News for hackers. Stuff that matters.
Re:Mozilla VPN by offmycloud on Thursday June 18, 2020 @02:47PM (#23566273)
Maybe, but most ISPs are lazy/cheap and can't do a full-take packet capture of all customers data at the same time. The ones that I have seen usually have a custom or logging DNS server that associates each domain request with a customer account. So yes, in many cases, changing your DNS server is enough to avoid the larger DNS sniffing operations. You should also use an IP check query to make sure that you are really using the DNS server you think, and that you're not being DNATed back to your ISP's DNS server.
Re:Mozilla VPN by Skunkleton on Thursday June 18, 2020 @02:54PM (#23566342)
DNS is super trivial to redirect. I've been on ISPs that redirect _all_ DNS traffic to their servers regardless of where it was sent. The best solution here is to switch to DoH. Of course then your DoH provider gets to log all of that sweet info instead.
Re:Mozilla VPN by Spivak on Thursday June 18, 2020 @03:35PM (#23566906)
Not if you run your own DoH endpoint on a VPS!
Re:Mozilla VPN by Skunkleton on Thursday June 18, 2020 @04:49PM (#23567847)
I have my own unbound running on a VPS. My network intercepts all port 53 traffic, filters out ad servers, and then forwards over wireguard to my VPS. I should probably enable DoH as well. I'm feeling kind of lazy about it though.
Re:Mozilla VPN by n1try on Friday June 19, 2020 @03:36AM (#23572010)
I think ceasing to use your ISP provider's unencrypted DNS services will already bring quite some boost in privacy for the average internet user. That's why I recently switched to using DNSCrypt (https://github.com/DNSCrypt/dnscrypt-proxy) with one of the public providers listed here: https://dnscrypt.info/public-servers (pick one run by some university or internet activism organization).
Re:Mozilla VPN by Skunkleton on Friday June 19, 2020 @03:01PM (#23577792)
It also brings an increase in recaptcha puzzles lol