Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Chromium's Impact on Root DNS Traffic

blog.apnic.net

Post reply on HN
Print view View original

31–40 of 221 posts

Re: Chromium's Impact on Root DNS Traffic

#31

Post by gbil »

joshuamorton wrote: post #22
gbil wrote: post #20

Earlier quoted context omitted.

https://cloud.google.com/docs/chrome-enterprise/policies/?po... Google Chrome (Linux, Mac, Windows) since version 80 Google Chrome OS (Google Chrome OS) since version 80 Chrome 80: February 4, 2020 and as a clarification When you connect via VPN to the corporate network the DNS queries are not distributes as when you are in the office. You have a X amount of entry points for the VPN which are served by Y DNS servers…

The article mentions relevant code changes in 2014. It seems like the enterprise policy may be recent, but the feature is much older.

Sure and I explained why it hit us when it hit us

Also keep in mind that Edge is chromium based now and has the same issue. And is becoming the standard by MS and thus the impact is increased now because of this

Re: Chromium's Impact on Root DNS Traffic

#32

Post by tasogare »

elric wrote: post #26

I don't get this feature. And I really hate that it's present in pretty much every browser these days. If I want to type an URL, I'll use the address bar. If I want to search, I'll use the search bar. Different bars with different keyboard shortcuts and different purposes. Why do so many browsers merge these two? Screens are insanely wide these days, so screen real estate can't be the reason. Are we trying to trick u…

> Screens are insanely wide these days

This is not relevant for URL or search bars since they need to be displayed horizontally. Separate bars means less vertical screen space, which is still scarce.

Re: Chromium's Impact on Root DNS Traffic

#33

Post by meh206 »

ananonymoususer wrote: post #18
dylz wrote: post #11

Earlier quoted context omitted.

There was a point where, at least in the US, this was standard behaviour for virtually every single major ISP and mobile provider. Several used to hijack all port 53 traffic to disallow you from using anything but their resolver.

And for those who don't understand why this is a bad thing, I will present my own use case. I run pi-hole at home and frequently work from there for another company. That company has provided me with a laptop that uses Cisco's DNS "Umbrella", which is some sort of security feature: https://docs.umbrella.com/deployment-umbrella/docs/point-you... Because my company laptop doesn't pay attention to the DNS servers recomm…

Actually I would tell you to use ed25519 keys instead of passwords lol

Re: Chromium's Impact on Root DNS Traffic

#34

Post by ebg13 »

tasogare wrote: post #32
elric wrote: post #26

I don't get this feature. And I really hate that it's present in pretty much every browser these days. If I want to type an URL, I'll use the address bar. If I want to search, I'll use the search bar. Different bars with different keyboard shortcuts and different purposes. Why do so many browsers merge these two? Screens are insanely wide these days, so screen real estate can't be the reason. Are we trying to trick u…

> Screens are insanely wide these days This is not relevant for URL or search bars since they need to be displayed horizontally. Separate bars means less vertical screen space, which is still scarce.

> This is not relevant for URL or search bars since they need to be displayed horizontally

Need? Has anyone tried?

Re: Chromium's Impact on Root DNS Traffic

#35

Post by dbetteridge »

ananonymoususer wrote: post #18
dylz wrote: post #11

Earlier quoted context omitted.

There was a point where, at least in the US, this was standard behaviour for virtually every single major ISP and mobile provider. Several used to hijack all port 53 traffic to disallow you from using anything but their resolver.

And for those who don't understand why this is a bad thing, I will present my own use case. I run pi-hole at home and frequently work from there for another company. That company has provided me with a laptop that uses Cisco's DNS "Umbrella", which is some sort of security feature: https://docs.umbrella.com/deployment-umbrella/docs/point-you... Because my company laptop doesn't pay attention to the DNS servers recomm…

Heh Umbrella is such a shitty app, if you've got root you can

cd /opt/cisco/anyconnect/bin

sudo sh umbrella_uninstall.sh

That should leave VPN functionality intact, but remove the ridiculous MITM of DNS queries.

Re: Chromium's Impact on Root DNS Traffic

#36

Post by g2347890 »

elric wrote: post #26

I don't get this feature. And I really hate that it's present in pretty much every browser these days. If I want to type an URL, I'll use the address bar. If I want to search, I'll use the search bar. Different bars with different keyboard shortcuts and different purposes. Why do so many browsers merge these two? Screens are insanely wide these days, so screen real estate can't be the reason. Are we trying to trick u…

all technically deprived people I have seen, use none of the above, the first thing they do is open google (most have it nowadays in defult tab page) and they type the URLs given to them there, no one knows about address/search bar, and if some know, they expect it to work like the google search box

Update: I hide some site of mine from google, I do not care about SE traffic and block any crawler, and I have noticed when I give some people I know a URL from that site, they often tell me that it cannot be found, given google search they use all the time does not list it

Re: Chromium's Impact on Root DNS Traffic

#37

Post by [deleted] »

ebg13 wrote: post #34
tasogare wrote: post #32

Earlier quoted context omitted.

> Screens are insanely wide these days This is not relevant for URL or search bars since they need to be displayed horizontally. Separate bars means less vertical screen space, which is still scarce.

> This is not relevant for URL or search bars since they need to be displayed horizontally Need? Has anyone tried?

[deleted]

Re: Chromium's Impact on Root DNS Traffic

#38

Post by elric »

tasogare wrote: post #32
elric wrote: post #26

I don't get this feature. And I really hate that it's present in pretty much every browser these days. If I want to type an URL, I'll use the address bar. If I want to search, I'll use the search bar. Different bars with different keyboard shortcuts and different purposes. Why do so many browsers merge these two? Screens are insanely wide these days, so screen real estate can't be the reason. Are we trying to trick u…

> Screens are insanely wide these days This is not relevant for URL or search bars since they need to be displayed horizontally. Separate bars means less vertical screen space, which is still scarce.

My search bar is next to my URL bar, both are big enough and it has no impact on vertical space. I don't think I've seen any browsers where the two bars are stacked vertically.

Re: Chromium's Impact on Root DNS Traffic

#39

Post by joshuamorton »

gbil wrote: post #31
joshuamorton wrote: post #22

Earlier quoted context omitted.

The article mentions relevant code changes in 2014. It seems like the enterprise policy may be recent, but the feature is much older.

Sure and I explained why it hit us when it hit us Also keep in mind that Edge is chromium based now and has the same issue. And is becoming the standard by MS and thus the impact is increased now because of this

Sure, lockdown and increased VPN use makes sense as to why this got painful in march. However I expect GP was quibbling with this part of your statement:

>Furthermore if I remember correctly this "feature" in chrome was enabled in a version which was distributed to our clients maybe a month before the lockdowns so there was little time to see the effect while clients were still in the office

Which claims that the feature was rolled out recently.

Re: Chromium's Impact on Root DNS Traffic

#40

Post by jaxn »

tasogare wrote: post #32
elric wrote: post #26

I don't get this feature. And I really hate that it's present in pretty much every browser these days. If I want to type an URL, I'll use the address bar. If I want to search, I'll use the search bar. Different bars with different keyboard shortcuts and different purposes. Why do so many browsers merge these two? Screens are insanely wide these days, so screen real estate can't be the reason. Are we trying to trick u…

> Screens are insanely wide these days This is not relevant for URL or search bars since they need to be displayed horizontally. Separate bars means less vertical screen space, which is still scarce.

Insanely wide means that you can have two inputs on the same row without vertical impact. That's how it used to be.

(I think the omnibox is the right UI though)

Post reply on HN