[warp]

But then a lying DNS server could easily identify those, and NOT lie about http://*.google -- the reason these requests are entirely random domain names is so they're not easily recognized as probes.

[xnyanta]

Except that the queries are already totally identifiable as probes in their current form, which is demonstrated in the article.