Live data from Hacker News

Google DNS at 010.010.010.010

8.8.8.8

21–30 of 132 posts

Re: Google DNS at 010.010.010.010

#21
post #13

I found this quite amusing as it seems as if Google is trying to impersonate Cloudflare's 1.1.1.1, whereas 010.010.010.010 is indeed the octal representation of 8.8.8.8. Credit: IPv4 addresses are silly, inet_aton(3) doubly so. https://www.netmeister.org/blog/inet_aton.html

Ever tried to google 192.168.1.1? Here at least it gives lots of bogosity (all in the name of keeping us safe from what we actually wanted to get to).

Google is for web search, and http://192.168.1.1 is not on the web

Re: Google DNS at 010.010.010.010

#22
post #19
post #14

It's also at 010.010.2056 or 0x8080808 or 01002004010. I made a little tool a while ago that iterates over all the options that I know of: https://lucb1e.com/randomprojects/php/funnip.php?ip=8.8.8.8 The variant found by OP is apparently the very last option that my tool generates. These days, Firefox is a bit boring (okay, okay, I'll admit it's a good choice for security) and translates these at the first opportunity…

It's weird that this is just a side-effect of the way strtol works, but there's no way (that I can figure out) to get + or - involved.

It can't only be that, or 127.1 would not work. It is doing some parsing beyond just calling a parseInt on each of them in order to recognize domain names and use name resolution rather than directly putting the bytes in the IP header. That must be why 0x9000000.-16250872 doesn't work (if negative worked, that should also resolve to 8.8.8.8).

Re: Google DNS at 010.010.010.010

#23
post #10

Octal 010 is 8. Dotted quads can apparently be in octal, so that’s just 8.8.8.8 . What are we looking at here that’s new?

Google's server handles the octal case if it's provided directly. Not sure if this is an explicit code path or if the server handles all IP forms. Try this: curl -v -H "Host: 010.010.010.010" https://8.8.8.8 Trying to do the same with other websites doesn't seem to work.

Not sure what you mean about other websites, it works fine on Apache and Nginx, e.g. on my server:

    curl -kiH Host:1348764566 https://1348764566
(-k flag needed because I didn't get a valid cert for this variant of the IP. One could also specify the fingerprint but let's keep the demo simple.)

It'll give you a 404 because of the unknown vhost, but it would also do that if you access it using the 'normal' dotted decimal notation: http://80.100.131.150

I used to detect this number actually and it would give you a small easter egg, but nobody triggered it and nowadays Firefox doesn't send it as a host header anymore when you specify the IP as such so I didn't check how to port that over to my new web server stack.

Re: Google DNS at 010.010.010.010

#24
post #20
post #4

For me the link on HN is to https://dns.google/ but I'm pretty sure it's supposed to be to https://010.010.010.010/ (which redirects, for me). Did the admins change it?

Is that a real TLD?

TLS certs can be issued to make them work with IP addresses, which is why https to 8.8.8.8 (octal: 010.010.010.010) works: https://cabforum.org/guidance-ip-addresses-certificates/

See also: https://01.01.01.01/

(btw: .google and .goog are valid TLDs)

Re: Google DNS at 010.010.010.010

#25
For those interested in more memorable DNS IPs, there is the following:

Just be careful, because TWNIC/Quad101 was subjected to a BGP hijack in 2019[0]

    101.101.101.101 [TWNIC]
    80.80.80.80 [FREENOM][1]
    4.2.2.2 [Level 3]
[0] https://www.manrs.org/2019/05/public-dns-in-taiwan-the-lates...

[1] https://www.freenom.world/en/index.html?lang=en

Re: Google DNS at 010.010.010.010

#26
post #25

For those interested in more memorable DNS IPs, there is the following: Just be careful, because TWNIC/Quad101 was subjected to a BGP hijack in 2019[0] 101.101.101.101 [TWNIC] 80.80.80.80 [FREENOM][1] 4.2.2.2 [Level 3] [0] https://www.manrs.org/2019/05/public-dns-in-taiwan-the-lates... [1] https://www.freenom.world/en/index.html?lang=en

Don't forget 1.1.1.1 and 1.0.0.1 (aka 1.1) [Cloudflare]

Re: Google DNS at 010.010.010.010

#28
post #21
post #13

Earlier quoted context omitted.

Ever tried to google 192.168.1.1? Here at least it gives lots of bogosity (all in the name of keeping us safe from what we actually wanted to get to).

Google is for web search, and http://192.168.1.1 is not on the web

Google also has info boxes, and this would be a very good place for one.

Re: Google DNS at 010.010.010.010

#30
post #10

Octal 010 is 8. Dotted quads can apparently be in octal, so that’s just 8.8.8.8 . What are we looking at here that’s new?

Google's server handles the octal case if it's provided directly. Not sure if this is an explicit code path or if the server handles all IP forms. Try this: curl -v -H "Host: 010.010.010.010" https://8.8.8.8 Trying to do the same with other websites doesn't seem to work.

[deleted]
Post reply on HN