Live data from Hacker News

I fought my ISP's bad behavior and won

erichelgeson.github.io

51–60 of 115 posts

Re: I fought my ISP's bad behavior and won

#51

Earlier quoted context omitted.

Super shady stuff. I never rely on any ISP provided DNS servers Doesn't that mean that you don't benefit from nearby CDNs? Perhaps worth the tradeoff anyway.

8.8.8.8 and 8.8.4.4 are anycast.

You don't trust your ISP, so you go for the one company whose entire profit model is build around ads and profiling their users, and who is known to cooperate (willingly and/or unwillingly) with the NSA in their logging programs? I'm not sure that's the right response...

Re: I fought my ISP's bad behavior and won

#52
post #40

As a ISP when we were considering using Aspira they claimed that no referral tokens would be replaced and that the only behavior was injecting a popup coupon window. I decided not to proceed with it because it seemed like a support nightmare and tampering with non-malicious subscriber traffic crosses a line. Their marketing affiliates (such as Cash4Trafik) are always reaching out to CEO types at small ISPs and the mo…

Yes, and conditioning your users to click on popups. Glad you chose not to!

Re: I fought my ISP's bad behavior and won

#53

Super shady stuff. I never rely on any ISP provided DNS servers. I'm glad you talked to the the etailers to let them know what was going on. These business practices do introduce latency, regardless of what he told you. Not to mention, they are highly unethical and dishonest.

Super shady stuff. I never rely on any ISP provided DNS servers Doesn't that mean that you don't benefit from nearby CDNs? Perhaps worth the tradeoff anyway.

No. For example you set up your own resolvers and use those for your network's DNS needs. The source IP's from your resolvers recursive requests will be used to help CDNs and other geo-aware resolvers send you to the nearest appropriate site.

Re: I fought my ISP's bad behavior and won

#54
post #40

As a ISP when we were considering using Aspira they claimed that no referral tokens would be replaced and that the only behavior was injecting a popup coupon window. I decided not to proceed with it because it seemed like a support nightmare and tampering with non-malicious subscriber traffic crosses a line. Their marketing affiliates (such as Cash4Trafik) are always reaching out to CEO types at small ISPs and the mo…

May I ask which ISP you work for?

Knowing that you consider tampering with nonmalicious subscriber traffic to be crossing a line is something I would pay a premium for.

Re: I fought my ISP's bad behavior and won

#55

Earlier quoted context omitted.

Super shady stuff. I never rely on any ISP provided DNS servers Doesn't that mean that you don't benefit from nearby CDNs? Perhaps worth the tradeoff anyway.

8.8.8.8 and 8.8.4.4 are anycast.

And GOOG-owned. Spam from a small-scale ISP, or tracking by a big ad firm? You lose either way.

Re: I fought my ISP's bad behavior and won

#56

Earlier quoted context omitted.

8.8.8.8 and 8.8.4.4 are anycast.

And GOOG-owned. Spam from a small-scale ISP, or tracking by a big ad firm? You lose either way.

https://developers.google.com/speed/public-dns/privacy

"We built Google Public DNS to make the web faster and to retain as little information about usage as we could, while still being able to detect and fix problems. Google Public DNS does not permanently store personally identifiable information."

Re: I fought my ISP's bad behavior and won

#57
post #51

Earlier quoted context omitted.

8.8.8.8 and 8.8.4.4 are anycast.

You don't trust your ISP, so you go for the one company whose entire profit model is build around ads and profiling their users, and who is known to cooperate (willingly and/or unwillingly) with the NSA in their logging programs? I'm not sure that's the right response...

If the NSA is your adversary, you should not be using DNS at all.

Re: I fought my ISP's bad behavior and won

#58
I'd like to try out this curl command. I'm not using macports, though. Like many people, I've switched to brew since some time. Is there a quick way to see if my curl install is compiled with 'ares' whatever that is?

Re: I fought my ISP's bad behavior and won

#59
post #22

Super shady stuff. I never rely on any ISP provided DNS servers. I'm glad you talked to the the etailers to let them know what was going on. These business practices do introduce latency, regardless of what he told you. Not to mention, they are highly unethical and dishonest.

A really shady ISP could intercept and redirect any outgoing port 53 traffic to their servers.

That's what my ISP does. What's worse is that sometimes their dns servers fail intermittently (something to do with fragmented packets and retrying DNS queries in TCP mode).

It did take a while to figure out what was causing the intermittent DNS failures. "My ISP is hijacking all port 53 traffic" was fairly low on my list of possibilities, I must admit.

Fortunately it's not that hard to run a local resolver that forwards queries to an external resolver on a vps on an alternate port.

I'd switch ISPs, but I live in a remote area and my only other choices would be satellite or cellular, so I'm stuck with them.

Re: I fought my ISP's bad behavior and won

#60
post #58

I'd like to try out this curl command. I'm not using macports, though. Like many people, I've switched to brew since some time. Is there a quick way to see if my curl install is compiled with 'ares' whatever that is?

ports > brew!

But seriously I don't know how brew works, though looks like the code supports the option: https://github.com/Homebrew/homebrew/blob/master/Library/For...

Post reply on HN