1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Google Gets Into The DNS Business

Discussion in 'BlackHat Lounge' started by discodave, Dec 3, 2009.

Tags:
  1. discodave

    discodave Regular Member

    Joined:
    Nov 2, 2009
    Messages:
    249
    Likes Received:
    110
    Google just announced Google Public DNS, a new service that lets consumers use Google as their DNS service provider. The benefits to users are a theoretically faster and more stable browsing experience, and some additional security against malware type sites. The benefit to Google ? tons more data, and some potential revenue.

    LINK
     
    • Thanks Thanks x 1
  2. Crooker

    Crooker Newbie

    Joined:
    Jun 1, 2009
    Messages:
    0
    Likes Received:
    483
    Can you provide a source?
     
  3. rubberband

    rubberband Registered Member

    Joined:
    Oct 11, 2009
    Messages:
    90
    Likes Received:
    84
    It was in the link he posted.

    Code:
    http://code.google.com/speed/public-dns/
     
    • Thanks Thanks x 1
  4. youngguy

    youngguy Senior Member

    Joined:
    Apr 11, 2009
    Messages:
    1,053
    Likes Received:
    1,560
    Location:
    Hell
    and they will get as much data from their users like your browsing habits and your nasty blackhat stuffs lol
     
  5. Crooker

    Crooker Newbie

    Joined:
    Jun 1, 2009
    Messages:
    0
    Likes Received:
    483
    :pat: oops haha. Just woke up still a bit of sleep in my eyes.


    Exactly my thoughts.
     
  6. greyhatdude

    greyhatdude Regular Member

    Joined:
    Sep 13, 2008
    Messages:
    377
    Likes Received:
    255
    Occupation:
    Medical Field
    Location:
    Philippines, here I come.
    Home Page:
    Scary....
    Potential risks of using Google's free DNS service
    ( cgisecurity.com/2009/12/risks-of-using-googles-free-dns-service.html?1 )

    Google has announced that they are offering a free DNS service to anyone wanting to use it. Unfortunately the privacy concerns aren't being discussed in as much detail as I'd like, and people aren't asking why google would offer such a free service. Several points to consider

    * Google can profile a given IP for which countries they visit, or which types of sites they prefer.
    * Google can identify sites you visit that lack google analytics/google ads, allowing google to know everything you connect to.
    * Google states they don't share the data with analytics or google ads, it doesn't seem to say it won't share this data with others.
    * Google may see queries to internal hostnames on your local corporate intranet/lan when you attempt to visit an internal site.
    * Google will be able to see the software products an IP uses, if those products perform web based updates.
    * Google will be able to tell if you're infected with malware, if that malware contacts hostnames for payload updates. This allows google to know if you're backdoored/infected which hypothetically means this information could be used to gather a list of hacked hosts. It also gives them the potential to control the payloads used by bots not using payload verification/signing.
     
  7. TheSlugClub

    TheSlugClub BANNED BANNED

    Joined:
    Apr 7, 2009
    Messages:
    269
    Likes Received:
    115
    oh cmon man, you can scan the dns of any domain hosted anywhere, hosting them with google would make no difference. I think i'll move over to them as I find the dns on my vps a bit unstable :D
     
  8. betster77

    betster77 Regular Member

    Joined:
    Mar 21, 2009
    Messages:
    246
    Likes Received:
    237
    I think you're missing the point a bit. Scanning the DNS of any domain hosted anywhere is irrelevant to the security concerns listed on that list. From the end user DNS perspective (as a web user, not a host), right now google has no way of knowing what requests you make outside of their search engine/websites that host their ads.

    With this service they can track what requests your IP is making (if you use their DNS service) even before you open a browser. Your ISP normally has this data now (or opendns, etc) and its always a concern, but google has a lot of services, like serving ads, that would make this service a conflict of interest... The big G wants ultimate tracking... then again they may just be providing it out of the goodness of their hearts...



     
    Last edited: Dec 5, 2009
  9. Benditer

    Benditer Junior Member

    Joined:
    Aug 13, 2009
    Messages:
    125
    Likes Received:
    37
    Occupation:
    Many
    Location:
    Future
    Well, I switched to GDNS. Any privacy my a**. No body has any privacy on internet. And google is the last one, we should be afraid of.
     
  10. welshman

    welshman Power Member

    Joined:
    May 9, 2009
    Messages:
    701
    Likes Received:
    190
    And what happens if they don't like the look of your domain? Delete the DNs lwith no warning like they have recently done with so many AdWords accounts?