Google, Cloudflare & Cisco Will Poison DNS to Stop Piracy Block Circumvention * TorrentFreak

torrentfreak.com Google, Cloudflare & Cisco Will Poison DNS to Stop Piracy Block Circumvention * TorrentFreak

Google, Cloudflare, and Cisco must poison their DNS resolvers to prevent access to around 117 domains used by pirate sport streaming sites.

Run your own unbound or bind resolvers!

Legal News @lemmy.zip Google, Cloudflare & Cisco Will Poison DNS to Stop Piracy Block Circumvention

Hacker News @lemmy.smeargle.fans Google, Cloudflare and Cisco will poison DNS to stop piracy block circumvention

Technology @lemmy.world Google, Cloudflare & Cisco Will Poison DNS to Stop Piracy Block Circumvention * TorrentFreak

27 comments

A French court has ordered Google, Cloudflare, and Cisco to poison their DNS resolvers...

74
- Never question the bravery of the French. They discovered snails are edible.
  
  As for their intelligence on the other hand...
  
  55
https://unbound.docs.nlnetlabs.nl/en/latest/use-cases/home-resolver.html

https://www.perfacilis.com/blog/systeembeheer/linux/setup-a-public-dns-server.html

Or even better yet, why not join OpenNIC and help a more democratic alternative to DNS root.

48
- Since OpenNIC resolvers are user-run, doesn't that mean a bad actor could theoretically pop up at any time and log any request that goes through them?
  
  24
- Opennic should be the default DNS of everybody!
  
  6
  
  ELI5 please. What are the benefits over unbound?
  
  20
Apparently Cisco operates a popular DNS resolver? Never heard of that before.

And definitely don't learn how to use a VPN. Or set up Unbound or Bind or PowerDNS Recursive...

19
- Cisco bought OpenDNS a few years ago,
  
  29
  
  Ah crap, good to know. This sucks though, I was thinking of using it to replace CF. What's left? Quad9 and the unbound type?
  
  7
- Cisco operates from the ISP side, they'll poison DNS through their routers. And you should be aware that your ISP will employ Deep Packet Inspection which can also be done with Cisco routers. That means they can intercept internet traffic, especially if your internet connection is not encrypted.
  
  10
  
  ISPs were already required to block the sites. I don't think an additional block on the Cisco side would change anything in that case.
  
  7
  
  Guess ill be trying my hand at building my own pfsense router
  
  2
ELI5…?

14
- DNS is when your browser asks where to find a website. You enter Lemmy.One in your browser, and your browser asks the DNS resolver the address of the computer the website is hosted on.
  
  Most people will use their internet company's DNS, and it sounds like France ordered these companies to block some illegal streaming sites by having the DNS server point to a page saying it's blocked instead of to the website server.
  
  More technical users changed their settings to get DNS from google, Cloudflare, etc instead of the internet company, so now France is going to make those companies block the sites too.
  
  ELI5: France is lying to your computer when it asks where to find the websites
  
  61
  
  Thank you! That makes much more sense.
  
  8
Permanently Deleted

13
Is it possible to get unbound to talk to the root servers via TLS/HTTPS by now?

I'm currently using Quad9 because they support DNS over TLS and DNS over HTTPS.

8
- Yes its possible 👍
  
  Use:
  
  forward-zone: forward-addr: 9.9.9.9@853#dns.quad9.net
  
  5
  
  That is what I'm doing currently but now unbound doesn't talk to the root servers anymore, it sends all queries to Quad9.
  
  Both scenarios are not ideal because you always end up with one entity knowing all your queries.
  
  3
- Not sure you would even need encryption. Surely It can't be illegal to ask the root servers (and all the other DNS servers involved, because the root servers only have IPs for TLD DNS servers) for IPs
  
  1
  
  Not illegal but it leaves all your DNS lookups in plain text with your ISP, which just doesn't sit right with me.
  
  Not that the ISP in my country would care.
  
  3
I just want to point out the Technitium project as an alternative to unbound and bind resolver as well.

Regardless, it's really easy to setup your own DNS resolver that resolves to DNS roots.

4
I wonder if it applies to those only in France since a rep from Google states that using their DNS with a VPN will circumvent their DNS redirects.

3
I'm glad it's only the football streaming sites, but I don't much like that companies get this kind of legal power.

1

You've viewed 27 comments.