4 ms·
Then they can exfiltrate data over DNS.
by the8472 11mo ago
Then they can exfiltrate data over DNS.
- margalabargala 11mo agoI mean, only if the DNS server is one run by the company in question. I own nonzero such devices that hit 8.8.8.8 as an internet access sanity check so I have to keep just that IP allowed for them and block all other traffic.
- kaoD 11mo agoDNS is a hierarchical protocol. You can exfiltrate data as long as the DNS server is resolving recursively.
- margalabargala 11mo agoGood to know. I didn't know that. For my devices in question I can see the size and frequency of the requests in OpenWRT and doubt it's actually doing so.