Live data from Hacker News

DNS servers that offer privacy and filtering

danielmiessler.com

31–40 of 95 posts

Re: DNS servers that offer privacy and filtering

#31
post #8
post #2

I know this is not for everyone, but I strongly prefer to run my own recursive resolver at home. Performance is great, plus I get regular DNS for the machines on my home network. Also, it was a fun little project. :)

I like to share the cache of the DNS resolver with as many people as possible because that's what gives you the best performance. A local resolver just for me can't really do that.

[deleted]

Re: DNS servers that offer privacy and filtering

#32
post #26

Another option here is DNS servers that block ads. I can't vouch for the company itself, but I have found AdGuard DNS reliable and effective, if not memorable: 176.103.130.130, 176.103.130.131 https://adguard.com/en/adguard-dns/overview.html

Run your own: https://pi-hole.net/

Re: DNS servers that offer privacy and filtering

#33
post #16
post #14

Earlier quoted context omitted.

There’s ping.sunet.se as maintained by the Swedish University Network (i.e. the network connecting Swedish Universities; there is no single “Swedish University”).

The advantage of pinging IPs is that you don’t have to have a working DNS setup to test your connection. If DNS does work, then your connection probably works, too.

In this case one should run "ping -n", otherwise ping will hang trying to resolve the IP into an hostname, if the DNS is misbehaving or not responding.

Re: DNS servers that offer privacy and filtering

#36
post #28

So the author is a security expert who recommends two companies that are notorious for their security flaws (Norton, Cisco), two companies that track your DNS queries for profiling (Google, Cloudflare) and IBM... Yeah, this sounds totally legit...

> two companies that track your DNS queries for profiling (Google, Cloudflare) Can you elaborate? Neither Google nor CloudFlare seem to collect information for profiling. Google: https://developers.google.com/speed/public-dns/privacy CloudFlare: https://developers.cloudflare.com/1.1.1.1/commitment-to-priv...

What? How do you come to that conclusion? Google actually tells you what it is collecting, if you cannot see how, say, city of origin, cannot be used to target you with specific search result, then I really cannot explain it to you.

Cloudflare does not store any information, but they are pretty frank about passing it on to APNIC for "research" as part of the deal where APNIC lend the 1.0.0.1 and 1.1.1.1 address to them. This is pretty well established and actually openly communicated by both entities, so should be easy to DDG. You are of course free to believe that this data is totally anonymized and not used for profiling / targeting at all, but imo that is pretty naive.

Re: DNS servers that offer privacy and filtering

#39
post #7

DNS servers should not be used as "internet connectivity tests" by pinging them. They are not maintained as ICMP test servers, and that is not their purpose. While many do not block ICMP packets, there are typically rate limiting systems in place, and other reasons why they would not respond to ping requests. Pinging DNS servers is a shitty inconclusive test for internet connectivity, or SLA measurements etc etc.

So, what should we ping for testing Internet connectivity ?

[deleted]

Re: DNS servers that offer privacy and filtering

#40

> Logs are kept for 24 hours for debugging purposes, then they are purged Legalese is very hard to learn language. Do they keep aggregate data, derived from those raw logs? It is not said. Trusting Cloudflare? It is a profit driven company, to start with ...

I work at Cloudflare. We don't sell data of any form, and we don't keep anything which could map queries back to the individual who made them.

When we talk about aggregate data it's things like total number of queries made to 1.1.1.1, number made by AS, and geographic region. Its purpose is only to show us if people are using 1.1.1.1 and how that changes over time.

Post reply on HN