Google Gets Into The DNS Business

discodave · Dec 3, 2009

Google just announced Google Public DNS, a new service that lets consumers use Google as their DNS service provider. The benefits to users are a theoretically faster and more stable browsing experience, and some additional security against malware type sites. The benefit to Google ? tons more data, and some potential revenue.

LINK

Crooker · Dec 3, 2009

Can you provide a source?

rubberband · Dec 3, 2009

Crooker said:
Can you provide a source?

It was in the link he posted.

Code:

http://code.google.com/speed/public-dns/

youngguy · Dec 3, 2009

and they will get as much data from their users like your browsing habits and your nasty blackhat stuffs lol

Crooker · Dec 3, 2009

rubberband said:
It was in the link he posted.

Code:

http://code.google.com/speed/public-dns/

at: oops haha. Just woke up still a bit of sleep in my eyes.

youngguy said:
and they will get as much data from their users like your browsing habits and your nasty blackhat stuffs lol

Exactly my thoughts.

greyhatdude · Dec 5, 2009

Scary....
Potential risks of using Google's free DNS service
( cgisecurity.com/2009/12/risks-of-using-googles-free-dns-service.html?1 )

Google has announced that they are offering a free DNS service to anyone wanting to use it. Unfortunately the privacy concerns aren't being discussed in as much detail as I'd like, and people aren't asking why google would offer such a free service. Several points to consider

* Google can profile a given IP for which countries they visit, or which types of sites they prefer.
* Google can identify sites you visit that lack google analytics/google ads, allowing google to know everything you connect to.
* Google states they don't share the data with analytics or google ads, it doesn't seem to say it won't share this data with others.
* Google may see queries to internal hostnames on your local corporate intranet/lan when you attempt to visit an internal site.
* Google will be able to see the software products an IP uses, if those products perform web based updates.
* Google will be able to tell if you're infected with malware, if that malware contacts hostnames for payload updates. This allows google to know if you're backdoored/infected which hypothetically means this information could be used to gather a list of hacked hosts. It also gives them the potential to control the payloads used by bots not using payload verification/signing.

TheSlugClub · Dec 5, 2009

greyhatdude said:
Scary....
Potential risks of using Google's free DNS service
( cgisecurity.com/2009/12/risks-of-using-googles-free-dns-service.html?1 )

Google has announced that they are offering a free DNS service to anyone wanting to use it. Unfortunately the privacy concerns aren't being discussed in as much detail as I'd like, and people aren't asking why google would offer such a free service. Several points to consider

* Google can profile a given IP for which countries they visit, or which types of sites they prefer.
* Google can identify sites you visit that lack google analytics/google ads, allowing google to know everything you connect to.
* Google states they don't share the data with analytics or google ads, it doesn't seem to say it won't share this data with others.
* Google may see queries to internal hostnames on your local corporate intranet/lan when you attempt to visit an internal site.
* Google will be able to see the software products an IP uses, if those products perform web based updates.
* Google will be able to tell if you're infected with malware, if that malware contacts hostnames for payload updates. This allows google to know if you're backdoored/infected which hypothetically means this information could be used to gather a list of hacked hosts. It also gives them the potential to control the payloads used by bots not using payload verification/signing.

oh cmon man, you can scan the dns of any domain hosted anywhere, hosting them with google would make no difference. I think i'll move over to them as I find the dns on my vps a bit unstable

betster77 · Dec 5, 2009

I think you're missing the point a bit. Scanning the DNS of any domain hosted anywhere is irrelevant to the security concerns listed on that list. From the end user DNS perspective (as a web user, not a host), right now google has no way of knowing what requests you make outside of their search engine/websites that host their ads.

With this service they can track what requests your IP is making (if you use their DNS service) even before you open a browser. Your ISP normally has this data now (or opendns, etc) and its always a concern, but google has a lot of services, like serving ads, that would make this service a conflict of interest... The big G wants ultimate tracking... then again they may just be providing it out of the goodness of their hearts...

TheSlugClub said:
oh cmon man, you can scan the dns of any domain hosted anywhere, hosting them with google would make no difference. I think i'll move over to them as I find the dns on my vps a bit unstable

Benditer · Dec 5, 2009

Well, I switched to GDNS. Any privacy my a**. No body has any privacy on internet. And google is the last one, we should be afraid of.

welshman · Dec 5, 2009

And what happens if they don't like the look of your domain? Delete the DNs lwith no warning like they have recently done with so many AdWords accounts?

Google Gets Into The DNS Business

discodave

Regular Member

Crooker

Newbie

rubberband

Registered Member

youngguy

BANNED

Crooker

Newbie

greyhatdude

Regular Member

TheSlugClub

BANNED

betster77

Regular Member

Benditer

Junior Member

welshman

Senior Member

Main Menu

Marketplace

Making Money

BlackHat World