Live data from Hacker News

iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

gitlab.com

51–60 of 114 posts

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#51

Earlier quoted context omitted.

I do but I always know if they are valid before I click on them, so I don't see the appeal of the DNS lookup. Plus that must be freaking slow.

Not necessarily slow, DNS Lookups are generally pretty fast: ~ dig somerandomurlimadeup.com | grep 'Query time: ' ;; Query time: 23 msec

Er, that's just saying "you got lucky and the root nameserver you hit was fast". Looking up any valid .com requires that plus a 2nd level lookup.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#52

Given the level of concern, I will change the default and release a new version right away.

This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

THANK YOU for being so awesome and responding to feedback so quickly. That is a breath of fresh air

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#55

Given the level of concern, I will change the default and release a new version right away.

This is done. A summary of the issue and apology can be found here: https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue

Thank you for addressing this so quickly. Great find and great response.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#56

Given the level of concern, I will change the default and release a new version right away.

This kind of response is amazing. Mistakes happen, it's the response and the resolution that matter. I was already a happy user. I am now even moreso. Well done.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#57
I hardly go a day without using iTerm2.

Don't worry George your responsiveness more than makes up for an honest mistake.

To everyone else: I would highly recommend if you make money on a daily basis using iTerm2 that you support his efforts:

https://www.patreon.com/gnachman/posts

Before you ask, yes I'm a patreon for George, his work inspires me.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#58
post #57

I hardly go a day without using iTerm2. Don't worry George your responsiveness more than makes up for an honest mistake. To everyone else: I would highly recommend if you make money on a daily basis using iTerm2 that you support his efforts: https://www.patreon.com/gnachman/posts Before you ask, yes I'm a patreon for George, his work inspires me.

I had no idea who was behind the project or that they even had a patreon. Going to chip in now. Thanks

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#59
post #23

It's horrifying to watch your own DNS traffic. All sorts of mysterious domains show up. (On a typical macbook on WiFi, this will do it:) sudo tcpdump -i en0 -s 5000 -n port 53 On mine, these get resolved every 30 seconds (probably some Adobe updater): scss-prod-ue1-notif-39.adobesc.com. Several servers get lookups of names long enough to be exfiltrating data: r3---sn-nvopjoxu-25ve.gvt1.com. (Google) gzunified-ecselas…

On the other hand, if even you don't know what the domain corresponds to I suppose that does make it less privacy sensitive.

Re: iTerm2: Please disable 'Perform DNS lookups to check if URLs are valid'

#60
post #23

It's horrifying to watch your own DNS traffic. All sorts of mysterious domains show up. (On a typical macbook on WiFi, this will do it:) sudo tcpdump -i en0 -s 5000 -n port 53 On mine, these get resolved every 30 seconds (probably some Adobe updater): scss-prod-ue1-notif-39.adobesc.com. Several servers get lookups of names long enough to be exfiltrating data: r3---sn-nvopjoxu-25ve.gvt1.com. (Google) gzunified-ecselas…

On the other hand, if even you don't know what the domain corresponds to I suppose that does make it less privacy sensitive.

The primary privacy issue here isn’t the DNS lookup, but the data that was inevitably sent after the resolution.
Post reply on HN