News for hackers. Stuff that matters.

A comment on Every device with FB app is now DDoSing recursive DNS resolvers. Parent comment

Re:Every device with FB app is now DDoSing recursive DNS res... by tgsovlerkhgsel on Monday October 04, 2021 @11:31PM (#28755213)
> no hope of altering classical DNS

Does DNS support extensibility?

If so, an option could be responding with a fake answer like 0.0.0.0 + some TTL, plus an extension that tells modern clients "hey, this is actually a SERVFAIL but please cache it for the TTL".

[ Parent | on HN ]
Re:Every device with FB app is now DDoSing recursive DNS res... by KaiserPro on Tuesday October 05, 2021 @05:02AM (#28756948)
DNS is distributed. thats the problem, you can return nonsense but it might be ignored by the legion of other DNS services that are caching your responses.

because of this there are lots of settings in most servers to ignore and sanitise shitty responses.

[ Parent | on HN ]