Hacker News new | ask | show | jobs
by musicale 2598 days ago
>"fix the Internet so that thepiratebay.org no longer resolves," sounds a lot like .. “take that pizzeria on the corner off the phone network," and not like an attack on the fundamental principles of internetworking.

I don't get this - disconnecting the pizzeria from the phone network seems more severe than simply removing it from the yellow pages. If you remove thepiratebay from DNS you can still reach it via its IP address, you can still link to it, and you can probably still find it using search engines.

1 comments

DNS is a fundemental component of the internet. Currently, computers trust their upstream DNS servers to resolve correctly. Imagine if tpb resolves incorrectly on some networks. People on those networks may choose to use a different DNS server that resolves TPB correctly, but maybe has a grudge against Google and resolves an IP for Yahoo instead. Other DNS servers may have other grudges, or policies, or political pressures.

The end result is that DNS cannot be trusted, and so the design entirely breaks. Imagine ordering a package but not knowing if the delivery driver will see your address at your house or someone else’s.

This isn’t just removing something from the yellow pages, it’s introducing distrust into the phone system itself.

As briefly mentioned in the article, SOPA proposed DNS-level blacklisting against copyright-infringing websites. But the fact that you are able to choose what DNS server you use almost guarantees that at some point someone would set up a DNS server outside of the US that would bypass these blocks anyways.

Savvy users could simply bypass a SOPA-enabled recursive DNS server by pointing their DNS settings to an off-shore recursive DNS server... What would happen to users if an infringer decided to setup a “free, non-SOPA” recursive DNS server for users to use – one that additionally hijacked legitimate banking, ecommerce and business websites, too? [1]

[1] https://dyn.com/blog/sopa-breaking-dns-parasite-stop-online-...

> Imagine if tpb resolves incorrectly on some networks.

It already does. DNS can’t be totally trusted now. Arguably it’s already broken.

Agreed. I can't see DNS not being redesigned at some point in the future. I really hope it will end up decentralized, but it could go either way.