Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Steve Litt
On Sun, 9 Sep 2018 19:41:39 -0700 Rick Moen wrote: > Quoting Steve Litt (sl...@troubleshooters.com): > > > Some folks don't have what it takes to install their own caching DNS > > server, even one as simple as Unbound, and therefore I think they're > > better off with a known-decent public DNS

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Alessandro Selli
On 09/09/2018 at 16:19, Steve Litt wrote: > Hi Taiidan, > > I wouldn't use Firefox if it were the last browser on earth. If you > take Firefox out of the equation, are the Cloudflare public DNS servers > any less secure or more problematic than the Google ones or the > Hurricane electric ones,

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): > Some folks don't have what it takes to install their own caching DNS > server, even one as simple as Unbound, and therefore I think they're > better off with a known-decent public DNS than the DNS DHCP-recommended > by whatever hotspot they happen

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Steve Litt
On Sun, 9 Sep 2018 19:31:28 -0400 Steve Litt wrote: > Keeping cache between uses takes some doing with Unbound, but I > think a second daemon could archive its cache once every couple > minutes, and Unbound's run script could be tweaked to wait 10 seconds > after start and then load the

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Steve Litt
On Sun, 9 Sep 2018 13:24:41 -0700 Rick Moen wrote: > Quoting Steve Litt (sl...@troubleshooters.com): > > > Hi Taiidan, > > > > I wouldn't use Firefox if it were the last browser on earth. If you > > take Firefox out of the equation, are the Cloudflare public DNS > > servers any less secure or

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): > Hi Taiidan, > > I wouldn't use Firefox if it were the last browser on earth. If you > take Firefox out of the equation, are the Cloudflare public DNS servers > any less secure or more problematic than the Google ones or the > Hurricane electric

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Arnt Karlsen
On Sun, 9 Sep 2018 10:19:04 -0400, Steve wrote in message <20180909101904.15e47...@mydesk.domain.cxm>: > Hi Taiidan, > > I wouldn't use Firefox if it were the last browser on earth. If you > take Firefox out of the equation, are the Cloudflare public DNS > servers any less secure or more

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-09-09 Thread Steve Litt
Hi Taiidan, I wouldn't use Firefox if it were the last browser on earth. If you take Firefox out of the equation, are the Cloudflare public DNS servers any less secure or more problematic than the Google ones or the Hurricane electric ones, etc?

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-10 Thread Rick Moen
Quoting Simon Hobson (li...@thehobsons.co.uk): > From the POV of global DNS server load, network traffic, and > resolution times - it's better to run one recursive resolver on your > internal network and let your other boxes use that. Luckily, what Steve defaults to easily adapts to a 'local

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-10 Thread Steve Litt
On Fri, 10 Aug 2018 12:08:48 +0100 Simon Hobson wrote: > Steve Litt wrote: > > > I've now done this on my Daily Driver Desktop and my best laptop. In > > both cases, easy. Much easier than djbdns. I'll be doing this on > > all my boxes over the next few weeks. It's too easy not to. > > From

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-10 Thread Simon Hobson
Steve Litt wrote: > I've now done this on my Daily Driver Desktop and my best laptop. In > both cases, easy. Much easier than djbdns. I'll be doing this on all my > boxes over the next few weeks. It's too easy not to. From the POV of global DNS server load, network traffic, and resolution times

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-10 Thread Rick Moen
I wrote: > Quoting Steve Litt (sl...@troubleshooters.com): > > [tips about dhclient and resolv.conf:] > > > Thanks for the good info. > > Delighted to help. > > There's also an interesting thing called 'resolvconf' -- actually, a > couple of separate implementations of the idea. It's a piece

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Rick Moen
Quoting Steve Litt (sl...@troubleshooters.com): [tips about dhclient and resolv.conf:] > Thanks for the good info. Delighted to help. There's also an interesting thing called 'resolvconf' -- actually, a couple of separate implementations of the idea. It's a piece of software that actively

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Steve Litt
On Tue, 7 Aug 2018 13:27:25 -0700 Rick Moen wrote: > 1. apt-get install unbound > 2. sed -i '1s;^;nameserver 127.0.0.1\n;' /etc/resolv.conf I've now done this on my Daily Driver Desktop and my best laptop. In both cases, easy. Much easier than djbdns. I'll be doing this on all my boxes over

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Rick Moen
Quoting Alessandro Selli (alessandrose...@linux.com): > Isn't it amazing how strongly is *everyone* running a global business > so much interested, to the point of being obsessed, in gathering as much > user activity data as possible no matter what was the purpose of the > user in performing some

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Enrico Weigelt, metux IT consult
On 09.08.2018 15:08, Alessandro Selli wrote: > Indeed the only safe way is running one's own > infrastructure.  Too bad the major FOSS web browser is following this > business trend, but after all we know Mozilla is a Corporation, not a > charity. I dont expect anything else from them anymore

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Alessandro Selli
On 08/08/2018 at 17:32, KatolaZ wrote: > On Wed, Aug 08, 2018 at 01:30:30PM +0200, Antony Stone wrote: >> On Tuesday 07 August 2018 at 22:27:25, Rick Moen wrote: >> >>> Quoting taii...@gmx.com (taii...@gmx.com): Cloudflare is such an incredibly obvious intelligence agency ploy to gather

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-09 Thread Alessandro Selli
On 08/08/2018 at 08:08, J. Fahrner wrote: > Am 2018-08-08 02:42, schrieb Steve Litt: >> == >> #!/bin/sh >> exec 2>&1 >> exec unbound -p -dd >> == > > Can you explain this strange construct? An exec without a command but > with

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Martin Steigerwald
Arnt Karlsen - 08.08.18, 16:20: > On Wed, 8 Aug 2018 13:34:30 +0200, John wrote in message > > <7a5d6797-0388-c06a-b5ab-196d4b324...@safeandsoundit.co.uk>: > > On 07/08/18 13:51, taii...@gmx.com wrote: > > > Yet another great choice by mozilla > > > > And so it goes on... > > > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Martin Steigerwald
Arnt Karlsen - 08.08.18, 16:20: > On Wed, 8 Aug 2018 13:34:30 +0200, John wrote in message > > <7a5d6797-0388-c06a-b5ab-196d4b324...@safeandsoundit.co.uk>: > > On 07/08/18 13:51, taii...@gmx.com wrote: > > > Yet another great choice by mozilla > > > > And so it goes on... > > > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread KatolaZ
On Wed, Aug 08, 2018 at 01:30:30PM +0200, Antony Stone wrote: > On Tuesday 07 August 2018 at 22:27:25, Rick Moen wrote: > > > Quoting taii...@gmx.com (taii...@gmx.com): > > > Cloudflare is such an incredibly obvious intelligence agency ploy to > > > gather data but no one talks about this. > > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Arnt Karlsen
On Wed, 8 Aug 2018 13:34:30 +0200, John wrote in message <7a5d6797-0388-c06a-b5ab-196d4b324...@safeandsoundit.co.uk>: > On 07/08/18 13:51, taii...@gmx.com wrote: > > Yet another great choice by mozilla > > > > And so it goes on... > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread John Crisp
On 07/08/18 13:51, taii...@gmx.com wrote: > Yet another great choice by mozilla > And so it goes on... https://www.reddit.com/r/linux/comments/95jc1p/new_firefox_experiment_recommends_articles_based/ signature.asc Description: OpenPGP digital signature

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Antony Stone
On Tuesday 07 August 2018 at 22:27:25, Rick Moen wrote: > Quoting taii...@gmx.com (taii...@gmx.com): > > Cloudflare is such an incredibly obvious intelligence agency ploy to > > gather data but no one talks about this. > > > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Stefan Krusche
Am Mittwoch 08 August 2018 schrieb Stefan Krusche: > "exec 2>%1" s/%/&/ ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread Stefan Krusche
Am Mittwoch 08 August 2018 schrieb J. Fahrner: > Am 2018-08-08 02:42, schrieb Steve Litt: > > == > > #!/bin/sh > > exec 2>&1 > > exec unbound -p -dd > > == > > Can you explain this strange construct? An exec without a command

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-08 Thread J. Fahrner
Am 2018-08-08 02:42, schrieb Steve Litt: == #!/bin/sh exec 2>&1 exec unbound -p -dd == Can you explain this strange construct? An exec without a command but with i/o redirection? Normally a script ends at the first exec.

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread Steve Litt
On Tue, 7 Aug 2018 13:27:25 -0700 Rick Moen wrote: > 1. apt-get install unbound > 2. sed -i '1s;^;nameserver 127.0.0.1\n;' /etc/resolv.conf > 3. chattr +i /etc/resolv.conf > > Just kidding about step #3. If using dhclient, place into dhcpd.conf: > option domain-name-servers 127.0.0.1 A few

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread Rick Moen
Quoting KatolaZ (kato...@freaknet.org): > Unfortunately, running your local DNS does not help solving the > problem, in this specific case, since Firefox would use an external > service (which runs over HTTPS) to do name resolving, bypassing the > system resolver altogether. Certainly, you

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread KatolaZ
On Tue, Aug 07, 2018 at 01:27:25PM -0700, Rick Moen wrote: > Quoting taii...@gmx.com (taii...@gmx.com): > > > Cloudflare is such an incredibly obvious intelligence agency ploy to > > gather data but no one talks about this. > > > >

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread Rick Moen
Quoting taii...@gmx.com (taii...@gmx.com): > Cloudflare is such an incredibly obvious intelligence agency ploy to > gather data but no one talks about this. > > https://yro.slashdot.org/story/18/08/05/2353249/security-researchers-express-concerns-over-mozillas-new-dns-resolution-for-firefox

Re: [DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread m712
FUD. Mozilla says that this is only to see whether TRR causes any performance or stability issues. They don't plan to turn this on with Cloudflare in the release. On August 7, 2018 2:51:40 PM GMT+03:00, "taii...@gmx.com" wrote: >Yet another great choice by mozilla > >Cloudflare is such an

[DNG] Mozilla and cloudflare to hijack all your DNS requests - for your own good of course

2018-08-07 Thread taii...@gmx.com
Yet another great choice by mozilla Cloudflare is such an incredibly obvious intelligence agency ploy to gather data but no one talks about this. https://yro.slashdot.org/story/18/08/05/2353249/security-researchers-express-concerns-over-mozillas-new-dns-resolution-for-firefox Article included