Re: Home Router DNS hacked
This might be the most useless comment ever, but I have found that the "No Script" add on for Firefox is an adequate defense to cross-site scripting attacks. It has been part of the revenge mode for unnecessary flashy blinky crap I've had for quite a while. You are far more knowledgeable about network related issues than I am, so you will have to check that out yourself though, as this could be just so much nonsense.
What F@#! crock of B/S....
It's a very sad day when your two main Telcos/ISP's in your own country can use service analysis(AKA hack) into your DNS severs and cache.
For those of us in Oz. In the following article below you will read about Optus and Telstra indicated in DNS analysis.
I've reported the above practice to the federal government telecommunication ombudsmen last year.
I now find out via the below Wikipedia article that DNS analysis service has been in use by these two main Telco's for some time.
Big deal some people might say. It all relates back to the Telco allowing your DNS cache to be redirected to google-analytics service which then allows other 3rd party rouge/illicit java script to run on your, Mobile Phone, Tablet, PC or network.
--------------------- Excerpt from wiki article update 1st-june-2016-----------
Manipulation by ISPs[edit]
A number of consumer ISPs such as Cablevision's Optimum Online,[3] Comcast,[4] Time Warner, Cox Communications, RCN,[5] Rogers,[6] Charter Communications, Plusnet,[7] Verizon,[8] Sprint,[9] T-Mobile US,[10] Virgin Media,[11][12] Frontier Communications, Bell Sympatico,[13] UPC,[14] T-Online,[15] Optus,[16] Mediacom,[17] ONO,[18] TalkTalk,[19] Bigpond (Telstra),[20][21][22][23] and TTNET use DNS hijacking for their own purposes, such as displaying advertisements[24] or collecting statistics. This practice violates the RFC standard for DNS (NXDOMAIN) responses,[25] and can potentially open users to cross-site scripting attacks.[24]
The concern with DNS hijacking involves this hijacking of the NXDOMAIN response. Internet and intranet applications rely on the NXDOMAIN response to describe the condition where the DNS has no entry for the specified host. If one were to query the invalid domain name (fakeexample.com), one should get an NXDOMAIN response - informing the application that the name is invalid and taking the appropriate action (for example, displaying an error or not attempting to connect to the server). However, if the domain name is queried on one of these non-compliant ISPs, one would always receive a fake IP address belonging to the ISP. In a web browser, this behavior can be annoying or offensive as connections to this IP address display the ISP redirect page of the provider, sometimes with advertising, instead of a proper error message. However, other applications that rely on the NXDOMAIN error will instead attempt to initiate connections to this spoofed IP address, potentially exposing sensitive information.
[read more ]
https://en.wikipedia.org/wiki/DNS_hijacking
It's a very sad day when your two main Telcos/ISP's in your own country can use service analysis(AKA hack) into your DNS severs and cache.
For those of us in Oz. In the following article below you will read about Optus and Telstra indicated in DNS analysis.
I've reported the above practice to the federal government telecommunication ombudsmen last year.
I now find out via the below Wikipedia article that DNS analysis service has been in use by these two main Telco's for some time.
Big deal some people might say. It all relates back to the Telco allowing your DNS cache to be redirected to google-analytics service which then allows other 3rd party rouge/illicit java script to run on your, Mobile Phone, Tablet, PC or network.
--------------------- Excerpt from wiki article update 1st-june-2016-----------
Manipulation by ISPs[edit]
A number of consumer ISPs such as Cablevision's Optimum Online,[3] Comcast,[4] Time Warner, Cox Communications, RCN,[5] Rogers,[6] Charter Communications, Plusnet,[7] Verizon,[8] Sprint,[9] T-Mobile US,[10] Virgin Media,[11][12] Frontier Communications, Bell Sympatico,[13] UPC,[14] T-Online,[15] Optus,[16] Mediacom,[17] ONO,[18] TalkTalk,[19] Bigpond (Telstra),[20][21][22][23] and TTNET use DNS hijacking for their own purposes, such as displaying advertisements[24] or collecting statistics. This practice violates the RFC standard for DNS (NXDOMAIN) responses,[25] and can potentially open users to cross-site scripting attacks.[24]
The concern with DNS hijacking involves this hijacking of the NXDOMAIN response. Internet and intranet applications rely on the NXDOMAIN response to describe the condition where the DNS has no entry for the specified host. If one were to query the invalid domain name (fakeexample.com), one should get an NXDOMAIN response - informing the application that the name is invalid and taking the appropriate action (for example, displaying an error or not attempting to connect to the server). However, if the domain name is queried on one of these non-compliant ISPs, one would always receive a fake IP address belonging to the ISP. In a web browser, this behavior can be annoying or offensive as connections to this IP address display the ISP redirect page of the provider, sometimes with advertising, instead of a proper error message. However, other applications that rely on the NXDOMAIN error will instead attempt to initiate connections to this spoofed IP address, potentially exposing sensitive information.
[read more ]
https://en.wikipedia.org/wiki/DNS_hijacking
Comment