Hacker News new | ask | show | jobs
by 0x1d7 7 days ago
Interesting, generally Microsoft bypasses the hosts file name resolution for various MSFT domains. Curious that these were not included (if it works, which I assume the mitigation does).

https://petri.com/windows-10-ignoring-hosts-file-specific-na...

1 comments

FWIW, YogaDNS stops these bypasses if you tick a settings box ("Block plain DNS over TCP from System Resolver"). Or use similar DNS forcing techniques against port 53.

Windows falls back to the normal resolver in that case.