nextdns

Yes, this breach is awful because of its massive scale, its inherent irreversibility and the uniqueness of the data (phone numbers).

We try to shine a light on the implications of this on the website itself (you may need to scroll down a bit).

Short term, just being aware of it should make things better, as there is going to be a massive surge in phishing and other types of attacks.

Unlike other similar (and often suspicious) websites:

- you do not enter your phone number (or email). You just search yourself (or your close ones) by name, the same way you would Google or Facebook yourself or your friends.

- even if that shouldn't be the only trust signal, we (the folks at NextDNS) work around security and privacy every day for the benefits of the users. And while we are still a startup, we are used by many, including experts in the security industry.

Following the release of the 533 million phone numbers (acquired through the 2019 Facebook vulnerability), we wanted to bring awareness to the security & privacy implications of a public worldwide mobile phonebook.

You can check yourself, your family, friends and colleagues and inform them.

Disclaimer: we do not display (or even store) the phone numbers, we only show the last 2 digits so you can confirm it's yours.

Happy to answer related security and privacy questions.

---

A few Persons of Interest:

Mark Zuckerberg https://facebookbreach.com/4

Didier Reynders (EU Privacy Chief) https://facebookbreach.com/100011885742964

Emmanuel Macron (President of France) https://facebookbreach.com/100026099615243

Xavier Bettel (Prime Minister of Luxembourg) https://facebookbreach.com/901110787

We made an online generator for (signed) Apple Configuration Profiles that let you use the new system Encrypted DNS feature of iOS 14/iPadOS 14/tvOS 14 and macOS Big Sur, without the need for an app.

The Configuration ID field is entirely optional and if left blank, you will be using our no-logs non-blocking DNS resolver (the one included in Firefox and soon Google Chrome). For reference, here is a map of our anycast network: https://i.imgur.com/doL6nkr.png

Feedback welcome!

Note: Having a NextDNS account is entirely optional. You can install this beta if you just want to try the new Encrypted DNS feature.

It's a "fake" VPN, it only captures the DNS traffic (that's just the cleanest/most efficient way to do it).

I meant this:

https://i.imgur.com/tZh6p0x.png

As far as we know, it's slowly being rolled out and not behind any flag (unfortunately).

Google Chrome (and some Chromium forks) will also be supporting custom DNS-over-HTTPS providers very soon (it's already being rolled out to some users).

Looks like a case of bad anycast routing, as we have a PoP in Toronto! It happens and is usually easily fixable, can you talk to us via the chat on our website (or at [email protected])?

A map of our network for anyone interested:

https://i.imgur.com/2uenEAZ.png

- Encrypted DNS (DNS-over-HTTPS)

- Ideal routing (low DNS latency)

- Bypass DNS-level censorship (inside a country, from your hotel Internet provider, your school, etc.)

- Being able to identify your device in the logs (if you choose to)

- Hardened Privacy Mode (if you are into that)

Edit: this goes for all our apps (iOS/Android/macOS/Windows/Router client), not just macOS.

This is a v1 of our analyzer, but it's already doing a lot of things to mimic a real user (like using a real browser, moving the mouse, scrolling, etc.).

Yes, for Adobe Experience Cloud, see: https://docs.adobe.com/content/help/en/core-services/interfa...

A few websites that are disguising third-party trackers:

Fox News: https://trackingthetrackers.com/site/foxnews.com

CNN: https://trackingthetrackers.com/site/cnn.com

BBC: https://trackingthetrackers.com/site/bbc.co.uk

WebMD: https://trackingthetrackers.com/site/webmd.com

ESPN: https://trackingthetrackers.com/site/espn.com

Ars Technica: https://trackingthetrackers.com/site/arstechnica.com

Go.com (Disney): https://trackingthetrackers.com/site/go.com

Washington Post: https://trackingthetrackers.com/site/washingtonpost.com

Walmart: https://trackingthetrackers.com/site/walmart.com

Weather.com: https://trackingthetrackers.com/site/weather.com

Apple: https://trackingthetrackers.com/site/apple.com

NFL: https://trackingthetrackers.com/site/nfl.com

T-Mobile: https://trackingthetrackers.com/site/t-mobile.com

State Farm: https://trackingthetrackers.com/site/statefarm.com

Fixed, not sure why we did that in the first place.

https://trackingthetrackers.com/site/news.ycombinator.com

It's probably the map + the chat thing (only things that are third party, and won't stay there for long), we will fix.

Please reach out to us in the future, we will definitely have some discount, or be free, for serious non-profits.

Edited, thanks!

Right now it's disabled for everyone, it will be supported with an option to disable it.