Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My Chromecast Ultra would not start until I began answering 8.8.8.8

mailarchive.ietf.org

Post reply on HN
Print view View original

401–410 of 519 posts

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#401

Post by tucif »

JohnFen wrote: post #336
josteink wrote: post #325

Earlier quoted context omitted.

Sounds interesting. Do you have a write up about creating such a setup?

No, I don't, but it's conceptually pretty easy (the devil is always in the details). I'm sure you could find something on the net describing this better. What I've done is, first, to block the HTTPS port from going anywhere except to my proxy. If you want to use HTTPS in my network, you have to install my cert. That cert is used to negotiate the HTTPS connection to the proxy. The proxy then has access to the plain-te…

does this work with apps using certificate pinning?

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#402

Post by Wowfunhappy »

rsync wrote: post #326
reaperducer wrote: post #188

Earlier quoted context omitted.

The last thing the Internet needs is even more dependence upon Google Watching Big G's actions over the last few years, I've sometimes wondered if it's laying the groundwork to fork the internet. People talk about China and Russia's actions balkanizing the internet. But I have a sense that Google could do it, as well, and bring us back to the days when people didn't know the difference between the real internet and A…

"Watching Big G's actions over the last few years, I've sometimes wondered if it's laying the groundwork to fork the internet." Wonder no more as that is the end goal . Nothing less than becoming the new Ma Bell can be considered success.

> Wonder no more as that is the end goal.

We don't know this.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#403

Post by vetinari »

kazinator wrote: post #260
Arnt wrote: post #148

Earlier quoted context omitted.

I too have written code that asks 8.8.8.8 and 8.8.4.4, because the DNS server I get from DHCP frequently is so brain-damaged. (SRV records, what's that?) I asked both in parallel. On one hand it feels wrong to not ask in parallel. On the other, $%#@%#$%!$@# the %$#%#$%^$#@%#$! packet filters that block DNS packets to everyone except the local brain-damaged resolver. Or even redirect. If Google will fight that fight I…

> If Google will fight that fight I'll happily enjoy the benefits. Evidently, they are: https://en.wikipedia.org/wiki/DNS_over_HTTPS https://developers.google.com/speed/public-dns/docs/dns-over...

And that's how we are going to get mandatory https proxies in networks... The arms race will continue, making the lives of everyone more difficult.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#404

Post by ballenf »

rasz wrote: post #365
dvdgsng wrote: post #355

Earlier quoted context omitted.

I had no idea. thank you for this! I assume the setting is "use google dns service to help resolve navigation errors"?

Yes, except Chrome has very liberal definition of what it considers an error.

Is there any combination of settings in Chrome that will disable this behavior?

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#405

Post by kllrnohj »

pixl97 wrote: post #265
eertami wrote: post #164

Earlier quoted context omitted.

Maybe I'm missing the forest for the trees but... what possible reason would you have for taking a Chromecast to a coffee shop?

The problem here is you are falling in the same trap as the Google engineers here. Why would ______ want to do _______ with their ______ device? You can make a locked down device that only does a very limited subset of functions, but you really should make that known to the user before hand. "This device requires access to $X servers to function". If you have secret requirements that go far beyond user expectations,…

Google isn't exactly secret about the fact that Chromecast connects to Google's data centers.

Especially if you're using it to, say, watch YouTube, as Paul Vixie was.

Chromecast connecting to Google is not a "secret requirements that go far beyond user expectations." Expecting a cloud-connected product to continue to work when you've randomly blacklisted IPs that belong to that company is, however, an unreasonable expectation.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#406

Post by vetinari »

shawnz wrote: post #141
pdkl95 wrote: post #103

Earlier quoted context omitted.

The proper thing to do is to use the DNS settings the DHCP server provided and testing those settings by providing a server the device can lookup and connect to (with TLS). If the server proved it's authenticity, the DNS settings work. (some devices might cache this result, others might do this during startup) If an error occurs or a reasonably short timeout expires, the device can: if it has UI the user will see, it…

> don't make assumptions about the user's situation Using 8.8.8.8 is exactly the opposite of an assumption. It always works in any config, that's the point. EDIT: Besides, obviously, the OP's extremely unusual config, where he is effectively just blocking the service with his firewall. Why isn't he outraged about having to unblock all of YouTube's other IPs? What's special about 8.8.8.8?

The point that 8.8.8.8 doesn't always work. The linked article is about highlighting exactly that.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#407

Post by vetinari »

loeg wrote: post #214
yardstick wrote: post #67

Earlier quoted context omitted.

Chromecast Ultra is sold in the UK, which is Europe (even if we do end up leaving the EU).

OP said: > The Chromecast Ultra isn't sold here

And the OP was wrong; Chromecast Ultra is being sold here in Europe.

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#409

Post by taneq »

reaperducer wrote: post #188
calibas wrote: post #170

This should bother people here more than it does. The last thing the Internet needs is even more dependence upon Google. They've made it quite clear through their actions that they're not supporters of a free and open Internet: https://theintercept.com/2018/09/14/google-china-prototype-l... If people don't push back against these kinds of things, Google will continue to abuse their power. There shouldn't be an army o…

The last thing the Internet needs is even more dependence upon Google Watching Big G's actions over the last few years, I've sometimes wondered if it's laying the groundwork to fork the internet. People talk about China and Russia's actions balkanizing the internet. But I have a sense that Google could do it, as well, and bring us back to the days when people didn't know the difference between the real internet and A…

Is this not what AMP is for?

Re: My Chromecast Ultra would not start until I began answering 8.8.8.8

#410

Post by wtallis »

TomMarius wrote: post #374
ignoramous wrote: post #349

Earlier quoted context omitted.

> So does it really matter if it uses 8.8.8.8 to resolve the connection to google vs. some other DNS server? It might since there are DNS providers (OpenDNS, AdGuard) that help create blacklists or use one out of the box (family filters, privacy oriented filters, etc). Also, not sure if true, but Google might be required to comply with local laws and 'block' websites through NXDomains.

How would you use the device if you blacklisted its cloud?

It's more about the fact that this device is unnecessarily requiring you to open a hole in that layer of security, potentially leaving other devices exposed if the exception for the Chromecast Ultra is not properly configured.
Post reply on HN