Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Eric, I am very sorry to see this happen to you. Unfortunately more and more companies are using our data for marketing purposes.

All is not lost though.

There are several ways you can protect yourself from these practices. The first thing I would do is get a router capable of using dnscrypt-proxy (http://www.opendns.com/technol.... Then you can be confident that your DNS traffic is not being modified by your ISP. It does require that you have trust in a 3rd party DNS provider like OpenDNS, but at the end of the day you have to trust someone to provide DNS lookups.

The second option is to setup DNSSEC so that you can verify where your DNS responses are coming from. While people will still be able to intercept what sites you're looking up, at least you know you're getting valid responses which is better than your situation is currently.

Third is to use both. =)

Anyhow, really awesome to see people standing against these practices. It takes users complaining to make change. The sad truth of the matter.



> It does require that you have trust in a 3rd party DNS provider like OpenDNS ...

The same OpenDNS that hijacks NXDOMAIN responses?


I only said OpenDNS was one of the options. There are many DNSCrypt enabled servers not run by OpenDNS. Seems anytime someone event mentions OpenDNS the same arguments get brought back up. If you don't like OpenDNS, then use DNSCrypt with another server. Simple solution.


Only for the unregistered accounts IIRC. Can't you disable it after going thought the simple registration and claiming of IP address?


So only if you help them associate all of your internet traffic with a registration. Hm, sounds privacy-conscious.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: