My ISP started doing this.
Is this even legal?
Stop using your ISP's DNS servers
>>54160543
What other DNS should someone use hmm? Google's botnet DNS??
>>54160543
I've tried that, it doesn't help. They're intercepting NX domain replies and replacing them with their own shit. It's useless.
>>54160564
use tor or ssh tunneling m8
>>54160561
Look into local ISP companies, they likely have a public DNS server.
There are also benchmark tools to test thousands of public servers to find the one that resolves fastest for you.
>>54160561
OpenNIC.
>>54160564
only works for plaintext. Use a VPN, Tor, or set up a DNSCrypt client. OpenNIC has servers that support that.
Been using OpenDNS for years and haven't had any problems
Use level3's dns servers. No bullshit and great latency.
4.2.2.2
4.2.2.4
>>54160612
Die Cisco die.
>>54160613
Changing the DNS doesn't help. Read the thread.
>>54160604
I'll look into OpenNIC and DNSCrypt. Tor, VPNs and SSH tunnels are slow. Thanks.
I don't understand the picture OP, what is happening?
>>54160641
What's wrong with OpenDNS?
>>54160644
His ISP is intercepting DNS queries, and returning their own page when one comes up as not found, instead of just passing through the "no such website" response. Presumably, they're tracking all the websites he sends DNS queries for, and getting paid by Yahoo to redirect him to that page.
Have you tried googling it? I found a good suggestion in 10 seconds.
https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/
Does this not do a Thing?
>>54160644
I directed my browser to http://www.bogusname.online/ and pic related happened instead of server not found.
>>54160527
Login to your AT&T account to disable it.
YEAH ISPs SUCK DOG DICK!!
>>54160561
>Implying Google is any worse of a botnet than AT&T
>Implying they're not both included in the NSA botnet
>>54160527
https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/
>>54160695
They shouldn't be doing any such thing to begin with, on either an opt-in or opt-out basis. An ISP should be a dumb pipe.
>>54160703
>https://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/
They are about the same but AT&T is actually slightly less
i just clicked the disable option thing for TWC and it doesnt do it anymore.
>>54160733
But then they would have no way of knowing what you're doing at all times.
>>54160703
Didn't imply any of those sir. Once a company is in PRISM, it makes them equally bad no matter what technique.
Simply asked what options are available
>>54160685
Verizon, unsurprisingly, does this as well
>inb4 ">2016 >Verizon"
>>54160527
I have AT&T as well, this happens to me. I literally just switched the DNS to google's and the issue is gone. Make sure you clear your cache.
>>54160817
>2016
>Verizon
>>54160817
>2016
>taking a picture of your screen
Comcast doesn't do this. It's Comcastic!
>America
Land of the free, home of the burger!
Don't worry though, Americans. The free market will fix it. Keep trusting the free market, someday it might just fix something...
>mfw my dad was telling me that i will regret not getting at&t (the only large ISP in my area)
>mfw the small ISP i use just werks.
>>54160927
Enjoy while the small ones still exist, the free market is fixing that problem for the big ones.
>tfw realized that they were logging all my queries this whole time
>>54160561
Use my ROmanian internet provider ISP servers, they don't care about what you do on computer.
Literally the highest amount of illicit traffic comes from Romania at least in EUrope.
193.231.252.1 , 213.154.124.1
>>54161189
Nice try NSA. Domain queries are still logged by their ISP because it's unencrypted.
>>54161189
Just searched those IPs, seems like it's legit
http://www.sgvulcan.com/2010/01/16/list-of-isp-dns-servers/
But I just switched to opennic's DNS. I'll keep these handy though.
>>54160980
The free market works a lot better, when you don't legally sell political influence.
>>54161344
So the free market works in a utopia?
>>54160527
Of course, you brain dead fucking retard.
>>54161454
No political/economic system works when you can sell political influence.
WW3 will fix this.
>>54160564
Are you sure? I thought this was a "search domain" DNS parameter. Can you post the output ofdig bullshitdomain1111.netor whatever (or nslookup on wangblows)?
>>54160561
Run your own.
It's trivial to set up.
>>54160681
But... Why not just...
>>54161558
>>54160561
>he's too dumb to run his own recursive DNS server
>>54161583
>he uses a dns server
any idiot could change the a record and direct you to a different server
>>54161592
>What is DNSSEC validation
>>54161592
I don't think you understand what a DNS server is.
>>54161606
My nigga
>>54161592
Do you have any idea what you're talking about?
>>54161592
The fuck are you on?
>>54161614
>>54161620
>>54161629
I think he's making a joke about only using IP addresses instead of domain names
>>54160817
>2016
>searching for gentoomen
>>54161503
Wouldn't a free market just end with 1 or 2 businesses controlling an industry?
>>54161662
Ahhh I get it now.
It's a dumb joke.
>>54161693
but muh trickle-down economics and muh self-regulation don't FUCKING question it just ignore the faults it'll ALL work out senpai :) (with a nominal fee)
>>54161693
The more heavily-regulated an industry is, the more difficult it is for an outside company to enter a noncompetitive market.
>>54161741
Which is arguibly good. Countries being ruined by other countries funneling their money out shouldn't be a thing.
>>54160527
Change your DNS server in your router
>>54160527
>is this legal
if you have to ask a question like that, you have no idea what is happening in the first place you are the last person on the planet to mention the word 'botnet'. stop trying to fit in here you fucking retard
Feels good man. Guess Centurylink isn't complete shit.
>>54161971
>hijacking other people's communications is okay
You have issues.
>>54161543
not op but my isp does the same shit; <<>> DiG 9.10.3-P4-RedHat-9.10.3-12.P4.fc23 <<>> bullshitdomain1111.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54331
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1280
;; QUESTION SECTION:
;bullshitdomain1111.net. IN A
;; ANSWER SECTION:
bullshitdomain1111.net. 15 IN A 92.242.140.2
;; Query time: 25 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: jeu. avril 21 22:28:10 MST 2016
;; MSG SIZE rcvd: 67
>>54162867
Damn that's legitimate interception. DNSSEC *should* save you, since the tld will sign the nxdomain (I think).
>>54162312
that's not the point he's making. don't be an idiot.
>>54160527
>>54161558
Question for OP - what's the URL under "opt out"?
Does it just set a cookie (which isn't opting out, it's bullshit) or does it take you to an account-specific place on att.net where you can tell AT&T "Fuck this shit, tell your CPE (customer premises equipment) to return a proper NXDOMAIN when I enter an invalid domain, instead of whoring me out to your advertising parthers?"
>>54163045
It's common practice among shitty ISPs to have their DNS server return their own search server for any domain they don't have a record for. They don't usually do it for existing domains, so DNSSEC doesn't really apply here.
>>54160527
Why are you doing this OP? Do you really think that not using Google makes a difference?
>>54160766
you're in the US
no matter what the NSA has your data
and the more you try to hide the more you'll stand out
Just use google senpai's dns servers
4.4.4.4
8.8.8.8
>>54160561
OpenNIC
what exactly am i looking at OP?
>American ISPs
Aaahahahhaha
>>54160527
Are they fucking retarded?
>a more convenient experience
Literally worse than ask.com
>>54163551
german t-oline does it too.
you enter something that's not found and are redirected to their portal search.
>>54160980
>a state law written by AT&T and Comcast lobbyists
>free market
people this retarded exist
>>54163911
Yeah. That's literally the definition of corporatism, not capitalism.
>Global Rules
>2. You will immediately cease and not continue to access the site if you are under the age of 18.
>>54160817
>2016
>1280x960
>>54160527
Download 06 version and see if it helps
https://github.com/opendns/dnscrypt-win-client/tree/master/DNSCryptUpgrade
>>54160817
>2016
>yahoo
>>54161693
Usually regulation make it harder for smaller companies.
>>54160527
not using google, someone's dumb
>>54160817
>2016
>4chan
>>54160561
Swiss Privacy Foundation
https://www.privacyfoundation.ch/de/service/server.html
>>54161583
still need a forwarder, unless you want to host the entire world's name records in you DB.
>>54161609
kek
>>54165979
No you don't. Keyword is recursive. The only "hardcoded" values are root servers, which hold all the TLDs.
Assuming a completely uncached query, your request for, say "something.example.com" would go something like this:
Your server connects to root server
>I'm looking for something.example.com.
>I don't know, but I know you can find com. at 1.2.3.4
Your server connects to 1.2.3.4
>I'm looking for something.example.com.
>I don't know, but I know you can find example.com. at 5.6.7.8
Your server connects to 5.6.7.8
>I'm looking for something.example.com.
>you can find that at 9.10.11.12
Your server returns 9.10.11.12
Hence, "recursive". Usually your server will have cached answers (based on the record ttls), so it might skip the first few steps (or even all the steps) in the above process. Then there's OS-level caching on top of that but that doesn't matter.
>>54166911
but in this example the root server is still acting as a forwarder for queries that cannot be resolved locally.
>>54166911
How does a recursive DNs server help at all in this scenario?
>>54160561
>>54160561
>>54160527
https://anonymous-proxy-servers.net/wiki/index.php/Censorship-free_DNS_servers
>>54160527
OP it is probably something like this:
http://2014.video.sector.ca/video/110367213
>>54166992
Technically, but not really. A recursive server is different than a forwarding/caching server. A forwarder will forward requests to a single explicit server (which may be a recursive server, or another forwarder, but eventually the forwarding will end at a recursive server). For instance, the router at your house probably acts as a forwarder, forwarding requests to your ISP, who probably runs recursive servers.
>>54167034
Because having a recursive server on your local network is the "proper" way to do things. It'll speed up your queries, and prevent hijacking by malicious DNS providers. It won't help DNS *poisoning*, but that's different, not what's happening to OP and somewhat illegal.
>>54160817
>2016
>internet
>>54163911
Funnily enough, the only candidate against Citizens United is not a capitalist. How does that make you feel?
My ISP did this too but you can call them and turn it off (back when I did it), nowadays they have a thing in their online panel where you can turn it off yourself.
Still sucks that it's opt-out but what are you going to do
>>54160561
Unbound with DNSCrypt.
How can Americans call themselves first world when their internet is this bad?
>>54169127
We have better internet than Yuroshits.
Also it's just some idiot using ISP DNS.
>>54163099
not OP, but it takes you to the "privacy choices" of your ATT account, where you can disable it.
>>54169165
>Still slower than Czech
>>54160915
There has not been a free market in the United States for decades, retarded Europoor. The means of production is controlled by the State, which is the opposite of a free market.
It's amazing how right Orwell and Huxley were about the abuse of language in propoganda. The state declares "the free market will fix it" to the peasants to convince them that it's at fault even though it doesn't exist here.
You'll literally get raided by SWAT for producing unpasteurized milk or eggs in the United States.
>>54170414
B-but the state is controlled by corporations, anon.
>>54170451
>>54170451
This is the crux of socialism. It's not "controlled by corporations" it's controlled by individuals in government who have corporate interests, which is a problem that never disappears other than through full blown communism. And well we know where that goes.
Human nature is always present, it's not "corporations" it's "people."
The free market is the safest and most beneficial system for the mass populace, but also has the fatal weakness of being slow killed by the state. Once the state slow kills a free market, problems appear, and then the state says "the free market will fix it!" as if spitting on the free market's corpse, knowing it's not even there anymore. Only college age retards believe it when rich people and lifelong politicians promise them that they aren't just that.
>>54160817
>2016
>life
>>54170672
>saw this weeks ago
>voted trump
Thank god for open primaries.
>>54172727
>>voted trump
Hey, did you see that Nascar race last night?
>>54174608
d*mn friggin rekt
nice one!
>>54163206
>the more you try to hide the more you'll stand out
If enough people take measures to make themselves a pain in the ass to monitor, the state's ability to monitor them breaks down.
>>54163472
It's 8.8.8.8 and 8.8.4.4
>tfw best isp in the world
feelsgoodman.jpg
Time warner does this, opt-out doesn't help at all
>>54160527
Do you realize how easy it is to run your own DNS? I didn't know my ISP did that for years, because I use my own DNS. Screw them. It's easy.
>>54163848
They're full of it. What they're really doing is getting ad/partnership money from the search provider
