Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

webcache.googleusercontent.com

Post reply on HN
Print view View original

121–130 of 253 posts

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#121

Post by ballenf »

cm2187 wrote: post #39
ocdtrekkie wrote: post #2

This is awesome to hear, and for all of the criticism Cloudflare has gotten in the past, they have spoken loudly against censorship, not just for people they like, but those they dislike as well. I'd much rather point my DNS at them than Google, an ad company where tracking is the whole business model.

How much tracking can you do on a v4 DNS? There can be thousands of people behind the same IPv4 at a given time, or it could change in a matter of minutes. A state could probably be able to exploit that (as in there is a political opponent living at this address) but if the aim is just to track an individual’s browsing habit I would think it is impractical. IPv6, other debate.

My home IPv4 address from a major cable internet company hasn't changed in over a year and I don't have a static IP.

Even when they do change, knowing ping times plus IP address owner plus superficial usage patterns would easily be enough to narrow down to a single household. Many households will have a unique DNS footprint based on the exact makeup of internet connected devices in the household that are constantly phoning home.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#122

Post by ocdtrekkie »

ballenf wrote: post #121
cm2187 wrote: post #39

Earlier quoted context omitted.

How much tracking can you do on a v4 DNS? There can be thousands of people behind the same IPv4 at a given time, or it could change in a matter of minutes. A state could probably be able to exploit that (as in there is a political opponent living at this address) but if the aim is just to track an individual’s browsing habit I would think it is impractical. IPv6, other debate.

My home IPv4 address from a major cable internet company hasn't changed in over a year and I don't have a static IP. Even when they do change, knowing ping times plus IP address owner plus superficial usage patterns would easily be enough to narrow down to a single household. Many households will have a unique DNS footprint based on the exact makeup of internet connected devices in the household that are constantly p…

People do often forget this about DHCP addresses: Most DHCP servers will renew your same IP for as long as practical, and this often spans years. At work, my NIC held its same lease for about two years, I was a little sad recently when I discovered it had finally changed.

How I monitor my house also lets me know when my public address changes, and its extremely rare.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#124

Post by scrollaway »

dasyatidprime wrote: post #104
scrollaway wrote: post #84

Earlier quoted context omitted.

Github's existence does nothing to change the distributed nature of git, just like GMail's existence does nothing to change the nature of email. They offer/sell a service that is built using those technologies. People go to them for the convenience you mention. If there were other convenient ways to use those services people would use them as well. ... and there are! Github has competitors (Gitlab, bitbucket, ...) an…

GitHub has gotten a ways there socially. Repositories which are not on GitHub are not socially first-class for many subsets of contributors, because the only habits you can rely on them having in easily-accessible brain memory are based on GitHub-specific workflow. So if you are used to Git and not GitHub, projects you want to contribute to may ask/demand that you do the GitHub-specific thing instead (and feel justif…

git doesn't offer what github offers (PRs, reviews, comments, ...).

Do people here actually think about the alternatives when they complain certain systems are too centralized?

If you stop using Github/Gitlab/Bitbucket today, you won't be able to collaborate because you no longer have a way to do the things Github lets you do. This isn't Github's fault.

Git is decentralized in that it has logic that allows multiple upstreams/downstreams. It's not magic. It's not "blockchain" or whatever.

Github is not decentralized, it's a SaaS product which offers git-compatible and svn-compatible repository storage, an excellent UI, comments, reviews, issue tracking and a bunch more. FOSS developers are asking you to create accounts to Github not so you can download their repository (you don't need to!), but so you can actually use the contributing tools on offer.

Sorry, I realize this isn't the tone you want to hear, but these comments about "centralized systems in decentralized worlds" are just so empty and meaningless. There's a few projects out there which actually try to solve the abstract issues you mentioned by, for example, adding comment/review metadata to git repositories. But you still have access control to take care of and at the end of the day, you need to trust some party; just like at the end of the day, with DNS, you have to put in a couple of IPs that you trust to provide you with good results.

Yes, you have to create a Github account to contribute to some projects. Has nothing to do with git, has everything to do with being able to use the services that Github provides. What is it that you're actually suggesting?

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#125

Post by yladiz »

Nullabillity wrote: post #109
zitterbewegung wrote: post #42

Earlier quoted context omitted.

What about akamai? They are a much larger CDN (no one talks about it on HN because they are not a startup). I agree with your assertion that it will become a single point of failure with many web properties but also I think that HN has a sort of filter bubble on startups (for obvious reasons) and I'm not sure cloudflare is as big as people make it out to be. Also, Google has 8.8.8.8 which could be for the same thing…

When was the last time Akamai forced you to fill out a CAPTCHA?

Cloudflare has never made me fill in a captcha.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#126

Post by Operyl »

Nullabillity wrote: post #109
zitterbewegung wrote: post #42

Earlier quoted context omitted.

What about akamai? They are a much larger CDN (no one talks about it on HN because they are not a startup). I agree with your assertion that it will become a single point of failure with many web properties but also I think that HN has a sort of filter bubble on startups (for obvious reasons) and I'm not sure cloudflare is as big as people make it out to be. Also, Google has 8.8.8.8 which could be for the same thing…

When was the last time Akamai forced you to fill out a CAPTCHA?

This morning, actually.

https://www.akamai.com/us/en/resources/brute-force-attacks.j...

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#128

Post by vimda »

ensignavenger wrote: post #48

Appears to be a joint venture between Cloudflare and APNIC, not sure the relative involvement of APNIC, they provide the IP addresses at the very least.I don't know if they retain any oversight of operations.

As with all previous times APNIC has let a company advertise that IP range, I assume APNIC will be doing analysis on the traffic that comes in

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#129

Post by cpeterso »

pixl97 wrote: post #14

Well crap. I was used to going to 1.1.1.1 on my cellphone when on wireless APs that tried to redirect you an agreement page. Now there is a valid cert/website at that address. Guess I'll have to pick a new one.

I use cnn.com because it is HTTP-only and easy to type on a mobile keyboard.

Re: 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

#130

Post by vimda »

simias wrote: post #31
djrogers wrote: post #24

Darn, no IPv6 address?

>For IPv4: 1.1.1.1, 1.0.0.1 >For IPv6: 2001:2001::, 2001:2001:2001::

But those IPv6 address aren't actually working, unlike the IPv4 ones. Also those addresses are owned by Telia, so I have my suspicions that those are the go-live ipv6 addresses
Post reply on HN