Live data from Hacker News

My Chromecast Ultra would not start until I began answering 8.8.8.8

mailarchive.ietf.org

291–300 of 519 posts

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#291

This should bother people here more than it does. The last thing the Internet needs is even more dependence upon Google. They've made it quite clear through their actions that they're not supporters of a free and open Internet: https://theintercept.com/2018/09/14/google-china-prototype-l... If people don't push back against these kinds of things, Google will continue to abuse their power. There shouldn't be an army o…

Thank you! I feel gaslit even talking about this!

Mention this online, and you will get a torrent of people telling you that you must be doing something wrong, and even if it is true Google probably has a good reason that is just beyond our understanding.

I just talked about my experience with Chromecast here a few hours ago in another thread. [1] The Google product forums are way worse.

It is not reasonable that I should have to do packet injection to not let my Chromecast connect to Google's DNS servers, especially if I just want to watch locally streamed videos.

Google has slowly been carving features off of the Chromecast for the last four years. I only use it for local video content, so why must I update when it has burned me in the past?

What really kills me is how we wouldn't let Microsoft or Facebook pull this crap.

[1]: https://news.ycombinator.com/item?id=19171115

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#292

DNAT 8.8.8.8:53 back to your own DNS server.

This will only last until Google pushes its devices to use DNS over TLS/HTTPS.

https://developers.google.com/speed/public-dns/docs/dns-over...

>To address these problems, Google Public DNS offers DNSSEC-validating resolution over an encrypted HTTPS connection using a web-friendly API that does not require browser or OS configuration or installing an extension. DNS-over-HTTPS greatly enhances privacy and security between a client and a recursive resolver, and complements DNSSEC to provide end-to-end authenticated DNS lookups.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#293

I'm always shocked at how easy it is for people to fall into the "Google is evil!!1" trap on such trivial stuff (and funnily enough, much more serious privacy issues related to Google are ignored/downvoted). Hardcoded DNS servers are common. Extremely common in a bunch of IOT devices, given how broken some ISPs are. This is a non-story and the only reason it's being upvoted is because Google is doing it, and they als…

> Hardcoded DNS servers are common.

Indeed. And they're terrible. Maybe making a stink about a big player like Google doing this might encourage others to rethink the practice.

Probably not, of course, but the alternative of just shutting up and taking it isn't any better.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#294
post #48

Set DNS to Google and do dig +short TXT whoami.ds.akahelp.net Then set to other DNS provider and do the same You will see that Google DNS is delivering ECS which helps with directing traffic to nearest CDN. I have quite secure DNS setup but still forward some queries to Google DNS (HBO, Spotify, etc.) just to take advantage of using ECS.

When you run your own DNS server, then you don't need ECS, since it will have the real IP address at the authoritative server.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#295
post #288

Earlier quoted context omitted.

I think the difference is that the chromecast would not function without 8.8.8.8. Thus requiring you use googles services to use a google product. That is not cool.

Isn't using a company's product exactly when you'd expect a dependency on that company's service?

It's not a dependency that I expect of browsing devices. I expect to be able to use eg. a TV, a radio or an ebook reader entirely without relying on the vendor, save for technical support maybe.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#296
Gotta love Paul's approach. Amazing to see things that break when you run a black hole DNS server on your inside network. I have a Samsung TV that won't complete boot until it has verified there aren't any firmware updates at Samsung. I finally resorted to copying the http response traffic and having an a bit of code on my RasPi return it when the TV asks (it says "no new firmware for you"). Of course these sorts of tricks will fail when vendors get wise to them and start returning an encrypted time and date nonce in the response.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#297

Earlier quoted context omitted.

To be fair once DNS over TLS/HTTP become mainstream, local DNS servers won’t work without valid certificates, which I’m guessing will be a pain even with letsencrypt and co.

If you have a machine joined into a domain (Active Directory, FreeIPA, others), it already has a custom CA certificate installed into its store. So this domain CA will just sign the certificate for the local DNS server, like it does for other local TLS services. If you don't, just make up a local CA and install the cert on your machines or devices. No need to drag letsencrypt and co into the game, that's only for pub…

Right, because your Chromecast will let you install your CA cert on it....

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#298
post #288

Earlier quoted context omitted.

I think the difference is that the chromecast would not function without 8.8.8.8. Thus requiring you use googles services to use a google product. That is not cool.

Isn't using a company's product exactly when you'd expect a dependency on that company's service?

DNS is a protocol not a service

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#299

This should bother people here more than it does. The last thing the Internet needs is even more dependence upon Google. They've made it quite clear through their actions that they're not supporters of a free and open Internet: https://theintercept.com/2018/09/14/google-china-prototype-l... If people don't push back against these kinds of things, Google will continue to abuse their power. There shouldn't be an army o…

> This should bother people here more than it does. The last thing the Internet needs is even more dependence upon Google. They've made it quite clear through their actions that they're not supporters of a free and open Internet: https://theintercept.com/2018/09/14/google-china-prototype-l....

Which reminds me of:

> Secretary of State Hillary Clinton on Thursday called for uncensored Internet access around the world. Among other initiatives, Clinton said the U.S. government will meet next month with network services companies to advance "Internet freedom."... In remarks aimed at the business community, Clinton said companies shouldn't yield to pressure from foreign governments to censor themselves or violate human rights. She urged companies to resist such pressures even if it means losing business in those countries, and argued that a principled stand would be good for business over the long run... Clinton said the State Department will host a meeting in February with network services companies to address the issues around Internet freedom. (from https://www.business-humanrights.org/en/hillary-clinton-says...)

> Increasingly, U.S. companies are making the issue of internet and information freedom a greater consideration in their business decisions. I hope that their competitors and foreign governments will pay close attention to this trend. The most recent situation involving Google has attracted a great deal of interest. And we look to the Chinese authorities to conduct a thorough review of the cyber intrusions that led Google to make its announcement. And we also look for that investigation and its results to be transparent.

https://2009-2017.state.gov/secretary/20092013clinton/rm/201...

Chris Messina, open web advocate at Google at the time, was present (check his website now http://chrismessina.me/b/13865613/leaving-google).

edit: damn... almost ten years ago.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#300
post #288

Earlier quoted context omitted.

I think the difference is that the chromecast would not function without 8.8.8.8. Thus requiring you use googles services to use a google product. That is not cool.

Isn't using a company's product exactly when you'd expect a dependency on that company's service?

You don't have every single car brand with their own fuel at the gas station right?
Post reply on HN