Archiv: Domain Name System (DNS) / Synonym „Metadaten“ / „metadata“ / invented in 1983 by Paul Mockapetris (later IETF) for Pentagon ARPANET


18.11.2024 - 20:07 [ OpenDNSSEC.org ]

About: OpenDNSSEC was created as an open-source turn-key solution for DNSSEC. It secures zone data just before it is published in an authoritative name server.

Why DNSSEC?

Many internet protocol hinge on DNS, but the data in DNS caches has become so vulnerable to attack that it cannot be relied upon anymore. The added authenticity in DNSSEC makes sure that such attacks have no effect.

That is, if

– Zones are verified. Easy-to-deploy software for DNSSEC-aware name resolving (and caching) exists, for example Unbound or properly configured Bind9.
– Zones are secured. Easy-to-deploy solutions for DNSSEC did not yet exist, at least not in open source. Hence the OpenDNSSEC project.

More on the problems with DNS and about deploying DNSSEC can be found in this white paper.

17.11.2024 - 22:50 [ NLNetLabs.nl ]

UNBOUND

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards.

To help increase online privacy, Unbound supports DNS-over-TLS and DNS-over-HTTPS which allows clients to encrypt their communication. In addition, it supports various modern standards that limit the amount of data exchanged with authoritative servers. These standards do not only improve privacy but also help making the DNS more robust. The most important are Query Name Minimisation, the Aggressive Use of DNSSEC-Validated Cache and support for authority zones, which can be used to load a copy of the root zone.

17.11.2024 - 22:44 [ Computerwoche.de ]

Neuer Open-Source-DNS-Server: Unbound soll BIND Konkurrenz machen

(21 Mai 2008)

Eine Gruppe von Experten hat eine quelloffene Alternative zum DNS-Server (Domain Name System) „BIND“ vorgestellt, die leistungsfähiger und sicherer sein soll.

Der neue DNS-Server heißt “Unbound“, steht unter einer BSD-Lizenz und liegt jetzt in Version 1.0.0 vor. Die C-Implementierung wird von der nicht gewinnorientierten niederländischen Firma NL Labs gepflegt.

17.11.2024 - 22:04 [ Internet Systems Consortium (ISC) ]

The History of BIND

The Berkeley Internet Name Domain (BIND) package was originally written in the early 1980s at the University of California at Berkeley as a graduate-student project, under a grant from the US Defense Advanced Research Projects Administration (DARPA).
(…)
BIND 9: 2000 – Today

There have been more than 43 core developers who have contributed significantly to BIND 9 development and maintenance over its 20+ year lifespan.
(…)
In 2014, ISC ended development on BIND 10 and refocused on investing in BIND 9 instead.

17.11.2024 - 20:26 [ IT-Ratgeber.com ]

DNS over TLS (DoT) auf FritzBox aktivieren

Zu guter Letzt können wir die Einstellungen noch prüfen. Bei der FritzBox sollte unter Internet -> Online-Monitor hinter den genutzten DNS-Servern jetzt (DoT verschlüsselt) stehen.

17.11.2024 - 20:10 [ Lifewire.com ]

How to Change DNS Servers on Most Popular Routers

(Updated on March 12, 2022)

Change DNS Server on Linksys
Change DNS Server on a NetGear Router
Change DNS Server on D-Link
Change DNS Server on Asus
Change DNS Server on TP-Link
Change DNS Server on Cisco
Change DNS Server on TRENDnet
Change DNS Server on Belkin
Change DNS Server on Buffalo
Change DNS Server on Google Wifi

17.11.2024 - 20:02 [ adguard-dns.io ]

Known DNS Providers

Here we suggest a list of trusted DNS providers.

17.11.2024 - 19:39 [ myrasecurity.com ]

Was ist DNS over TLS?

Bei DNS over TLS (DoT) handelt es sich um ein Protokoll zur verschlüsselten Übertragung von DNS-Anfragen (Domain Name System). Üblicherweise wird die Namensauflösung im Internet unverschlüsselt über UDP übertragen. Bei DoT erfolgt hingegen die Zuordnung von Domains und den dazugehörigen IP-Adressen verschlüsselt über das Transport-Layer-Security-Protokoll (TLS). Hierdurch ist die Übertragung vor Abhörversuchen, Manipulationen und Man-in-the-Middle-Angriffen geschützt.

17.11.2024 - 19:24 [ CyberGhostvpn.com ]

How to Change Your DNS on Any Device

(20.01.2024)

A Domain Name System (DNS) matches human-friendly domain names to computer-friendly IP addresses.

When you type in a domain name like cyberghost.com, for example, your web browser sends the request to your ISP via your router. Your ISP refers the request to its default DNS server. The DNS server then supplies the relevant IP address so your browser can load the appropriate page.

A DNS also saves a local copy or cache of sites you’ve recently visited on your device for quick and easy reference.

It seems like a streamlined service; what could go wrong? Check the following reasons why you should change your DNS.

17.11.2024 - 19:22 [ Public-DNS.info ]

Public DNS Servers by country

Download valid nameservers as CSV | Plaintext
Download all nameservers as CSV | Plaintext

17.11.2024 - 18:46 [ DNScheck.tools ]

dnscheck.tools – inspect your dns resolvers

(…)

17.11.2024 - 18:31 [ DNSSEC-Deployment.org ]

DNSSEC History Project

DNS Security Prehistory

Few technologies are more critical to the operation of the Internet than the Domain Name System (DNS). The initial design of DNS did not take security into consideration, which was not unusual for protocols designed in the early 1980s. At the time of its development, and for many years there after, DNS had functioned without many formal security mechanisms, thereby making it vulnerable to DNS spoofing and other malicious attacks.

Determining the Need for DNSSEC

[What drove the work? Big picture issues. Surely this includes the demonstrations of cache poisoning by Steve Bellovin and Tsutomu Shimomura in the early 1990s and the similar work by Dan Kaminsky in 2008, but it may include much other activity.]

(…)

Cache Poisoning

The earliest known security problem with DNS was DNS cache poisoning, also sometimes called DNS spoofing. DNS cache poisoning happens when a DNS server downstream from the authoritative one returns incorrect data to queries for names or IP addresses. This occurs because an attacker has ‘poisoned’ the cache of the downstream DNS server to return the malicious response. DNS cache poisoning is a subset of a group of problems computer scientists often classify as cache invalidation.

This problem, known to the Computer Science Research Group(CSRG) at U.C. Berkeley since 1989, was finally described in a paper by Steve Bellovin in 1993. Bellovin initially put off publishing the paper out of fear the information would be exploited.

(…)

Concern over DNS cache poisoning, specifically that the leak would become publicly known, existed from 1989 to 1995.

17.11.2024 - 17:28 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

– Early 1967 – Meeting of ARPA’s principal investigators in Ann Arbor, Michigan. Roberts (the director of the IPTO) put forward the idea of a computer network. Wes Clark introduced the idea of a subnetwork: small, identical computers all interconnected – “interface message processors (IMPs).” Engelbert volunteered to the Network Information Center (NIC).

– 1967 – Roberts published paper on ARPANET.

– End of 1967 – The Association for Computing Machinery’s computer conference in Gatliburg, Tennessee. Roberts presented his first paper on ARPANET and heard of work done by Donald Davies’ team at NPL and Paul Baran at RAND.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

– November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

17.11.2024 - 17:12 [ Computerwoche.de ]

DNS: Was ist das Domain Name System?

(July 3, 2021)

Deswegen wurde 1983 der Informatiker Paul Mockapetris damit beauftragt, eine Lösung zu finden. Mockapetris verwarf alle bisherigen Ansätze und entwickelte sein eigenes System, das er auf den Namen “DNS” taufte. Auch wenn sich das Domain Name System seitdem deutlich verändert hat, funktioniert es in seinen Grundzügen immer noch so wie vor knapp vierzig Jahren.

08.11.2024 - 05:47 [ Netzpolitik.org ]

Bundesverwaltungsgericht: BND darf zu Staatstrojanern wie Pegasus schweigen

Laut BND könnten sich Überwachungs-Ziele vor Pegasus schützen, wenn der BND offiziell zugibt, dass er Pegasus nutzt.

08.11.2024 - 05:33 [ Netzpolitik.org ]

BND muss Kommunikations-Überwachung einschränken

Die entsprechende Grundlage (Artikel 10-Gesetz) für den deutschen Auslandsgeheimdienst muss bis spätestens Ende 2026 neu geregelt werden, bis dahin dürfe die Überwachung mit Einschränkungen weitergehen.
(…)
„Derzeit fehlt eine hinreichende Regelung zur Aussonderung von Daten aus rein inländischen Telekommunikationsverkehren“, so das Gericht.
(…)
Der „Schutz des Kernbereichs privater Lebensgestaltung“ sei demnach unzureichend. Konkret weist das Gericht auf die Begriffe hin, mit denen der Geheimdienst nicht-öffentliche Kommunikation filtert.
(…)
Die G10-Kommission müsse laut Verfassungsgericht besser ausgestattet sein. So bringt das Verfassungsgericht zum Ausdruck: Das ist kein Job, den man nebenbei macht. Es genüge nicht, „dass die Mitglieder der G10-Kommission lediglich ein öffentliches Ehrenamt innehaben statt wie verfassungsrechtlich geboten hauptamtlich tätig zu sein.“ Zudem stelle die aktuelle Regelung nicht sicher, dass der Kommission Mitglieder mit richterlicher Erfahrung angehören.

29.03.2024 - 22:45 [ CommonDreams.org ]

Human Rights Expert Sounds Alarm Over Israeli Firm‘s ‚Dystopian‘ Video-Altering Tech

(December 27, 2022)

Haaretz continued:

Twenty years on, this is no longer the stuff of movies: Toka‘s tech allows clients to do just that and more—not just diverting a live feed but also altering old feeds and erasing any evidence of a covert op.
Technical documents reviewed by an ethical hacker prove that Toka‘s tech can alter both live and recorded video feeds—all without leaving any forensics or telltale signs of a hack (in contrast to NSO‘s Pegasus spyware, or Intellexa‘s Predator, which leave a digital fingerprint on targeted devices).

29.03.2024 - 22:35 [ Truthout.org ]

Israeli Firm Plans Expanding Its Deployment of Video-Altering Tech

(December 27, 2022)

Co-founded by former Israeli Prime Minister Ehud Barak and former Israel Defense Forces (IDF) cyber chief Yaron Rosen, Toka “sells technologies that allow clients to locate security cameras or even webcams within a given perimeter, hack into them, watch their live feed, and even alter it — and past recordings,” Haaretz reported, citing internal documents it obtained and reviewed with a technical expert.

The company, whose activities are overseen by the Israeli Defense Ministry, “was set up in 2018 and has offices in Tel Aviv and Washington,” Haaretz reported.

29.03.2024 - 22:30 [ Haaretz ]

Revealed: The Israeli Firm Selling ‘Dystopian’ Hacking Capabilities

(December 23, 2022)

According to a company pitch deck obtained by Haaretz, Toka offers what it terms “previously out-of-reach capabilities” that “transform untapped IoT sensors into intelligence sources,” and can be used “for intelligence and operational needs.” (IoT stands for Internet of Things and refers here to web-connected cameras and even car media systems.)

29.03.2024 - 22:15 [ TomsGuide.com ]

Millions of wireless security cameras are at risk of being hacked: What to do

(16 June 2020)

Bevan also called on lawmakers to take action, saying: “The government must push forward with their plans for legislation to require connected devices to meet certain security standards and ensure this is backed by strong enforcement.“

29.03.2024 - 22:02 [ Forbes ]

Alexa, Are You A Spy? Israeli Startup Raises $12.5 Million So Governments Can Hack IoT

(July 15, 2018)

Coming out of stealth Monday, Tel Aviv-based Toka says it‘ll provide spy tools for whatever device its clients require. But while it‘ll try to hack devices like Apple iPhones, it has a special focus on the so-called Internet of Things (IoT), covering tech like Amazon Echo, Nest connected home products, as well as connected fridges, thermostats and alarms. (…)

Two of Toka’s investors, Dell Technologies Capital and Andreessen Horowitz, for instance, have put millions of dollars into defensive companies beforehand. (The other seed investors are Entrée Capital, Launch Capital and Ray Rothrock, CEO of cyber-analytics firm RedSeal).

16.03.2024 - 19:04 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

09.03.2024 - 08:00 [ IT-Ratgeber.com ]

DNS over TLS (DoT) auf FritzBox aktivieren

Zu guter Letzt können wir die Einstellungen noch prüfen. Bei der FritzBox sollte unter Internet -> Online-Monitor hinter den genutzten DNS-Servern jetzt (DoT verschlüsselt) stehen.

09.03.2024 - 04:30 [ adguard-dns.io ]

Known DNS Providers

Here we suggest a list of trusted DNS providers.

09.03.2024 - 04:20 [ theSSLstore.com ]

What is DNS over TLS? Everything you need to know

DNS over TLS keeps Internet Service Providers (ISPs) from spying on users.

09.03.2024 - 04:15 [ CyberGhostvpn.com ]

How to Change Your DNS on Any Device

(20.01.2024)

A Domain Name System (DNS) matches human-friendly domain names to computer-friendly IP addresses.

When you type in a domain name like cyberghost.com, for example, your web browser sends the request to your ISP via your router. Your ISP refers the request to its default DNS server. The DNS server then supplies the relevant IP address so your browser can load the appropriate page.

A DNS also saves a local copy or cache of sites you’ve recently visited on your device for quick and easy reference.

It seems like a streamlined service; what could go wrong? Check the following reasons why you should change your DNS.

09.03.2024 - 04:05 [ DNScheck.tools ]

dnscheck.tools – inspect your dns resolvers

(…)

09.03.2024 - 04:00 [ Harvard.edu ]

Brief History of the Domain Name System

Jan. 7, 1958 – President Eisenhower requested funds to start ARPA.

(…)

Summer 1975 – The Defense Communications Agency (DCA) took over the management of ARPANET.

(…)

· November 1983 – The rapid growth of the internet caused massive problems in bookkeeping. To deal with this problem a group including Jon Postel, Paul Mockapetris and Craig Partrige published RFC 882 which created the domain name system (DNS) to make Internet navigation easier. With DNS, users can type host names such as “USC-ISIF” instead of “10.2.0.52.” Every Address would have information from specific to general.

 

22.02.2024 - 04:12 [ DNScheck.tools ]

dnscheck.tools – inspect your dns resolvers

(…)

21.02.2024 - 20:48 [ servers.OpenNic.org ]

OpenNIC Public Servers

Hostname (Click for details)
IPv4
IPv6
Owner(s)
Added Status

21.02.2024 - 20:30 [ OpenNic.org ]

OpenNIC – Looking for an open and democratic alternative DNS root? Concerned about censorship?

OpenNIC might be the solution for you!

Your closest servers: (view all)

12.02.2024 - 17:41 [ HelpNetSecurity.com ]

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

(April 6, 2020)

Asymmetric encryption is used during the “handshake”, which takes place prior to any data being sent. The handshake determines which cipher suite to use for the session – in other words, the symmetric encryption type – so that both browser and server agree. The TLS 1.2 protocol took multiple round trips between client and server, while TLS 1.3 is a much smoother process that requires only one trip. This latency saving shaves milliseconds off each connection.

11.02.2024 - 20:00 [ Europäische Kommission / European Commission ]

Testa – Interactive Map

Who is using TESTA?

To see which EU countries are already using our TESTA solution, click on a country in the map below. This is not an exhaustive list of public administrations but already demonstrates the value of TESTA in each country. You will get a list of currently identified national/local public authorities connected via their in-country national governmental network to reach TESTA – associated with the applications being used by these public administrations through TESTA;

The other groups using TESTA consist of

– The EU Institutions : European Parliament / European Council / Council of the European Union / European Commission / Court of Justice of the European Union (CJEU) / European Central Bank (ECB) / European Court of Auditors (ECA) / European External Action Service (EEAS) / European Economic and Social Committee (EESC) / European Committee of the Regions (CoR) / European Investment Bank (EIB) / Computer Emergency Response Team (CERT) / Publications Office.

– the EU Agencies.

11.02.2024 - 19:40 [ Wikipedia ]

Trans European Services for Telematics between Administrations

The Trans European Services for Telematics between Administrations (TESTA) system is the private IP-based network of the European Union. TESTA is a telecommunications interconnection platform for secure information exchange between the European and member states administrations. It is currently handled within the ISA² European programme.

(…)

1st generation (TESTA): 1996–2000

11.02.2024 - 19:37 [ Patrick Breyer ]

CDU und SPD verlängern freiwillige Chatkontrolle durch Big Tech-Konzerne

(07.02.2024)

Das EU-Parlament hat heute grünes Licht für eine Verlängerung der umstrittenen Chatkontrolle durch US-Internetkonzerne bis 2025 gegeben. Dagegen stimmten Piraten, Linke, FDP, Grüne, AfD und zwei SPD-Abgeordnete, während CDU und fast alle SPD-Abgeordneten zustimmten. Das Parlament will sich mit dem Rat noch in der nächsten Woche einig werden, um die Verlängerung im Schnellverfahren noch vor der Europawahl zu verabschieden.