Thai Database Leaks 8.3B Internet Records

Re:Thai Database Leaks 8.3B Internet Records by sirn on Monday May 25, 2020 @04:28AM (#23299179)

> Unless this feature starts being turned on by default in routers and popular software

Firefox has DoH turned on by default for US-based users. Unfortunately being US-only, it won't protect Thai users just yet. Especially considering the fact that Thai ISPs have known to be hijacking port 53 and NXDOMAIN since forever[1] with ISP in the article being one of the biggest offender.

It might also worth nothing that PDPA, Thailand's equivalent of GDPR, is to become in effective in two days (May 27th) so this incident will be... interesting.

[1]: Starting in early 2000s, with NIPA (that I never see anybody uses), who aim to provide IDN-enabled Thai domain names by providing NXDOMAIN-hijacking services to ISP

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by blitmap on Monday May 25, 2020 @04:44AM (#23299255)

I recently set up a dns-over-https (doh) proxy on my router to forward dns requests to 5 resolvers, that also use dnssec.

I wish Firefox would expose the option from about:config in its user-friendly Preferences page so it will respect the "system default" (the advertised dns server).

I am - for no legitimate reasons - avoiding Cloudflare as a resolver. As far as I know Firefox uses Cloudflare.

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by encom on Monday May 25, 2020 @04:58AM (#23299331)

Have you been able to find a trustworthy public DoT resolver?

I really want to use uncensoreddns.org, but availability has been a little flaky in the past. I'm not sure about Quad9. Google and CloudFlare are obviously out of the question. What else is there?

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by nix23 on Monday May 25, 2020 @06:43AM (#23299806)

Yes, well i trust this one:

DoT: dns.digitale-gesellschaft.ch

DoH: dns.digitale-gesellschaft.ch/dns-query

Source:

https://de.wikipedia.org/wiki/DNS_over_HTTPS

https://de.wikipedia.org/wiki/DNS_over_TLS

https://www.digitale-gesellschaft.ch/dns/

Sorry, for not being available in the en-wiki

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by encom on Monday May 25, 2020 @07:09AM (#23299918)

Hadn't seem them before, very interesting. Vielen dank.

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by nix23 on Monday May 25, 2020 @01:10PM (#23302860)

Just a year old and located in Zurich,

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by cbg0 on Monday May 25, 2020 @05:17AM (#23299429)

> Have you been able to find a trustworthy public DoT resolver?

It really depends what you view as being "trustworthy". Outside of the US good enough? Or do you want non 5/9/14-Eyes? (https://en.wikipedia.org/wiki/UKUSA_Agreement#9_Eyes,_14_Eye...)

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by encom on Monday May 25, 2020 @06:24AM (#23299732)

Let's start with "not Google-levels of creepy" and work up from there. I want someone who's not harvesting data, or engaging in censorship.

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by fidelramos on Monday May 25, 2020 @06:37AM (#23299782)

Check out this list in privacytools.io: https://www.privacytools.io/providers/dns/

[ Parent | on HN ]

Re:Thai Database Leaks 8.3B Internet Records by whoopdedo on Monday May 25, 2020 @11:00AM (#23301763)

OpenNIC has a few servers supporting either DoH or DoT or both.

[ Parent | on HN ]