Google Gets Into The DNS Business

[discodave]

Google just announced Google Public DNS, a new service that lets consumers use Google as their DNS service provider. The benefits to users are a theoretically faster and more stable browsing experience, and some additional security against malware type sites. The benefit to Google ? tons more data, and some potential revenue.

LINK

 

[Crooker]

Can you provide a source?

 

[rubberband]

Can you provide a source?

It was in the link he posted.

http://code.google.com/speed/public-dns/

 

[youngguy]

and they will get as much data from their users like your browsing habits and your nasty blackhat stuffs lol

 

[Crooker]

It was in the link he posted.

http://code.google.com/speed/public-dns/

at: oops haha. Just woke up still a bit of sleep in my eyes.

and they will get as much data from their users like your browsing habits and your nasty blackhat stuffs lol

Exactly my thoughts.

 

[greyhatdude]

Scary....
Potential risks of using Google's free DNS service
( cgisecurity.com/2009/12/risks-of-using-googles-free-dns-service.html?1 )

Google has announced that they are offering a free DNS service to anyone wanting to use it. Unfortunately the privacy concerns aren't being discussed in as much detail as I'd like, and people aren't asking why google would offer such a free service. Several points to consider

* Google can profile a given IP for which countries they visit, or which types of sites they prefer.
* Google can identify sites you visit that lack google analytics/google ads, allowing google to know everything you connect to.
* Google states they don't share the data with analytics or google ads, it doesn't seem to say it won't share this data with others.
* Google may see queries to internal hostnames on your local corporate intranet/lan when you attempt to visit an internal site.
* Google will be able to see the software products an IP uses, if those products perform web based updates.
* Google will be able to tell if you're infected with malware, if that malware contacts hostnames for payload updates. This allows google to know if you're backdoored/infected which hypothetically means this information could be used to gather a list of hacked hosts. It also gives them the potential to control the payloads used by bots not using payload verification/signing.

 

[TheSlugClub]

Scary....
Potential risks of using Google's free DNS service
( cgisecurity.com/2009/12/risks-of-using-googles-free-dns-service.html?1 )

Google has announced that they are offering a free DNS service to anyone wanting to use it. Unfortunately the privacy concerns aren't being discussed in as much detail as I'd like, and people aren't asking why google would offer such a free service. Several points to consider

* Google can profile a given IP for which countries they visit, or which types of sites they prefer.
* Google can identify sites you visit that lack google analytics/google ads, allowing google to know everything you connect to.
* Google states they don't share the data with analytics or google ads, it doesn't seem to say it won't share this data with others.
* Google may see queries to internal hostnames on your local corporate intranet/lan when you attempt to visit an internal site.
* Google will be able to see the software products an IP uses, if those products perform web based updates.
* Google will be able to tell if you're infected with malware, if that malware contacts hostnames for payload updates. This allows google to know if you're backdoored/infected which hypothetically means this information could be used to gather a list of hacked hosts. It also gives them the potential to control the payloads used by bots not using payload verification/signing.

oh cmon man, you can scan the dns of any domain hosted anywhere, hosting them with google would make no difference. I think i'll move over to them as I find the dns on my vps a bit unstable

 

[betster77]

I think you're missing the point a bit. Scanning the DNS of any domain hosted anywhere is irrelevant to the security concerns listed on that list. From the end user DNS perspective (as a web user, not a host), right now google has no way of knowing what requests you make outside of their search engine/websites that host their ads.

With this service they can track what requests your IP is making (if you use their DNS service) even before you open a browser. Your ISP normally has this data now (or opendns, etc) and its always a concern, but google has a lot of services, like serving ads, that would make this service a conflict of interest... The big G wants ultimate tracking... then again they may just be providing it out of the goodness of their hearts...

oh cmon man, you can scan the dns of any domain hosted anywhere, hosting them with google would make no difference. I think i'll move over to them as I find the dns on my vps a bit unstable

 

[Benditer]

Well, I switched to GDNS. Any privacy my a**. No body has any privacy on internet. And google is the last one, we should be afraid of.

 

[welshman]

And what happens if they don't like the look of your domain? Delete the DNs lwith no warning like they have recently done with so many AdWords accounts?