Live data from Hacker News

1.1.1.1: Fast, privacy-first consumer DNS service

blog.cloudflare.com

491–500 of 695 posts

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#491
post #140
post #46

Earlier quoted context omitted.

It's clear what you meant, but for whatever it's worth, I think the word you wanted was "tempered", not "tampered".

For what it’s worth, you missed to point out “loosing” vs. “losing” in that comment (where it talks about “loosing trust”). :)

That looked more like a garden-variety typo than a bona fide eggcorn, so I gave it a pass ;)

https://en.wikipedia.org/wiki/Eggcorn

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#493

Is this an April Fool's joke since Cloudflare overtly hates privacy (see stance on TOR)?

Cloudflare invested a ton of time to create Privacy Pass to make it easier to use with Tor: https://blog.cloudflare.com/cloudflare-supports-privacy-pass...

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#494

I see a lot of criticism of the choice of KPMG. Who should they have chosen as auditors? And which is the better fast privacy-minded DNS service I should be using?

Maybe they could do some form of auditing that is traceable by the average consumer. For instance:

They could make their deployment setup completely automated and publish the tooling to github, and have video evidence of them deploying the same SHA-256 stamped tooling to their data centers. They could expose operational details and transactions on their DNS servers as far as possible without revealing identifiable information. They could have regular physical audits by a constantly rotating set of well known and trusted parties (i.e. EFF, Mozilla).

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#495

I cannot trust a service provided by a company which implies that Tor users are mostly bad people. No, thanks.

Talking about the distribution of traffic over Tor is very different than the people who use it. Cloudflare built Privacy Pass with the specific intent of allowing people who use Tor to have a better experience: https://blog.cloudflare.com/cloudflare-supports-privacy-pass...

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#496
post #450
post #435

Earlier quoted context omitted.

KPMG was also implicated in the massive South African "state capture" scandal involving the (now fugitive) Gupta family and former president Jacob Zuma. Among other things, KPMG issued a-later withdrawn-report that was used to undermine the well-respected finance minister, so that a more malleable person could be installed, while also auditing the Guptas during their worst excesses. Lest we choose to dismiss this as…

Sounds interesting, got any sources for further reading?

Two links should give you a summary of the issues. I worked one of the biggest retailers in South Africa until a month ago. We dropped KPMG as our auditors because of all the unethical issues relating to them. https://mg.co.za/article/2017-09-15-gordhan-weighs-in-on-kpm... And https://www.dailymaverick.co.za/article/2017-09-11-op-ed-the...

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#497
post #488

>"And we wanted to put our money where our mouth was, so we committed to retaining KPMG, the well-respected auditing firm, to audit our code and practices annually and publish a public report confirming we're doing what we said we would." It's worth pointing out that KPMG was Wells Fargo's independent auditor while the bank recently committed fraud on a massive scale by creating more than a million fake deposit accou…

>It's worth pointing out that KPMG was Wells Fargo's independent auditor while the bank recently committed fraud on a massive scale by creating more than a million fake deposit accounts and 560,000 credit card applications for customers without their knowledge or approval.[1] Why is it worth point out? Please detail the work you've done in establilshing that KPMG had access to the data and willfully ignored it.

An auditing company is pointless if they can't find fraud on such a massive scale or recognize that something is being hidden from them.

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#498

And look at these ping times: CloudFlare Google DNS Quad9 OpenDNS NewYork 2 msec 1 msec 2 msec 19 msec Toronto 2 msec 28 msec 17 msec 27 msec Atlanta 1 msec 2 msec 1 msec 19 msec Dallas 1 msec 9 msec 1 msec 7 msec San Francisco 3 msec 21 msec 15 msec 20 msec London 1 msec 12 msec 1 msec 14 msec Amsterdam 2 msec 6 msec 1 msec 6 msec Frankfurt 1 msec 9 msec 2 msec 9 msec Tokyo 2 msec 2 msec 81 msec 77 msec Singapore 2…

Cape Town, South Africa, Residential ADSL

    1.1.1.1 ~ 26ms
    8.8.8.8 ~ 42ms

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#499

Earlier quoted context omitted.

And since it's cloudflare if some site's politics don't align with the owner's politics they'll just block it arbitrarily.

It's a private organization with no monopoly and lots of competition. Free speech doesn't apply here. Also Cloudflare gets vastly more negative opinions that they don't check enough and serve too many unsavory sites so it seems there's no way to win with the HN crowd.

It set the precedent that they do filtering. It is now being used in legal cases against Cloudflare by companies suing them to force them to filter other things.

Any censorship immediately leads to massive censorship even if they don't want to expand it. That's why it has to be stopped at the start; not done at all. Dumb pipe or censorship pipe.

Re: 1.1.1.1: Fast, privacy-first consumer DNS service

#500

Earlier quoted context omitted.

> they insinuate that Google both sells and uses DNS I don't think it's intended to say anything about Google specifically. Keep in mind that there are many other DNS services out there, and some of them are known for being pretty scummy, e.g. replacing NXDOMAIN results with "smart search" / ad pages.

>"I don't think it's intended to say anything about Google specifically" Google is mentioned 13 times in this post and their resolvers 3. That's 16 total mentions of Google in their post.

I was specifically referring to the statement that Cloudflare won't sell your DNS history.
Post reply on HN