5 ms·
I mean, doesn't it say right on the front page? * Apache Nutch - So they're crawling either some part of the root itself or some other websites to find subdoma
by cobertos 3y ago
I mean, doesn't it say right on the front page?
* Apache Nutch - So they're crawling either some part of the root itself or some other websites to find subdomains. Honestly might help to query CommonCrawl too.
* Calidog's Certstream - As you said, you can look at the CT logs
* OpenAI Embeddings - So I guess it also uses LLM to try to generate ones to test too.
* Proprietary Tools - your guess is as good as mine
Probably a common list of subdomains to test against too.
Seems like multiple techniques to try to squeeze out as much info as possible.
- Zuiii 3y agoI'd also add insecure DNSSEC implementations that allow you to "walk" the entire record chain for the domain.
- kevincox 3y agoCalling this "insecure" is a bit harsh. This is required for offline signing which provides better security but worse privacy.
- Zuiii 3y agoSorry, you're right. I mistakenly thought this issue was solved by a later standard.
- imrejonk 3y agoCould that later standard be NSEC3? It’s like the easily walkable NSEC, but with hashed names and special flags for opting out of delegation security features. The 3 appears to stand for the number of people that fully understand how it works…
- piffey 3y agoProprietary tools means passive DNS.
- smarx007 3y agoHow can one avoid their browsing ending up in the passive DNS logs? For example, is using 1.1.1.1, 8.8.8.8, or 9.9.9.9 (CF, Google, and Quad9, respectively) good or bad in this regard? For example, where does Spamhaus get their passive DNS data? They write [1] that it comes from "trusted third parties, including hosting companies, enterprises, and ISPs." But that's rather vague. Are CF, Google, and Quad9 some of those "hosting companies, enterprises, and ISPs"? [1]: https://www.spamhaus.com/resource-center/what-is-passive-dns-a-beginners-guide/ https://www.spamhaus.com/resource-center/what-is-passive-dns...
- justsomehnguy 3y ago> For example, is using 1.1.1.1, 8.8.8.8, or 9.9.9.9 (CF, Google, and Quad9, respectively) good or bad in this regard? Just run Unbound locally or if you really don't want your ISP to snoop on your DNS traffic - on some VPS in a datacenter.
- smarx007 3y agoI am totally fine with my ISP seeing my DNS traffic (it is bound by GDPR & more; I trust it more than CF or Google). I want to ensure the DNS traffic info does not leave my ISP (other than to other DNS resolvers recursively). And as per Spamhaus, the DNS traffic in a datacenter may still end up in the Spamhaus passive DNS DB.
- teddyh 3y agoBetter hope that none of the parties involved have a data-sharing agreement like this: <https://www.farsightsecurity.com/community/data-sharing/ https://www.farsightsecurity.com/community/data-sharing/>
- hoppla 3y agohttps://passivedns.mnemonic.no/ https://passivedns.mnemonic.no/