4 ms·
DNS hijacking happens all the time, every day - we just don't seem to unconditionally recognize it as attacks. Paywalls on airport/cafe wifis, nation-state cens
by lgierth 8y ago
DNS hijacking happens all the time, every day - we just don't seem to unconditionally recognize it as attacks. Paywalls on airport/cafe wifis, nation-state censorship of individual websites, etc. :)
I work on IPFS/libp2p and the "only" two known attacks on the official gateway ipfs.io are in Spain (DNS hijacking) and China (dito).
OONI has pretty good data on interference around the world: https://ooni.torproject.org/ https://ooni.torproject.org/
(edit: clarified that the attack is only on the ipfs.io gateway, not the IPFS network)
- pathseeker 8y agoPaywalls rarely use DNS hijacking because it risks putting a bad entry in the clients cache and breaking them. They just intercept http (and sometimes HTTPS) connections to inject a temporary HTTP redirect to an auth page.
- lgierth 8y agoEh you're right, thank you - I meant routers that hijack DNS to send you to a captive portal or splash page.
- WorldMaker 8y agoI changed the root DNS servers in my home router when I found my (American) ISP was DNS poisoning bing.com (and who knows what else!) for extra ad revenue.
- lgierth 8y agoYour comment just made me remember that T-Online and a few other german ISPs hijack NXDOMAIN responses and send you to their crappy search pages.
- blattimwind 8y agoYou can disable that in your customer settings, though. It's still crap, of course.
- krylon 8y agoOh yes, I was so pissed off when I saw that for the first time. At home I run my own resolver, so this does not affect me, but I still cannot understand how somebody could think this was a good idea...