this post was submitted on 22 Feb 2024
319 points (92.3% liked)
Technology
58303 readers
26 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
How long until they change 8.8.8.8 and break half the internet
I'm just waiting for them to figure out how to inject ads into DNS.
I think they could 🤔
It would be trivially easy.
Request for www.taylorswift.com
Return IP to client for a dynamically created temporary web page that shows a Ticketmaster.com ad with a countdown of 10 seconds and javascript redirect to the actual taylorswift.com IP
But, HTTPS certificates.
Unless they provided overrides for their ads in Chrome, but at that point why do it with DNS.
Google is way ahead of you, they are a certificate authority now, so in theory they can do this right now. Take a look at any site's https certificate and a significant portion of them are now signed by Google Trust Services LLC thanks to Cloudflare using them to generate free https certificates (in addition to letsencrypt). Note that they won't ever pull this trick though because it'll irreversibly damage their reputation.
I think they wouldn't do that, since they could do the redirect within Chrome itself. The only reason they would do this is to grab users on other browsers, but that would mean everyone else stopping to use Google DNS, which means less data to collect or sell.
Yes that would be the purpose.
I agree, which is why I also agree with you why they haven't done it yet, but I was speaking to how they could do it, not the fallout from them doing so.
It's too big to fail now. Advertisers hardcode it into their apps and iot devices to evade DNS adblockers for a while now.
Joke's on them, I block Google DNS in my router, and a bunch of DoH servers (fuck I hate DoH).
DoH and DoT, originally developed to prevent ISP to tamper with DNS query to inject ads, now ironically used by advertisers to evade DNS-based blocking on their ads sdk and iot devices.