Live data from Hacker News

Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

news.ycombinator.com

11–20 of 27 posts

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#11
I think the real issue here is just letting anyone use your servers for whatever they want. It's a big problem in the cloud because even there, you're guilty by association.

The cloud providers are going to have to be more scrupulous about who they allow to use their infrastructure if they don't want to tarnish the image of their upstanding customers.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#13
post #12

> This means DNS queries will not resolve for government employees if they point to Linode hosted machines. This is total FUD. Please check your statements for accuracy.

I agree. I work in a govt agency and while linode.com is blocked, I can still access my site that is hosted at linode as well as the linked site below in comments. Searching us-cert for linode, turns up the following: http://www.us-cert.gov/cas/techalerts/TA10-055A.html

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#14
post #11

I think the real issue here is just letting anyone use your servers for whatever they want. It's a big problem in the cloud because even there, you're guilty by association. The cloud providers are going to have to be more scrupulous about who they allow to use their infrastructure if they don't want to tarnish the image of their upstanding customers.

I wouldn't use any provider that took an active interest in monitoring my traffic or examining my VPS.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#16
post #12

> This means DNS queries will not resolve for government employees if they point to Linode hosted machines. This is total FUD. Please check your statements for accuracy.

I work for a gov agency and both linode and hosted sites work for me.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#17
post #3

Heard that the top level domain linode.com was black holed due to its association with malicious activity [...] Reading this sentence, reminded me of Google using Linode when that incident happened with Chinese hackers.

http://blog.linode.com/2010/01/15/linode-and-the-google-cybe... "No Linodes were involved in malicious activity related to this event. In fact, it was Google itself that chose to use Linode to aid in their investigation of the attacks"

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#18

This reminds me of when I worked tech support for a big US ISP. I would get calls from users who couldn't connect to certain .mil sites because they had an IP ending in zero (x.x.x.0). The only solution was to reset their modem and hope the DHCP server would give them a new IP that didn't end in zero.

[deleted]

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#19
post #16
post #12

> This means DNS queries will not resolve for government employees if they point to Linode hosted machines. This is total FUD. Please check your statements for accuracy.

I work for a gov agency and both linode and hosted sites work for me.

Not FUD. Verified for multiple cases in which a CNAME points to a linode XXX.members.linode.com address.

I'm guessing the variance is due to different agencies implementing different security stuff. Again, 3x verified & no intent of FUD --- I love linode.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#20
post #11

I think the real issue here is just letting anyone use your servers for whatever they want. It's a big problem in the cloud because even there, you're guilty by association. The cloud providers are going to have to be more scrupulous about who they allow to use their infrastructure if they don't want to tarnish the image of their upstanding customers.

I wouldn't use any provider that took an active interest in monitoring my traffic or examining my VPS.

It's not about that, it's about figuring out who you are before you sign up.
Post reply on HN