Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday November 21 2017, @12:59PM   Printer-friendly
from the promise-we-won't-peek dept.

The Global Cyber Alliance has given the world a new free Domain Name Service resolver, and advanced it as offering unusually strong security and privacy features.

The Quad9 DNS service, at 9.9.9.9, not only turns URIs into IP addresses, but also checks them against IBM X-Force's threat intelligence database. Those checks protect agains landing on any of the 40 billion evil sites and images X-Force has found to be dangerous.

The Alliance (GCA) was co-founded by the City of London Police, the District Attorney of New York County and the Center for Internet Security and styled itself "an international, cross-sector effort designed to confront, address, and prevent malicious cyber activity."

[...] The organisation promised that records of user lookups would not be put out to pasture in data farms: "Information about the websites consumers visit, where they live and what device they use are often captured by some DNS services and used for marketing or other purposes", it said. Quad9 won't "store, correlate, or otherwise leverage" personal information.

[...] If you're one of the lucky few whose ISP offers IPv6, there's a Quad9 resolver for you at 2620:fe::fe (the PCH public resolver).

https://www.theregister.co.uk/2017/11/20/quad9_secure_private_dns_resolver/

takyon: Do you want to give the City of London Police control of your DNS?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Informative) by edIII on Tuesday November 21 2017, @08:10PM (2 children)

    by edIII (791) on Tuesday November 21 2017, @08:10PM (#599842)

    LOL. No. This is a joke.

    That being said, I wouldn't mind trying this through TOR or something. Not for resolving, but just another DNS I can look up bad actors on and weigh the results. 40 billion evil domains sounds like an incredible amount, and nothing to scoff at. Yet... I know because it is the City of London, that it will be full pants-on-head retarded about fighting piracy and will not resolve private trackers and undesirable sites. It will be a curated and censored list of "good" domains.

    Of course, all that is assuming that they respond with 127.0.0.1 most of the time. They don't, but instead resolve the address for you. That's not how a RBL works either. So how do I tell if it is an evil site, or a good site? A redirect to their servers with a landing page saying, "This is bad, mkay? You don't search for torrents mkay? P2P is evil mkay?"

    Not sure I could even integrate this properly with pfsense, and could only use it as a primary resolver. No thanks.

    --
    Technically, lunchtime is at any moment. It's just a wave function.
    Starting Score:    1  point
    Moderation   +1  
       Informative=1, Total=1
    Extra 'Informative' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3  
  • (Score: 2) by requerdanos on Wednesday November 22 2017, @12:53PM (1 child)

    by requerdanos (5997) Subscriber Badge on Wednesday November 22 2017, @12:53PM (#600148) Journal

    it will be full pants-on-head retarded about fighting piracy and will not resolve private trackers

    Yet, it properly resolves thepiratebay.org.

    • (Score: 2) by edIII on Wednesday November 22 2017, @11:04PM

      by edIII (791) on Wednesday November 22 2017, @11:04PM (#600404)

      Really? That's astounding given the involvement of the UK, and almost makes no sense. If the ISPs are blocking it in general, why would they allow it to resolve? Somewhat encouraging if that means the UK has a small amount of influence over the blacklist.

      --
      Technically, lunchtime is at any moment. It's just a wave function.