
A large failure in the work of Russian banks is associated with vulnerability in the system of locks of Roskomnadzor, reports TJournal. The imperfection of the system allows the owners of blocked domains to add to the register to block the address of any sites.
On Friday, in this way, authorization servers of Internet payments of the largest Russian banks were blocked. In particular, the Sberbank POS terminals failed temporarily. In total, about 10 thousand IP addresses of various world financial organizations were on the list of blocked, of which approximately 100 technical addresses of 3D-Secure-a system used by banks to authorize Internet payments.
According to Rambler News Service, Sberbank reported that the failure had lasted about 40 minutes and was eliminated. The reason for the problem was not specified there.
In early June, Russian Internet activists posted instructions into open access, which allows you to make any site inaccessible to a significant part of Russian providers.
Vulnerability leads to a site blocking from those providers who limit access to a domain name. Among the blocked domains, many are no longer used. In the instructions, it was proposed to buy free domain names from the registry and connect them with the IP addresses of those resources that need to be blocked.
The instructions that took place began to block the addresses of popular Internet services and state bodies, including Roskomnadzor itself.
To rectify the situation, Roskomnadzor compiled and sent a “white list” from more than 2000 domain masks and IP addresses of popular resources that cannot be blocked. The list includes such masks as *.yandex.ru, *.Facebook.com, *.vk.com, *.google. *, *.Twitter.com, *.youtube.com, *.instagram.com. However, this can lead to the reverse situation: any site containing a mask of this type in the address will not be possible to block the decision of the department.