Earlier quoted context omitted.
It's clear what you meant, but for whatever it's worth, I think the word you wanted was "tempered", not "tampered".
For what it’s worth, you missed to point out “loosing” vs. “losing” in that comment (where it talks about “loosing trust”). :)
1.1.1.1: Fast, privacy-first consumer DNS service
491–500 of 695 posts
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#492I'm pretty sure that CloudFlare has people working with US intelligence and supply information that cant be used in court, requiring parallel reconstruction..
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#493Is this an April Fool's joke since Cloudflare overtly hates privacy (see stance on TOR)?
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#494I see a lot of criticism of the choice of KPMG. Who should they have chosen as auditors? And which is the better fast privacy-minded DNS service I should be using?
They could make their deployment setup completely automated and publish the tooling to github, and have video evidence of them deploying the same SHA-256 stamped tooling to their data centers. They could expose operational details and transactions on their DNS servers as far as possible without revealing identifiable information. They could have regular physical audits by a constantly rotating set of well known and trusted parties (i.e. EFF, Mozilla).
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#495I cannot trust a service provided by a company which implies that Tor users are mostly bad people. No, thanks.
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#496Earlier quoted context omitted.
KPMG was also implicated in the massive South African "state capture" scandal involving the (now fugitive) Gupta family and former president Jacob Zuma. Among other things, KPMG issued a-later withdrawn-report that was used to undermine the well-respected finance minister, so that a more malleable person could be installed, while also auditing the Guptas during their worst excesses. Lest we choose to dismiss this as…
Sounds interesting, got any sources for further reading?
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#497>"And we wanted to put our money where our mouth was, so we committed to retaining KPMG, the well-respected auditing firm, to audit our code and practices annually and publish a public report confirming we're doing what we said we would." It's worth pointing out that KPMG was Wells Fargo's independent auditor while the bank recently committed fraud on a massive scale by creating more than a million fake deposit accou…
>It's worth pointing out that KPMG was Wells Fargo's independent auditor while the bank recently committed fraud on a massive scale by creating more than a million fake deposit accounts and 560,000 credit card applications for customers without their knowledge or approval.[1] Why is it worth point out? Please detail the work you've done in establilshing that KPMG had access to the data and willfully ignored it.
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#498And look at these ping times: CloudFlare Google DNS Quad9 OpenDNS NewYork 2 msec 1 msec 2 msec 19 msec Toronto 2 msec 28 msec 17 msec 27 msec Atlanta 1 msec 2 msec 1 msec 19 msec Dallas 1 msec 9 msec 1 msec 7 msec San Francisco 3 msec 21 msec 15 msec 20 msec London 1 msec 12 msec 1 msec 14 msec Amsterdam 2 msec 6 msec 1 msec 6 msec Frankfurt 1 msec 9 msec 2 msec 9 msec Tokyo 2 msec 2 msec 81 msec 77 msec Singapore 2…
1.1.1.1 ~ 26ms
8.8.8.8 ~ 42msRe: 1.1.1.1: Fast, privacy-first consumer DNS service
#499Earlier quoted context omitted.
And since it's cloudflare if some site's politics don't align with the owner's politics they'll just block it arbitrarily.
It's a private organization with no monopoly and lots of competition. Free speech doesn't apply here. Also Cloudflare gets vastly more negative opinions that they don't check enough and serve too many unsavory sites so it seems there's no way to win with the HN crowd.
Any censorship immediately leads to massive censorship even if they don't want to expand it. That's why it has to be stopped at the start; not done at all. Dumb pipe or censorship pipe.
Re: 1.1.1.1: Fast, privacy-first consumer DNS service
#500Earlier quoted context omitted.
> they insinuate that Google both sells and uses DNS I don't think it's intended to say anything about Google specifically. Keep in mind that there are many other DNS services out there, and some of them are known for being pretty scummy, e.g. replacing NXDOMAIN results with "smart search" / ad pages.
>"I don't think it's intended to say anything about Google specifically" Google is mentioned 13 times in this post and their resolvers 3. That's 16 total mentions of Google in their post.