There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

sunzu ,

Aint all of peasant level ISPs bootstrapping unencrypted DNS requests?

Get you a fucking VPN and a good router, flash openwrt and put vpn on the router. Deny these parasites the data.

or at leas get a good VPN for your main PC and cellphone. they monitor your traffic, they sell it. you know this, act on it.

cmnybo ,

All you need to do is enable DoH or DoT to prevent the DNS hijacking and spying.

eager_eagle ,
@eager_eagle@lemmy.world avatar

a vpn is still better

Bookmeat ,

With DoH, the first request to find the https DNS resolver itself is unencrypted rendering it subject to hijacking.

Correct me if I’m wrong, but that’s how I understand it.

umami_wasbi ,

They can hijack the DNS answer to the DoH server, which have to happen if the system doesn’t know where to look for, and create a DoS. However, that’s how far they can go AFAIK. They can’t pretend they are the real server, nor downgrade the connection. And, it can be sidesteped by using a direct IP connection.

We use DNS just because lemmy.ml is easier to remember than 54.36.178.108 or 2001:41d0:303:486c::1. DoH can still works by direct IP connection.

Spotlight7573 ,

Don’t most DoH resolversl settings have you enter the IP (for the actual lookup connection) along with the hostname of the DoH server (for cert validation for HTTPS)? Wouldn’t this avoid the first lookup problem because there would be a certificate mismatch if they tried to intercept it?

fmstrat ,

This is in Malaysia only, title doesn’t indicate that.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •