Discussion
Loading...

Post

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Stéphane Bortzmeyer
@bortzmeyer@mastodon.gougere.fr  ·  activity timestamp 3 months ago
@jpmens Number ten is cmidphnvq.com.

#WTF

  • Copy link
  • Flag this post
  • Block
JP Mens
@jpmens@mastodon.social replied  ·  activity timestamp 3 months ago
@bortzmeyer I was just looking, yes, and

{"position": 17, "domain_name": "example.com", "date": "2025-07-11"}

And the list is unbelievable: no porn!

  • Copy link
  • Flag this comment
  • Block
Stéphane Bortzmeyer
@bortzmeyer@mastodon.gougere.fr replied  ·  activity timestamp 3 months ago

@jpmens Number 63 is dns.google. people use Quad9 to ask for the IP address of Google Public DNS.

#WTF++

  • Copy link
  • Flag this comment
  • Block
RootWyrm 🇺🇦:progress:
@rootwyrm@weird.autos replied  ·  activity timestamp 3 months ago
@bortzmeyer @jpmens this one is easy to explain:
browsers, malware, and spyware bypassing system preferences with DoH, in order to serve up ads, intrusively track, and surveil users without knowledge or consent.

DoH is harmful to the Internet and harmful to society.

  • Copy link
  • Flag this comment
  • Block
Stéphane Bortzmeyer
@bortzmeyer@mastodon.gougere.fr replied  ·  activity timestamp 3 months ago
@rootwyrm @jpmens This is of course absurd.

1) DoT has almost the same properties (but people keep FUDing about DoH only)

2) malware can implement its own name resolution system, whether or not DoH exists.

3) As long as there are networks which block port 53 and force going through their resolver, we'll need DoT and DoH.

  • Copy link
  • Flag this comment
  • Block
RootWyrm 🇺🇦:progress:
@rootwyrm@weird.autos replied  ·  activity timestamp 3 months ago
@bortzmeyer @jpmens
1) Oh, DoT is it's whole own OTHER topic. With lots of 'srsly?!' But >95% of users don't know what a DNS server *is*. But they know DoH from Mozilla and NaziFlare marketing.

2) So your stance is that a piece of software which bypasses user *and* administrator control in order to surveil or upload data is not malicious?
Example: Firefox defaults!

3) If you have the capability to block 53 and 853, you can just as easily block DoH. DoH is ineffective for fascist bypass.

  • Copy link
  • Flag this comment
  • Block
mx alex tax1a - 2020 (5)
@atax1a@infosec.exchange replied  ·  activity timestamp 3 months ago
@bortzmeyer @rootwyrm counterpoint: if we block outbound 53 and force our resolver, you have no business bypassing that
  • Copy link
  • Flag this comment
  • Block
Winfried Angele 🇺🇦🇪🇺
@winfried@fosstodon.org replied  ·  activity timestamp 3 months ago
@bortzmeyer @jpmens maybe Android's "private DNS" feature
  • Copy link
  • Flag this comment
  • Block
Nico
@nicoduck@chaos.social replied  ·  activity timestamp 3 months ago
@bortzmeyer @jpmens probably not people but devices. Wasn't the Chromecast somehow hardcoded to Google DNS? Maybe that's also querying that to fire out if the domain is hijacked or not
  • Copy link
  • Flag this comment
  • Block
JP Mens
@jpmens@mastodon.social replied  ·  activity timestamp 3 months ago
@bortzmeyer I'm a bit surprised Quad9 doesn't return 9.9.9.9 for a query to dns[.]google[.]com

#missedOpportunities

  • Copy link
  • Flag this comment
  • Block
Stéphane Bortzmeyer
@bortzmeyer@mastodon.gougere.fr replied  ·  activity timestamp 3 months ago
@jpmens The first .fr is on3cx.fr, number 163.

@afnic

  • Copy link
  • Flag this comment
  • Block
Martin :debian: :freebsd:
@oz1tmm@techhub.social replied  ·  activity timestamp 3 months ago
@bortzmeyer @jpmens @afnic

If that domain is in the context of hamradio, which I believe it is, then ON is Belgium :)

  • Copy link
  • Flag this comment
  • Block
Stéphane Bortzmeyer
@bortzmeyer@mastodon.gougere.fr replied  ·  activity timestamp 3 months ago
@jpmens May be number 36, gadf99632rm.xyz, is porn?

#NSFW

  • Copy link
  • Flag this comment
  • Block
Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.0-rc.3.1 no JS en
Automatic federation enabled
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login