Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday November 21 2017, @12:59PM   Printer-friendly
from the promise-we-won't-peek dept.

The Global Cyber Alliance has given the world a new free Domain Name Service resolver, and advanced it as offering unusually strong security and privacy features.

The Quad9 DNS service, at 9.9.9.9, not only turns URIs into IP addresses, but also checks them against IBM X-Force's threat intelligence database. Those checks protect agains landing on any of the 40 billion evil sites and images X-Force has found to be dangerous.

The Alliance (GCA) was co-founded by the City of London Police, the District Attorney of New York County and the Center for Internet Security and styled itself "an international, cross-sector effort designed to confront, address, and prevent malicious cyber activity."

[...] The organisation promised that records of user lookups would not be put out to pasture in data farms: "Information about the websites consumers visit, where they live and what device they use are often captured by some DNS services and used for marketing or other purposes", it said. Quad9 won't "store, correlate, or otherwise leverage" personal information.

[...] If you're one of the lucky few whose ISP offers IPv6, there's a Quad9 resolver for you at 2620:fe::fe (the PCH public resolver).

https://www.theregister.co.uk/2017/11/20/quad9_secure_private_dns_resolver/

takyon: Do you want to give the City of London Police control of your DNS?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by inertnet on Tuesday November 21 2017, @02:22PM (8 children)

    by inertnet (4071) on Tuesday November 21 2017, @02:22PM (#599645) Journal

    It could become a data collecting giant, like Google with its 8.8.8.8 DNS. But it could also gradually start blocking interesting parts of the internet, like VPN services, or TOR. And move on to blocking "fake news". Or any country that's on some axis of evil list.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by meustrus on Tuesday November 21 2017, @03:05PM (6 children)

    by meustrus (4961) on Tuesday November 21 2017, @03:05PM (#599668)

    If it did, customers would complain and/or uninstall. The nightmare scenario you describe requires either that:

    1. The service be mandated via China-style government intervention
    2. The blocks be subtle enough to not be noticed

    #2 is not really possible with a DNS service. How do you delete only the "fake news" without eliminating access to entire web sites we know should exist? And also delete search results pointing to the same? It would really be a neat trick to do content filtering with DNS.

    As for China-style government intervention, you can bet that the right wing will protect big business from the hazards of dealing with such heavy handed regulation right up to the point where it becomes necessary to "protect our freedoms". Unless you're in Australia where apparently heavy handed regulation is not a concern to anybody.

    --
    If there isn't at least one reference or primary source, it's not +1 Informative. Maybe the underused +1 Interesting?
    • (Score: 0) by Anonymous Coward on Tuesday November 21 2017, @05:48PM (5 children)

      by Anonymous Coward on Tuesday November 21 2017, @05:48PM (#599747)

      If it did, customers would complain and/or uninstall.

      Hohohoho... hahahaha... oh wow... good joke.
      The majority of customers is too complacent to even pick up the phone and cut the cord. They can't even be bothered to call their congress critter which literally is nothing more but picking up the phone and dialing a number (which you could add to your contacts so you don't have to look it up).
      But no... the Market works... Voting with your wallet works... The Governement is your friend... and rocks fly unaided...

      Is there another attempt you'd like to make?

      • (Score: 2) by meustrus on Tuesday November 21 2017, @06:47PM (3 children)

        by meustrus (4961) on Tuesday November 21 2017, @06:47PM (#599782)

        You misunderstand. "Complain" means making an angry tweet. We all know how easily people take to the 'tubes to complain.

        As for uninstalling, the ISP would be glad to handle that for you and get their sweet ad money back from your missed DNS lookups. They might not even wait for you to complain.

        You can crank all you want about "what if this were imposed by the government", but it's not. Stop acting like it would take an act of Congress to switch 9.9.9.9 back to 8.8.8.8 or your ISP's default.

        --
        If there isn't at least one reference or primary source, it's not +1 Informative. Maybe the underused +1 Interesting?
        • (Score: 0) by Anonymous Coward on Tuesday November 21 2017, @07:47PM

          by Anonymous Coward on Tuesday November 21 2017, @07:47PM (#599817)

          And that is why, when net neutrality is dead, you will be able to pay for premium access to Twatter. Without your Twatter-enabled subscription, you will still be able to read twats (at 0.5kbps) but you won't be able to twat yourself. Want to twat, please pay MultiMONIE$ so we can 'innovate'.

        • (Score: 0) by Anonymous Coward on Tuesday November 21 2017, @07:51PM (1 child)

          by Anonymous Coward on Tuesday November 21 2017, @07:51PM (#599819)

          Conscious people actually use 8.8.8.8? People actually take active steps to put themselves under surveillance like that? These 'people' you speak of must be morons...

          • (Score: 2) by meustrus on Tuesday November 21 2017, @08:27PM

            by meustrus (4961) on Tuesday November 21 2017, @08:27PM (#599853)

            It's funny that you think you can escape Google's surveillance machine by not using their DNS service. It's even funnier that you think Google's surveillance machine is worse than any ISP's surveillance machine, which is much more likely to feed the NSA directly.

            --
            If there isn't at least one reference or primary source, it's not +1 Informative. Maybe the underused +1 Interesting?
      • (Score: 2) by maxwell demon on Wednesday November 22 2017, @07:24AM

        by maxwell demon (1608) on Wednesday November 22 2017, @07:24AM (#600082) Journal

        The majority of customers is too complacent to even pick up the phone and cut the cord.

        Those customers will continue to use whatever DNS their ISP provides, therefore what this new DNS does is completely irrelevant unless some ISPs start using it as their default DNS server (which I consider unlikely, as that would mean them giving up control). If you are using that alternate DNS server, you are the type of person who actively decides what DNS server you use, and are willing to actually change your computers configuration. And that demogrpahic is exactly the one that will not put up with such measures. No, they probably won't pick up the phone. Instead they will just once again change the DNS settings of their computer or router, to use whatever DNS they then consider the best replacement.

        --
        The Tao of math: The numbers you can count are not the real numbers.
  • (Score: 2) by c0lo on Tuesday November 21 2017, @04:27PM

    by c0lo (156) Subscriber Badge on Tuesday November 21 2017, @04:27PM (#599708) Journal

    But it could also gradually start blocking interesting parts of the internet, like... TOR

    I don't see how a DNS can block TOR, given that TOR doesn't use DNS. [stackexchange.com] (but DHT to resolve the services and a rendez-vous to establish the circuit)

    --
    https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford