Anonymus Coward
@optonline.net
| reply to Lex Luthor
Re: What's up with OOL domain servers now?
said by Lex Luthor  :said by stevehoff :Opt out is not cookie based. It opts out your modem and is permanent, even if your IP address changes. Anyone able to verify yet if it is cookie or modem based? I just tried it from a Lightpath connection and it said I have opted out, so I'm probably thinking it's just a cookie, which would be pretty lame. It's most definitely modem-based, and MUCH smarter than any other so-called "opt-out" scheme we've seen at other ISPs for DNS-hijacking, such as:
- having to configure specific other DNS servers manually (Verizon)
- Cookie-based "opt-out" that really isn't changing the underlying DNS fuckage (various ISPs), only the browser's presentation.
It appears that the opt-out even survives hooking up another device to the cable modem (try it - hook up your PC instead of your AP/NAT), using a different ethernet MAC - the DNS-hijacking remains *OFF*.
While other ISPs have paid at most lipservice with their so-called 'opt-out'. They designed it cutting corners and with the intent to make it difficult enough to actively deter people from opting out, but OOL seems to have achieved something everyone else hasn't: opt-out at low protocol level that's sticky for good:
After opting out, from another machine here:
$ dig @167.206.254.1 foobar.dslreports.com a
; > DiG 9.3.3 > @167.206.254.1 foobar.dslreports.com a
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER- opcode: QUERY, status: NXDOMAIN, id: 27150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;foobar.dslreports.com. IN A
;; AUTHORITY SECTION:
dslreports.com. 1200 IN SOA ns0.easydns.com. admin.easydns.com. 1217062612 21600 7200 604800 1200
;; Query time: 58 msec
;; SERVER: 167.206.254.1#53(167.206.254.1)
;; WHEN: Fri Sep 26 22:21:41 2008
;; MSG SIZE rcvd: 94
e.g.: no resolution for something that DSLR has explicitly decided does not exist. |
