My first thought on seeing that is it would be great for a DNS amplification attack. Not sure the value as an advertisement though...
EFF adds ASCII art to its DNS
21–30 of 32 posts
Re: EFF adds ASCII art to its DNS
#22So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
A lot of VoIP deployments simply ignore the whole DNS side of things, or at best use an A record. Especially in wholesale, it's IP only (using domains breaks some things), and authentication is based on IP, too. (Source IP on a UDP packet - very secure.)
Re: EFF adds ASCII art to its DNS
#23So, they don't use IP Telephony then? You're aware you can add whatever you want into DNS, it doesn't have to mean anything that computers understand right? you /could/ make your A records the intro to Star Wars- but nobody will be able to use your site. TXT is a much better option imho, or.. y'know, not doing this.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.
dig +short txt log.netkine.com | sed $'s/\" \"/\\\n/g'
Re: EFF adds ASCII art to its DNS
#24 dig ch whois.cloudflare @lee.ns.cloudflare.com
Note its TCP only to prevent abuse. Also overloading the Chaos protocol to avoid messing with real DNS.Re: EFF adds ASCII art to its DNS
#25Re: EFF adds ASCII art to its DNS
#26What happens if someone chops up binary data such as a copyright movie file BASE64 encoded into DNS text records? Does all the DNS operators with that in the cache become illegal file sharers then?
Loot at entry 9, they use a similar hack to distribute the DeCSS (DVD DRM decryption program) source code through DNS.
> Mark Baker noticed that you could do the request to any nameserver. Which means for instance that the DeCSS source code is available from the DVDCCA's nameservers !
Re: EFF adds ASCII art to its DNS
#27Re: EFF adds ASCII art to its DNS
#28Earlier quoted context omitted.
TXT isn't an option because the records themselves are unsorted. Use the above command without the pipe to sort looks weird, but not as weird as TXT would.
Unfortunately our DNS service doesn't allow NAPTR records, so we had to go the TXT route. Here's a large wooden object: dig +short txt log.netkine.com | sed $'s/\" \"/\\\n/g'
P!**9N#
9= #(a:?4
{w Tj(d w?#
@(d !nPx A>4
P=W @{d : 9=w\;
V: 9a# td P:d tj
{w 9=W# Px @=# F=+
@(d {d #@= P= P=@:
P=# WJ#sjP:WP= a?tx(a#
P=@=d gawV= 9= wawa\;?
{w : #9:w @!9_axw
@{d 1d P9:wd P9na\;=# WSgmN
P=W @=9=w 9{ # #:w W4Wmm
Pn #(vj P{aW #{d W4Dm
!a P9nW !w# P:d mW
#{d@:w## {d9:/4 P=
P=WP=@=w/# Px{J4Pd {a
P\;H1w Aw9j# :m?(J:W{d
Ynwwaa*:wW## {d 9=V:d
\;44#WWRav*# tj 9:d@=
A?WW#W#W#w==d@(d !a
A?WWUWQ#mNs4:W td
As*XUW#UWNsj@:d
#wv!W4W WW?=#
bw?9*9!="Re: EFF adds ASCII art to its DNS
#29Earlier quoted context omitted.
Unfortunately our DNS service doesn't allow NAPTR records, so we had to go the TXT route. Here's a large wooden object: dig +short txt log.netkine.com | sed $'s/\" \"/\\\n/g'
I get this. I can't make out what it's supposed to be. P!**9N# 9= #(a:?4 {w Tj(d w?# @(d !nPx A>4 P=W @{d : 9=w\; V: 9a# td P:d tj {w 9=W# Px @=# F=+ @(d {d #@= P= P=@: P=# WJ#sjP:WP= a?tx(a# P=@=d gawV= 9= wawa\;? {w : #9:w @!9_axw @{d 1d P9:wd P9na\;=# WSgmN P=W @=9=w 9{ # #:w W4Wmm Pn #(vj P{aW #{d W4Dm !a P9nW !w# P:d mW #{d@:w## {d9:/4 P= P=WP=@=w/# Px{J4Pd {a P\;H1w Aw9j# :m?(J:W{d Ynwwaa*:wW## {d 9=V:d \;44#WW…
Re: EFF adds ASCII art to its DNS
#30Not the only ones: dig ch whois.cloudflare @lee.ns.cloudflare.com Note its TCP only to prevent abuse. Also overloading the Chaos protocol to avoid messing with real DNS.