News for hackers. Stuff that matters.
Re:Google DNS servers suffer brief traffic hijack by josteink on Monday March 17, 2014 @09:59AM (#7415000)
Why anyone would use a DNS server hosted by an ad & tracking-company on another continent instead of just using the one provided to you by your ISP one hop away is beyond me.

In what bizarro world is that supposed to improve performance, security or anything?

Re:Google DNS servers suffer brief traffic hijack by acdha on Monday March 17, 2014 @10:34AM (#7415196)
See https://developers.google.com/speed/public-dns/ and in particular https://developers.google.com/speed/public-dns/docs/performa... and https://developers.google.com/speed/public-dns/faq#nxdomains.

You might have an ISP where they have professional DNS admins, significant failover and a massive deployment of local DNS caches in each neighborhood. Unfortunately, many people have ISPs where they have two servers for an entire timezone maintained by the owner's brother-in-law and, to the extent that they think of DNS at all, it's only for questions like β€œCan we sell advertising on NXDOMAIN replies?”

Re:Google DNS servers suffer brief traffic hijack by josteink on Monday March 17, 2014 @10:39AM (#7415230)
So basically, if we assume that everyone in the world except Google knows how to run a DNS-server, using their DNS-servers makes sense. I agree.

But that's an absurd assumption, and I seriously disagree with it. And coming from a part of the world where we actually have ISPs compete (I know!), I find the premises plain laughable.

I'm not saying there aren't ever a reason to use their DNS server, but I fail to see why people would chose to recommend theirs as a general rule (as I've seen lots of places, reddits, etc) and how Google with a straight face think they can claim it will make things "faster", or even worse, more "secure".

Simply said: I call bullshit.

Re:Google DNS servers suffer brief traffic hijack by thrownaway2424 on Monday March 17, 2014 @11:41AM (#7415715)
You're an idiot, but here goes. If you are in the West, 8.8.8.8 is not hosted thousands of kilometers away, it's hosted at your ISP like most other google services. If you had looked into it, which clearly you have not (because as we know, you are an idiot) you would find that 8.8.8.8 is faster, more reliable, and more accurate than most people's ISP DNS servers. ISPs and captive portals like hotels and coffee shops like to hijack NXDOMAIN to serve ads, which 8.8.8.8 never does.

If you are in China or Africa or India or Russia, 8.8.8.8 might not be faster but it's also not hosted by your local totalitarian junta.

Re:Google DNS servers suffer brief traffic hijack by serf on Monday March 17, 2014 @11:03AM (#7415394)
I use it because every ISP i've used in North America hijacks shit and feeds it through their own search portal, driving me nuts in the process.

I'd rather it get hijacked into a potentially useful Google query plus 8.8.8.8 is extremely easy to remember.

Re:Google DNS servers suffer brief traffic hijack by josteink on Monday March 17, 2014 @11:44AM (#7415751)
I use it because every ISP i've used in North America hijacks shit and feeds it through their own search portal, driving me nuts in the process.

So basically the issue Google is trying to solve, is that in the US where the telecom market is completely failed, there aren't any ISPs which has DNS servers complying to the actual DNS spec or RFC 1035?

Why don't everyone just jump out and say so then? Why does Google and you guys here talk about everything else instead of that? That's by no means an obvious thing to someone coming from the outside.

Does everyone here actually assume that all ISP's on the planet fail to deliver proper DNS with their internet services? What sort of insane assumption is that?

Threads like this is a nice reminder to myself (and maybe others, hint hint) that the cultural gap on the internet is always bigger than you think, even in "small" circles like this.

And everyone: Thanks for the highly enlightening downvotes for asking a IMO very valid question. It's appreciated, informative and certainly constructive.

Re:Google DNS servers suffer brief traffic hijack by acdha on Monday March 17, 2014 @12:24PM (#7416035)
> So basically the issue Google is trying to solve, is that in the US where the telecom market is completely failed, there aren't any ISPs which has DNS servers complying to the actual DNS spec or RFC 1035?

I've personally experienced dodgy DNS in US, Europe, and Asia. It's not a regional issue so much as a question of market failures: you don't buy a home router based on the quality of its DNS implementation and businesses which offer WiFi certainly don't, and many ISPs figure that NXDOMAIN hijaacking will cost them only a vanishingly small percentage of customers, if any, and see it as a net win.

If any of those apply to you, you have the choice of either going through a frustrating, likely futile, attempt to get the network fixed or you add 8.8.8.8 / 8.8.4.4 to your DNS server list and never think about it again.

> And everyone: Thanks for the highly enlightening downvotes for asking a IMO very valid question. It's appreciated, informative and certainly constructive.

If you don't want to be down-voted, be less confrontational in your replies and do your homework first. You might start by assuming that the people with considerably more experience have good reasons for going to the trouble of deploying a non-default option. A trivial search would show thousands of complaints suggesting that your view of the world is too narrow.

Re:Google DNS servers suffer brief traffic hijack by icebraining on Monday March 17, 2014 @11:53AM (#7415816)
Does everyone here actually assume that all ISP's on the planet fail to deliver proper DNS with their internet services?

No, it's you who were (wrongly) assuming the opposite. In an extremely rude way, if I might add.

Re:Google DNS servers suffer brief traffic hijack by tracker1 on Monday March 17, 2014 @12:00PM (#7415873)
Not every ISP, but a number of large ones do. I'd be surprised of less than half of home ISP's DNS services don't hijack empty results.
Re:Google DNS servers suffer brief traffic hijack by skyebook on Monday March 17, 2014 @11:38AM (#7415700)
And, at this point at least, it isn't getting hijacked. You just end up on a page that says there's nothing to see.
Re:Google DNS servers suffer brief traffic hijack by pbhjpbhj on Monday March 17, 2014 @11:57AM (#7415847)
I used a nameserver tester to compare my ISP's servers with Google and OpenDNS's. OpenDNS came out on top for me at that time and I was interested in their filtering ability too so I went with that.

IIRC it was https://code.google.com/p/namebench/ that I used for the speed comparison. Just using it now I see it does a comparison with the popular global DNS providers as well as optionally local providers - it also can test for censorship.

There are many DNS benchmarking tools; https://www.grc.com/dns/benchmark.htm looks quite good.

Re:Google DNS servers suffer brief traffic hijack by majke on Monday March 17, 2014 @10:05AM (#7415026)
> Why would anyone use a mail service hosted by an ad & tracking company?

How about: because it's better?

Re:Google DNS servers suffer brief traffic hijack by josteink on Monday March 17, 2014 @10:11AM (#7415066)
Merely saying something "better" is hardly a well formed argument, now is it?

If it is indeed better, which would be counter-intuitive, you should probably not have any problem digging up evidence that it is so? And by evidence, I mean metrics, measurements and stuff like that. You know, scientific standard and all.

If I have DNS server 10ms away, you can bet your ass (and house) I can expect a smaller latency than from one hosted 6000 kilometres away across an Atlantic ocean and then some.

And for me lower latency means faster, and faster means better. And being on the same network as me, I can expect much higher reliability than something halfway across the internet, no matter who hosts it. To me higher reliability is also better.

What definition are you using, and where is your data to prove it?

Unless your ISP's DNS server is a 486 collecting dust next to the janitors toilet, chances are you better served with that than doing continental-hopping network-traffic for every domain you need resolved.

Re:Google DNS servers suffer brief traffic hijack by icebraining on Monday March 17, 2014 @10:38AM (#7415223)
If I have DNS server 10ms away, you can bet your ass (and house) I can expect a smaller latency than from one hosted 6000 kilometres away across an Atlantic ocean and then some.

You should look into "anycast". The Google DNS servers are located all across the globe. For example, I get 60ms from Portugal (just +30ms than I get to my ISP's server). And Google's servers, due to higher use, are much more likely to have the records in cache, reducing the overall latency when compared to a server than needs to issue a recursive query for every less commonly used domains.

Re:Google DNS servers suffer brief traffic hijack by JoshTriplett on Monday March 17, 2014 @11:02AM (#7415391)
> If I have DNS server 10ms away

Ah, if only my ISP's DNS server were 10ms away, and reliably up, and not serving ads instead of NXDOMAIN results.

Not that I'm deeply trusting of 8.8.8.8, but it definitely wins on each of those points. (I use a different "public" server.)

Re:Google DNS servers suffer brief traffic hijack by tracker1 on Monday March 17, 2014 @11:57AM (#7415846)
Agreed, I used to use the common level3 dns servers which had lower ping times than google's for me, until the change to show advert results. My ISPs has gone down on more than one occasion and I simply don't trust them as much.

Google's currently don't return false results, return fast results, and have a sane caching system. Recently when a site's DNS went down for a day, google continued serving the results, although expired. Most other providers cleared the cache first, and were serving no result.

I've setup my own caching DNS before, it's really not hard... Most home routers will do this today. And my ISPs server isn't 10ms away, but my router is.

Re:Google DNS servers suffer brief traffic hijack by rowyourboat on Monday March 17, 2014 @10:24AM (#7415142)
Apparently I'm living in your bizarro world, because Google's DNS servers consistently outperform my home ISP's by a factor 2 or 3, spiking to 10, in terms of measured response time.

So yes, my ISP sucks.

Re:Google DNS servers suffer brief traffic hijack by nyrina on Monday March 17, 2014 @10:19AM (#7415117)
Because my ISP (TDC) has been ordered by the Danish court to DNS block certain websites, such as the pirate bay.
Re:Google DNS servers suffer brief traffic hijack by ithkuil on Monday March 17, 2014 @01:44PM (#7416661)
I don't think it's served from another continent. It's an anycast address and I guess it's served from many replicas with global coverage.
Re:Google DNS servers suffer brief traffic hijack by eli on Monday March 17, 2014 @10:25AM (#7415157)
Unless they're lying about what they collect (https://developers.google.com/speed/public-dns/privacy) I'm pretty comfortable with those terms. I would not be at all surprised if my ISP's DNS server is tracking me far more cloesly.
Re:Google DNS servers suffer brief traffic hijack by bluedino on Monday March 17, 2014 @10:58AM (#7415365)
I've found many ISP's to have terrible DNS servers. They update slowly, they might hijack requests, etc.
Re:Google DNS servers suffer brief traffic hijack by VMG on Monday March 17, 2014 @10:11AM (#7415059)
because I've had worse experiences with my ISPs
Re:Google DNS servers suffer brief traffic hijack by josteink on Monday March 17, 2014 @10:15AM (#7415091)
One guy having issues with one ISP hardly makes a universal argument though.
Re:Google DNS servers suffer brief traffic hijack by VMG on Monday March 17, 2014 @10:17AM (#7415099)
I'm not making a universal argument, I'm answering your question
Re:Google DNS servers suffer brief traffic hijack by danpoage on Monday March 17, 2014 @02:26PM (#7416986)
People have explained, multiple times, why Google's DNS is better than their local ISP's (it is for me as well). Why do you continue to be antagonistic in your responses? A considerate person would acknowledge that they were misinformed (or failed to do a simple google search before trolling), instead you seem to have doubled-down on being obnoxious. Why?