Apparently, "poorly configured" == "accepts ANY queries". One more bad article in the media: http://www.infoworld.com/article/3109581/security/poorly-configured-dnssec-servers-at-root-of-ddos-attacks.html