11–20 of 32 posts
So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.
So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
Here's the whole thing unsorted: http://pastebin.com/z7BzEnhC and in case you want to learn about NAPTR: http://www.ietf.org/rfc/rfc2915.txt
After a quick Google, it turns out some versions of ISC BIND were vulnerable to this... but I'm almost willing to bet a lot of other software that handles NAPTR could be as well.
My first thought on seeing that is it would be great for a DNS amplification attack. Not sure the value as an advertisement though...
I think it's too big for UDP, it'll renegotiate TCP for anything over a certain size. thus DNS amplification is impossible because spoofing the TCP source would fail a handshake.
That's brilliant! (reminds me; wasn't there a blog that was published in HTTP headers once?)
Here's the whole thing unsorted: http://pastebin.com/z7BzEnhC and in case you want to learn about NAPTR: http://www.ietf.org/rfc/rfc2915.txt
Regular expressions in DNS records? That sounds like it would be an easy possibility of exponential resource consumption: http://en.wikipedia.org/wiki/ReDoS After a quick Google, it turns out some versions of ISC BIND were vulnerable to this... but I'm almost willing to bet a lot of other software that handles NAPTR could be as well.
So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.
"string1" "string2" "string3"
Using TXT for artwork also has the advantage that you don't risk an intermediate resolver re-ordering things.
Source: When this came up about a month ago: https://news.ycombinator.com/item?id=7185326
great work though
So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.
So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.