5 ms·
I don't quite understand how the new method of hijacking gets around using 3rd party DNS servers. If I ping nonexistentdomain.tld, doesn't that lookup occur at
by Rudism 14y ago
I don't quite understand how the new method of hijacking gets around using 3rd party DNS servers. If I ping nonexistentdomain.tld, doesn't that lookup occur at the 3rd party server? How does my ISP inject its own IP address for that domain if the IP address is coming from (for example) Google? Are they intercepting the entire DNS query?
- gwillen 14y agoThe claim appears to be that they are intercepting queries to 3rd-party DNS servers, yes.
- sp332 14y agoIt might not replace all DNS traffic. Maybe it just replaces NXDOMAIN records with its own responses.
- ewillbefull 14y agoIf so, they're breaking so much functionality, protocol and ethics in the process. I don't think it's adequate just to bypass it, ISPs need to be confronted when they are sniffing/modifying traffic.
- jpdoctor 14y ago> The claim appears to be that they are intercepting queries to 3rd-party DNS servers, yes. [my head explodes] This is just begging to be hacked: bankofamerica can be mispelled a number of ways, and I doubt BoA has covered them all.
- snarkinatree 14y agoYup. This is why it's amusing to watch trademark registrants going after domain names based on confusing variations of their registered mark. Meanwhile their trademarks are being hijacked by DNS services and ISP's, in order to show ads, probably far more often (since these services and ISP's have huge user bases). And for the trademark registrants, ISP's are much easier to locate and take action against than evasive domain name miscreants. Pass the popcorn.
- dsl 14y agoNever trust the DNS related claims of someone who uses 'ping' to perform a DNS lookup.