nanog mailing list archives
Re: Earthlink Contact - DNS cache poisoning
From: Will Dean <will () willscorner net>
Date: Sat, 24 Sep 2011 21:21:49 -0400
On Sep 24, 2011, at 9:07 PM, Christopher Morrow wrote:
On Sat, Sep 24, 2011 at 8:51 PM, Jimmy Hess <mysidia () gmail com> wrote: I think actually.. earthlink uses barefruit? (or they did when ... kaminsky was off doing his destruction of the dns liars gangs...) Maybe the same backend is used though for the advertizer side? (barefruit provides the appliance, some third-party is the advertiser/website-host... same for paxfire?)
Barefruit was just for returning a search engine result for a NXDOMAIN response. It appears Earthlink is now using Paxfire to sniff and proxy a users traffic to at least one popular website. Besides the obvious privacy implications, it introduces a nice captcha on Google. - Will
Current thread:
- Earthlink Contact - DNS cache poisoning Will Dean (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Jimmy Hess (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Christopher Morrow (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Will Dean (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Christopher Morrow (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Christopher Morrow (Sep 24)
- Re: Earthlink Contact - DNS cache poisoning Jimmy Hess (Sep 24)