Anonymus Coward
@optonline.net
| reply to Lex Luthor
Re: What's up with OOL domain servers now?
said by Lex Luthor  :said by stevehoff :Opt out is not cookie based. It opts out your modem and is permanent, even if your IP address changes. Anyone able to verify yet if it is cookie or modem based? I just tried it from a Lightpath connection and it said I have opted out, so I'm probably thinking it's just a cookie, which would be pretty lame. It's most definitely modem-based, and MUCH smarter than any other so-called "opt-out" scheme we've seen at other ISPs for DNS-hijacking, such as:
- having to configure specific other DNS servers manually (Verizon)
- Cookie-based "opt-out" that really isn't changing the underlying DNS fuckage (various ISPs), only the browser's presentation.
It appears that the opt-out even survives hooking up another device to the cable modem (try it - hook up your PC instead of your AP/NAT), using a different ethernet MAC - the DNS-hijacking remains *OFF*.
While other ISPs have paid at most lipservice with their so-called 'opt-out'. They designed it cutting corners and with the intent to make it difficult enough to actively deter people from opting out, but OOL seems to have achieved something everyone else hasn't: opt-out at low protocol level that's sticky for good:
After opting out, from another machine here:
$ dig @167.206.254.1 foobar.dslreports.com a
; > DiG 9.3.3 > @167.206.254.1 foobar.dslreports.com a
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER- opcode: QUERY, status: NXDOMAIN, id: 27150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;foobar.dslreports.com. IN A
;; AUTHORITY SECTION:
dslreports.com. 1200 IN SOA ns0.easydns.com. admin.easydns.com. 1217062612 21600 7200 604800 1200
;; Query time: 58 msec
;; SERVER: 167.206.254.1#53(167.206.254.1)
;; WHEN: Fri Sep 26 22:21:41 2008
;; MSG SIZE rcvd: 94
e.g.: no resolution for something that DSLR has explicitly decided does not exist. |
|
MxxCon
join:1999-11-19
Brooklyn, NY
clubs:   | reply to IllIlIlllIll
do not use 4.2.2.x
they are slow, overloaded, and some of those anycast'ed servers are still not patched against that dns hole from a few month ago. |
|
IllIlIlllIll
EliteData
Premium
join:2003-07-06
Lindenhurst, NY | is there something better available ? |
|
Ken Peterson
Premium
join:2000-12-08 | reply to mozart11
OpenDNS is an alternative. |
|
HydroponiK
nom nom nom
Premium
join:2001-08-03
New Jersey
 ·Optimum Online
| reply to mozart11
What sneaky bastards....
Even certain sites which do not have dead links gets hijacked to their site.
Try to access »newzleech.com/ if you haven't opted out.
Very shady in my opinion....
--
Ain't that a bitch. |
|
TheWiseGuy
Dog And Butterfly
Premium,MVM
join:2002-07-04
Yonkers, NY | Both Opendns and OOL DNS time out for a lookup of the link you posted. |
|
HydroponiK
nom nom nom
Premium
join:2001-08-03
New Jersey | Hmm I just realized the site is having issues, b/c I got a dead link too a few mins ago.
--
Ain't that a bitch. |
|
