4 ms·
Looks to me like it will be a log of your DNS lookups. Deep sniffing Host: headers from HTTP seems like too much work. But I wonder how it will work with Prox
by SixSigma 11y ago
Looks to me like it will be a log of your DNS lookups.
Deep sniffing Host: headers from HTTP seems like too much work.
But I wonder how it will work with Proxies / Manually setting DNS lookup to outside your ISP?
I can SSH tunnel my desktop (or phone when using Wifi on Android) computer requests both HTTP and DNS to my VM on another network. It makes me wish I was interesting enough to be snooped on.
- ymse 11y ago> It makes me wish I was interesting enough to be snooped on. Oh, but you are. Having access to VMs on other networks makes you a sysadmin, which automatically raises flags[0] within NSHQ. I've used DNScrypt[1] for some time now, which tunnels all DNS requests to a remote site over SSL. Coupled with a local DNS server[2] to cache lookups, this works amazingly well. It will be interesting to see how this "snoopers charter" will be implemented, if at all. I get the impression it's mostly to legitimize (and scale out) what GCHQ and MI5 have been doing for a long time already, while adding some form and structure to it. 0: https://theintercept.com/2014/03/20/inside-nsa-secret-efforts-hunt-hack-system-administrators/ https://theintercept.com/2014/03/20/inside-nsa-secret-effort... 1: https://dnscrypt.org/ https://dnscrypt.org/ 2: https://unbound.net/ https://unbound.net/
- SixSigma 11y agoCool, I feel important. Mood: lulz