13 ms·
Google DNS at 010.010.010.010
- stefan_ 5y agoIs there a good IPv6 option?
- bikingbismuth 5y agoFor DNS, I am not sure. If you are talking about strange IP formats, not really. The best I’ve been able to do is some playing with the IPv6.IPv4 formatting.
- p1mrx 5y agoYeah, https://[2001:4860:4860:00::000:0.0.136.136]/ https://[2001:4860:4860:00::000:0.0.136.136]/ is probably the weirdest format that still parses.
- yrro 5y agoinet_aton has other, weirder behaviour: https://disconnect3d.pl/2021/02/16/terrible-inet-aton/ https://disconnect3d.pl/2021/02/16/terrible-inet-aton/
- boramalper 5y agoI found this quite amusing as it seems as if Google is trying to impersonate Cloudflare's 1.1.1.1, whereas 010.010.010.010 is indeed the octal representation of 8.8.8.8. Credit: IPv4 addresses are silly, inet_aton(3) doubly so. https://www.netmeister.org/blog/inet_aton.html https://www.netmeister.org/blog/inet_aton.html
- eyelidlessness 5y agoAmusingly, iOS thinks the text “010.010.010.010” is a phone number.
- csouza-f 5y agoIndeed octal. The second DNS is 010.010.04.04 == 8.8.4.4
- zh3 5y agoEver tried to google 192.168.1.1? Here at least it gives lots of bogosity (all in the name of keeping us safe from what we actually wanted to get to).
- pxc 5y agoGoogle is for web search, and http://192.168.1.1 http://192.168.1.1 is not on the web
- Dylan16807 5y agoGoogle also has info boxes, and this would be a very good place for one.
- zh3 5y ago...in which case they shouldn't give misleading replies like "192.168.l.l", n'est ce pas?
- dcminter 5y agoFor clarity - 8.8.8.8 has been around as a free public DNS for a good bit longer than 1.1.1.1 has I think you probably know that already, but there are at least a couple of ways to interpret what you wrote. https://en.wikipedia.org/wiki/Google_Public_DNS https://en.wikipedia.org/wiki/Google_Public_DNS https://en.wikipedia.org/wiki/1.1.1.1 https://en.wikipedia.org/wiki/1.1.1.1
- q1w2 5y agoAlso, for those who don't know - you can use 1.1.1.2 which blocks all known Malware domains, and 1.1.1.3 to also block all adult content. There's also always dns.adguard.com to block Ads (which is what I use on my phone).
- EE84M3i 5y agoFor me the link on HN is to https://dns.google/ https://dns.google/ but I'm pretty sure it's supposed to be to https://010.010.010.010/ https://010.010.010.010/ (which redirects, for me). Did the admins change it?
- boramalper 5y agoI was just about to edit my comment: either that is the case or HN automatically runs a reverse DNS query to get the domain name associated with the IP address in the submission URL?
- missingcolours 5y agoMore likely they do an HTTP request and if there's a redirect they update the link.
- boramalper 5y agoIndeed!
- pxc 5y agoIs that a real TLD?
- ignoramous 5y agoTLS certs can be issued to make them work with IP addresses, which is why https to 8.8.8.8 (octal: 010.010.010.010) works: https://cabforum.org/guidance-ip-addresses-certificates/ https://cabforum.org/guidance-ip-addresses-certificates/ See also: https://01.01.01.01/ https://01.01.01.01/ (btw: .google and .goog are valid TLDs)
- tialaramex 5y agoNot explicitly mentioned in that CAB/F document, the PKIX standard that makes ipAddress SANs work actually defines them as numeric types with a set number of bits, so an ipAddress is literally a 32-bit or 128-bit value. This leaves no room for the ambiguity of the text rendering something like 010.010.010.010 in the certificate itself. Likewise the dnsName SAN type is defined in an alphabet for X.509 that literally can't represent fancy Unicode, so you can't mistakenly write certificates with dnsName SANs that give the Unicode name instead of the unambiguous punycode name stored in DNS. These two choices mean your browser can mechanically with 100% reliability check certificates in the Web PKI match the IP address or DNS name from the URL you believed you were visiting, whereas historically the abuse of "Common Name" features to write a human representation had nasty edge cases for both IP addresses and some DNS names.
- deleted 5y ago[deleted]
- neilk 5y agoOctal 010 is 8. Dotted quads can apparently be in octal, so that’s just 8.8.8.8 . What are we looking at here that’s new?
- capableweb 5y ago"News" in Hacker News doesn't necessarily mean everything is new that comes up. Everyone might not know what you know, so sometimes it's interesting enough to end up on the front page.
- sieabahlpark 5y agoSounds like Reddit.
- makeworld 5y agoGoogle's server handles the octal case if it's provided directly. Not sure if this is an explicit code path or if the server handles all IP forms. Try this: curl -v -H "Host: 010.010.010.010" https://8.8.8.8 Trying to do the same with other websites doesn't seem to work.
- icedchai 5y agoThey probably don't even look at the host header. You can set any host header and it works.
- lucb1e 5y agoNot sure what you mean about other websites, it works fine on Apache and Nginx, e.g. on my server: curl -kiH Host:1348764566 https://1348764566 (-k flag needed because I didn't get a valid cert for this variant of the IP. One could also specify the fingerprint but let's keep the demo simple.) It'll give you a 404 because of the unknown vhost, but it would also do that if you access it using the 'normal' dotted decimal notation: http://80.100.131.150 http://80.100.131.150 I used to detect this number actually and it would give you a small easter egg, but nobody triggered it and nowadays Firefox doesn't send it as a host header anymore when you specify the IP as such so I didn't check how to port that over to my new web server stack.
- lucb1e 5y agoIt's also at 010.010.2056 or 0x8080808 or 01002004010. I made a little tool a while ago that iterates over all the options that I know of: https://lucb1e.com/randomprojects/php/funnip.php?ip=8.8.8.8 https://lucb1e.com/randomprojects/php/funnip.php?ip=8.8.8.8 The variant found by OP is apparently the very last option that my tool generates. These days, Firefox is a bit boring (okay, okay, I'll admit it's a good choice for security) and translates these at the first opportunity. Even hyperlinks are translated on hover in the 'status bar' (if we can still call it that). For mobile users, this is what it shows when you paste one of those addresses in Firefox: https://snipboard.io/kbLTso.jpg https://snipboard.io/kbLTso.jpg
- ktpsns 5y ago+1 for <?php if (isset($_GET['source'])) { highlight_file(__FILE__); exit; } This is such a useful and nice snippet I add to many of my PHP files. Open Source at its finest, literally "in place" :-)
- cpach 5y agoWhat does it do?
- pbiggar 5y agoIf you provide the GET parameter "source" (which means you try /the-url?source"), it prints a pretty-printed version of the source code. So basically it allows the reader to read the source directly without hunting it down on github of something.
- keymone 5y agoDoesn’t this just highlight that php development ecosystem doesn’t value quality much? What even is a “file” in context of a web request? What about dependencies or logic defined in other files? This is just bizarre, I can’t see a sane codebase where this would be preferable to going on GitHub and pressing “.”
- knorker 5y agoDepends on the parser. Even under one OS different libc functions will return different results.
- _ache_ 5y agoYeah ... Just use 1.1. Cloudflare is way better. It doesn't even look like an IP. And you just can't have shorter.
- zeroimpl 5y agoFeels like next somebody should setup a DNS system at 2.0.
- vmoore 5y agoFor those interested in more memorable DNS IPs, there is the following: Just be careful, because TWNIC/Quad101 was subjected to a BGP hijack in 2019[0] 101.101.101.101 [TWNIC] 80.80.80.80 [FREENOM][1] 4.2.2.2 [Level 3] [0] https://www.manrs.org/2019/05/public-dns-in-taiwan-the-latest-victim-to-bgp-hijack/ https://www.manrs.org/2019/05/public-dns-in-taiwan-the-lates... [1] https://www.freenom.world/en/index.html?lang=en https://www.freenom.world/en/index.html?lang=en
- aftbit 5y agoDon't forget 1.1.1.1 and 1.0.0.1 (aka 1.1) [Cloudflare]
- vmoore 5y agoYeah I left that out for a reason. Most geeks know about that. Also 9.9.9.9 is an obvious one. I wanted to point out lesser known/esoteric ones
- contingencies 5y agoIn China 114.114.114.114 / 114.114.115.115 or 223.5.5.5 / 223.6.6.6 is used.
- mgbmtl 5y agoOn IPv6, I like using 2600::1. Short and easy to remember thanks to the classic 2600 zine (named after the Captain Crunch cereal whistle which emitted the 2600hz tone for payphones). I wonder if someone at Sprint is a fan.
- RKearney 5y ago4.2.2.2 is only for Level 3 customers (now Lumen). You will get mixed results and I believe they have hijacked NXDOMAIN responses for non-customers in the past.
- TheSwordsman 5y agoThe JSON format they display results in is a bit rough, though. Some keys are capitalized, some not.
- shireboy 5y agoOut of sheer curiosity, how does one go about reserving an IP address like this, or the ones CloudFlare and google dns use?
- xanathar 5y agoThe main prerequisite is "having a bloatload of money".
- charcircuit 5y agoLet's say that's true already
- SturgeonsLaw 5y ago> bloatload Sounds like a good unit of measurement for Javascript
- linux2647 5y agoOne has to buy the block of IP addresses, from ARIN or some other Internet governance body, that contains the IP you’re looking for
- litoE 5y agoOnce you own outright a block of IP4 addresses, is there a recurring charge to allow you to keep it? And who, if anyone, gets paid.
- mike_d 5y agoOnly 8 organizations actually "own" IP addresses (AT&T, Apple, Ford, Cogent, Prudential Insurance, USPS, Comcast, US DoD). Almost all of IPv4 is allocated by IANA to Regional Internet Registries that in turn allocate them to customers like Google and Verizon. You pay yearly maintenance fees to keep the addresses assigned to you.
- Scaevolus 5y ago
- jcims 5y agoThis is the first time I've seen a certificate issued to an IP address. Cloudflare does the same thing for 1.1.1.1. X509v3 Subject Alternative Name: DNS:dns.google, DNS:dns.google.com, DNS:*.dns.google.com, DNS:8888.google, DNS:dns64.dns.google, IP Address:8.8.8.8, IP Address:8.8.4.4, IP Address:2001:4860:4860:0:0:0:0:8888, IP Address:2001:4860:4860:0:0:0:0:8844, IP Address:2001:4860:4860:0:0:0:0:6464, IP Address:2001:4860:4860:0:0:0:0:64 I'm guessing this is in part for network device auth? DNS over HTTPS?
- tialaramex 5y agoYou can use this for any purpose. These certificates conform to PKIX and are part of the Web PKI if they're issued (as this was) by a trusted CA. In some ways the actual rules for IP addresses are less strict than for DNS names. Perhaps this will get tightened up. Google Trust Services (the part of Google which issues certificates, as distinct from say, Chrome, which on behalf of Relying Parties has to decide if the certificates are trustworthy) expressed interest in issuing IP address certificates via ACME, ie automatically to anyone who asks. The pushback (including from people in other parts of Google) was considerable, even though what GTS proposed to do was actually more robust than what's technically required for issuance today. But it's nice that they asked (and indeed one argument to allow what they requested is, hey, there was no requirement for them to ask, if somebody had just done this without asking would we have been even more unhappy about that or would we let it slide?) In practical terms, you likely don't get and don't want certificates with ipAddress SANs in them. You probably don't get them because (unless GTS went ahead subsequently) this is a Special Request item not something your Certbot or acme.sh or whatever can get for you, and you probably don't want them because unless you're a DNS server people expect to type in a name, not a sequence of arcane numbers.
- jcims 5y agoAwesome info, thank you!
- deleted 5y ago[deleted]
- mongol 5y agoWhy is Google providing a public DNS? Is it a PR thing?
- jayd16 5y agoI'm sure it's useful to run analytics over what people are connecting to but they have plenty of reasons to run their own DNS for their own purposes.
- JonathanMerklin 5y agoDo you perhaps think that DNS log data could be valuable for Google? As always, when a product is free...
- Redoubts 5y agoIs it any worse than the harvesting my ISP is likely doing?
- tjoff 5y agoYes. And no, I would not assume that your ISP is doing it.
- JeremyNT 5y agoThe surveillance is additive (unless you use). Since DNS traffic is not encrypted, the ISP still sees everything even if you switch it, and now so does Google. The practical benefit is that some ISPs run bad DNS servers that e.g. automatically redirect nxdomains to their spam pages. If you use Google or Cloudflare you can bypass this particular anti-feature.
- nobody9999 5y ago>The practical benefit is that some ISPs run bad DNS servers that e.g. automatically redirect nxdomains to their spam pages. If you use Google or Cloudflare you can bypass this particular anti-feature. As I discussed here[0], my goto DNS server is 192.168.xxx.91. Which is to say I run my own recursive resolver. This avoids ISP DNS server issues as well as other issues (like these[1][2]). Also, Google/Cloudflare/whoever don't get to log my DNS queries. [0] https://news.ycombinator.com/item?id=29026077 https://news.ycombinator.com/item?id=29026077 [1] https://news.ycombinator.com/item?id=19828317 https://news.ycombinator.com/item?id=19828317 [2] https://community.spotify.com/t5/Desktop-Windows/Random-Stopping-with-CloudFlare-DNS-1-1-1-1/td-p/5190900 https://community.spotify.com/t5/Desktop-Windows/Random-Stop...
- EastOfTruth 5y agoanother DNS to avoid... using anything but your ISP's DNS decrease privacy... unless you are using a VPN, then the DNS should be from your VPN's ISP
- sodality2 5y ago> using anything but your ISP's DNS decrease privacy Using your ISP's DNS decreases privacy. I assume you mean that because UDP/53 DNS is unencrypted, if you switch to another DNS provider, then both the ISP and the new DNS can see your requests? In which case I present to you DNS over HTTPS
- EastOfTruth 5y agoHow can your ISP route the traffic if according to you it doesn't know where it goes? You need a VPN if you want to hide your traffic destinations from your ISP... not encrypted DNS
- sodality2 5y agoThe DNS lookup would be encrypted. The IP would of course not be. This means the ISP would be able to see the IP but not domain [1] of your destination. [1]: See SNI: https://www.cloudflare.com/learning/ssl/what-is-sni/ https://www.cloudflare.com/learning/ssl/what-is-sni/
- EastOfTruth 5y agoSo what's the percentage of IP addresses that host more then one domain? Also, I remember reading something like HTTPS was leaking URLs...
- sodality2 5y agoBasically every single site hosted on any CDN or other cloud host. What's the percentage of people that host their site on dedicated links? Probably a decent percentage, and probably the big 10 sites, but maybe not as many of the others..? Though as mentioned this is moot due to SNI, in most cases :( > Also, I remember reading something like HTTPS was leaking URLs... Yep, that's SNI
- ehershey 5y agoDid google get slashdotted by hacker news? The “getting started” link at the bottom gives me an internal server error.
- deleted 5y ago[deleted]
- jalgos_eminator 5y agoWhen I hover over the link, Chromium shows "https://8.8.8.8 https://8.8.8.8". And when I manually typed in "http://010.010.010.010 http://010.010.010.010", it converts it to 8.8.8.8. I also tried it with the integer representation of 8.8.8.8 and that converts it immediately as well. It looks like this is just the browser converting it. Am I missing something?
- broodbucket 5y agoNo, I think the post is basically "here's a reminder octal exists"