If you need to poison the DNS by court order. Can you also just poison the requestees DNS entries? E.g. Canal+ own websites?
French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
161–170 of 231 posts
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#162I wonder if it's possible to just use Yandex DNS. Russia won't comply obviously.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#163[flagged]
* Domestic abuse is the victim's fault because they shouldn't have made their partner angry. * The Chinese GFW is the fault of the people who criticized the government. They shouldn't criticize the government. * Israel indiscriminately bombing Gaza is the fault of the Gazans who fought back the last time Israel did that. * The Holocaust is the Jews' fault for not fleeing the country sooner.
I don't think it's a good principle.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#164Earlier quoted context omitted.
Italy has the system you're thinking of. It's called Piracy Shield. Upon receiving a blocking request from the government through the automated system developed for this purpose, all ISPs are required to block the domain or IP within 30 minutes or else their CEOs could be criminally charged and go to jail.
Does it work in practice? The Russian censorship machine has only reached these kinds of reaction times in the last year or so, and they had to boil the frog for a decade to achieve that.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#165Earlier quoted context omitted.
Google employees had the courage to force Google to pretend to withdraw.
But rarely do they have the courage to quit their jobs or go on strike, when Google does the next anti privacy thing.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#166Earlier quoted context omitted.
There is actually no evidence this is the case, and there is evidence it is the opposite - that the less voters support something, the more likely it is to pass.
This claim appears blatantly false. If being unpopular makes a law more likely to pass, then surely the French government tars and feathers all French children every other week. No, they don't, since the voters would prevent that by voting for a different government.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#167Earlier quoted context omitted.
Will read the article now thank you
This kind of comment is best left on reddit to keep the signal-to-noise ratio on HN as high as possible. Just hit that upvote button instead. :)
>Please don't post comments saying that HN is turning into Reddit.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#168The title on the website is “Google, Cloudflare & Cisco Will Poison DNS to Stop Piracy Block Circumvention”. Curious why Cloudflare has been singled out in the submission title?
Also, the country (france) is ordering the "poisoning", these american companies just comply with local regulations. Heavily biased article. Remember that dns/ip systems are decentralized at the national precisely so that countries have sovereignity. The editorial line would have us believe that france is committing a free speech crime or overturning internet infrastructure, while in actuality they are exherting thei…
Further the action of a single state often influences other states, as is especially true when it comes to the internet which is global by nature.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#169This is a great opportunity for a VPN provider to come up with an extra product being a paid DNS resolver.
Re: French court orders Google, Cloudflare, Cisco to poison DNS to stop piracy
#170Earlier quoted context omitted.
> your ISP will just hijack the recursive queries it makes This level of deep packet inspection and injection is not what ISPs commonly do in my experience. At this point, it is much easier to just block the service's IP addresses than deep-inspect DNS traffic and match the query identifier and stuff to inject a false response. Why spend that engineering time when people will just fix the DNS server and can access th…
> At this point, it is much easier to just block the service's IP addresses than deep-inspect DNS traffic and match the query identifier and stuff to inject a false response. Why spend that engineering time when people will just fix the DNS server and can access the site directly? Because IP addresses can change frequently, and also because if a site is behind a CDN, that would cause a lot of collateral damage. > The…