Recursive DNS Server Fingerprint
Security and privacy
dns censorship measurement
SHOW HN2017
How HN took it
1 positive, 5 neutral or asking, 1 mixed, 1 critical, out of 8 comments about the project. Thread score +0.04.
Idea: 1 for, 0 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Interesting, useful research using RIPE Atlas
From 2 comments
It's nice to see a country as large as Brazil having 24% of its domains with DNSSEC records (973k out of 3.9m domains). I expected it to be close to zero. This is very…
gtirloni on HNThis is a very cool use of RIPE Atlas! Note that it's not going to flag many of the censorship apparatus, because they will inject replies only for queries matching their denied…
willscott on HN
Objections
Sample sizes differ greatly between countries, so percentages are unreliable
From 2 comments
Seems odd that their tests have a drastically different number of probes from different source countries. total_probes ought to be exactly the same from every source, for a more…
JoshTriplett on HNIt sounds like they used all the probes available. Many of the countries simply have very few RIPE Atlas probes available; I don't think it's reasonable to only select 5 probes…
toast0 on HN
Censorship injecting only for denied patterns means many cases go undetected
From 1 comment
This is a very cool use of RIPE Atlas! Note that it's not going to flag many of the censorship apparatus, because they will inject replies only for queries matching their denied…
willscott on HN
Requests
Add DNSSEC statistics per ccTLD alongside the fingerprint report
From 1 comment
It's nice to see a country as large as Brazil having 24% of its domains with DNSSEC records (973k out of 3.9m domains). I expected it to be close to zero. This is very…
gtirloni on HN
Questions
Did anyone release more details on the NIC.br compromise?
From 1 comment
Did anyone ever release any more info on this? so far, all points to the bank falling for a scam and releasing credentials to nic.br
gcb0 on HN
Alternatives named
RIPE Atlas probe network
From 2 comments
If anyone is interested expanding the research in countries with low RIPE Atlas coverage, we can provide free research access to our Probe API which has over 10x more probes than…
forcer on HNIf you are not represented, join us! https://atlas.ripe.net/get-involved/become-a-host/
swinglock on HN
SpeedChecker Probe API
From 1 comment
If anyone is interested expanding the research in countries with low RIPE Atlas coverage, we can provide free research access to our Probe API which has over 10x more probes than…
forcer on HN