=off&mode_w=on&site=www.wehavethe
wayout.com&submit=Examine

> Dustin

Further investigation however shows the following:

$ lynx -head http://www.wehavethewayout.com/
HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
MicrosoftOfficeWebServer: 5.0_Pub
Content-Location: http://www.wehavethewayout.com/index.html

$ whois -h rs.internic.net wehavethewayout.com

   Whois Server: whois.networksolutions.com
   Name Server: BBGATE1.UNISYS.COM
   Name Server: EADNS1.UNISYS.COM
   Updated Date: 20-mar-2002

$ whois -h whois.networksolutions.com

Registrant:
UNISYS CORPORATION (UEGZDXBIUD)
   UNISYS WAY MS E8 152M
   BLUE BELL, PA 19424-0001
   US

$ nslookup www.wehavethewayout.com

Name:   www.wehavethewayout.com
Address: 130.94.214.143

$ whois -h whois.arin.net 130.94.214.143

Verio, Inc. (NET-VRIO-130-094)
   8005 South Chester Street
   Englewood, CO 80112
   US

   Netname: VRIO-130-094
   Netblock: 130.94.0.0 - 130.94.255.255
   Maintainer: VRIO

$ lynx
http://uptime.netcraft.com/up/graph/?mode_u=off&mode_w=on&site=www.wehavethe
wayout.com
OS            Server              Last changed IP address      Netblock
Owner 
Windows 2000 Microsoft-IIS/5.0     2-Apr-2002  130.94.214.143  Verio, Inc.

FreeBSD      Rapidsite/Apa-1.3.14 28-Mar-2002  198.63.57.204   Verio, Inc

$ lynx -head http://198.63.57.204/
HTTP/1.1 200 OK
Server: Rapidsite/Apa-1.3.14 (Unix) FrontPage/4.0.4.3 mod_ssl/2.7.1
OpenSSL/0.9.5a
Last-Modified: Thu, 28 Mar 2002 20:52:25 GMT

$ nslookup -type=ptr 130.94.214.143
Non-authoritative answer:
143.214.94.130.in-addr.arpa     name = www.wehavethewayout.com.

$ nslookup -type=ptr 198.63.57.204
Non-authoritative answer:
204.57.63.198.in-addr.arpa      name = www.wehavethewayout.com.

$ nslookup -type=soa wehavethewayout.com
Non-authoritative answer:
wehavethewayout.com
        origin = bbgate1.unisys.com

$ nslookup -type=a www.wehavethewayout.com bbgate1.unisys.com
Name:   www.wehavethewayout.com
Address: 130.94.214.143

Traceroute indicates the 130.94.214.143 address is in San Jose, California
and the 198.63.57.204 address is in Sterling, Virginia.

Both sites in Verio "Premium Data Centers", so I'd guess the contracted it 
out, and didn't specify OS/Web server.  Then when the story broke, the had
them changed.

Hal Duston