Contact Me By Email

Showing posts with label Domain Name System. Show all posts
Showing posts with label Domain Name System. Show all posts

Friday, December 03, 2010

WikiLeaks Rebounds as New Hosting Provider Seeks Protection - PCWorld

WikiLeaks Rebounds as New Hosting Provider Seeks Protection - PCWorld

WikiLeaks appears to be quickly taking steps to reduce its reliance on Internet infrastructure in the U.S. as it battles to keep secret diplomatic cables online while its new French hosting provider is seeking court protection.

Early on Friday, WikiLeaks began using a new domain name, WikiLeaks.ch, which is owned by The Pirate Party Switzerland, a group that is apparently sympathetic to the controversial website.

Since it began posting classified U.S. diplomatic cables, WikiLeaks has come under consistent denial-of-service attacks that have aimed to shut down the release of the documents.

It has also faced problems with its hosting providers. The site briefly used Amazon.com's hosted Web Services, which caused U.S. Senator Joe Lieberman, a Connecticut Independent, to criticize the company. Amazon cut WikiLeaks, denying that it did so under political pressure and saying instead that the site violates its terms of service. After Amazon, Bahnhof Internet AB in Uppsala, Sweden, hosted WikiLeaks.

Amid the hosting problems, WikiLeaks was abandoned by its DNS (Domain Name System) provider on Thursday due to sustained attacks. One of its domain names, WikiLeaks.org, no longer works after a subsidiary of Dynamic Network Services called EveryDNS.net terminated that DNS.

EveryDNS.net said the attacks were threatening the reliability of its infrastructure, which is used for 500,000 other websites.

But WikiLeaks is remaining on the run in what appears to be a fast-moving, constantly shifting effort to keep online.

As of Friday, WikiLeaks.ch resolved to an IP (Internet protocol) address, (http://88.80.13.160) that then redirects to an IP address in France, (http://213.251.145.96), said Paul Mutton, a security analyst with Netcraft.

The latter address is allocated to the French hosting provider OVH. The company has delegated a block of 16 IP addresses to WikiLeaks, "which suggests more than a temporary relationship between the two organisations," Mutton wrote on Netcraft's blog.

OVH's CEO, Octave Klaba, wrote on Friday in an e-mail to the company's customers that WikiLeaks has been hosted on its infrastructure since early Thursday. A person ordered a dedicated server and "protection against attack," paying less than €150 (US$198) on a credit card, Klaba wrote.

The order was made through OVH's automated systems. The company found out that WikiLeaks was hosted on its infrastructure on Thursday "from the press," Klaba wrote. OVH is neither for or against WikiLeaks, he wrote, and will fulfill its contract with the customer.

"He is hosting WikiLeaks," Klaba wrote. "Legally speaking, OVH is not the host of this site. OVH is simply the provider of the service the customer ordered. In short, the story is banal."

Nonetheless, Klaba complained about political pressure to shut the site down, and has asked the courts for an urgent declaratory ruling on its legality. The ruling should be released Friday or Saturday, he wrote. France's Minister of Industry Eric Besson has reportedly asked advisers to find a way to have the site removed from French territory.

In an interview, Mutton said that having 16 IP addresses on OVH's network would make WikiLeaks more resilient to an attack, as WikiLeaks can change which of those IP addresses WikiLeaks.ch redirects to.

"It gives them flexibility to hop around IP addresses instantly," Mutton said.

WikiLeaks is also using a nameserver called "ns.WikiLeaks.ch." But despite EveryDNS.net's actions on Friday, it appears the nameserver is using services from that company.

"I think it's curious that they have chosen to use EveryDNS again, given that EveryDNS terminated DNS services for their other domain, WikiLeaks.org, earlier this morning," Mutton said.

Nonetheless, the changes make it appear that WikiLeaks want to ensure their infrastructure is not reliant on servers in the U.S. or on services provided by U.S. companies, Mutton said.

"WikiLeaks.ch will be hard for the U.S. government to influence," Mutton said.
Enhanced by Zemanta

WikiLeaks fights to stay online after US company withdraws domain name | Media | guardian.co.uk

WikiLeaks fights to stay online after US company withdraws domain name | Media | guardian.co.uk

Everydns.net says attack against leaks site endangered other customers' service – effectively pushing site off the web

The US was today accused of opening up a dramatic new front against WikiLeaks, effectively "killing" its web address just days after Amazon pulled the site from its servers following political pressure.

The whistleblowers' website went offline for the third time in a week this morning, in the biggest threat to its online presence yet.

Joe Lieberman, chairman of the Senate's committee on homeland security, earlier this week called for any organisation helping sustain WikiLeaks to "immediately terminate" its relationship with them.

On Friday morning, WikiLeaks and the cache of secret diplomatic documents that have proved to be a scourge for governments around the world were only accessible through a string of digits known as a DNS address. The site later re-emerged with a Swiss domain, WikiLeaks.ch.

Julian Assange this morning said the development is an example of the "privatisation of state censorship" in the US and is a "serious problem."

"These attacks will not stop our mission, but should be setting off alarm bells about the rule of law in the United States," he warned.

The California-based internet hosting provider that dropped WikiLeaks at 3am GMT on Friday (10PM EST Thursday), Everydns, says it did so to prevent its other 500,000 customers of being affected by the intense cyber attacks targeted at WikiLeaks.

The site this morning said it had "move[d] to Switzerland", announcing a new domain name – wikileaks.ch, with the Swiss suffix. However, the new address still only points to an IP address, suggesting WikiLeaks has been unable to quickly find a new hosting provider.

The Wikileaks.ch domain name, which only surfaced on Friday morning, is being served by the Swiss Pirate Party. And the routing to it is still being done by everydns.

Late yesterday evening Tableau Software, a company which published data visualisations, pulled one of its images picturing the WikiLeaks diplomatic cables at the request of Senator Lieberman. Writing on the company's blog, Elissa Fink said: "Our decision to remove the data from our servers came in response to a public request by Senator Joe Lieberman, who chairs the Senate Homeland Security Committee, when he called for organisations hosting WikiLeaks to terminate their relationship with the website."

Mark Stephens, the London-based lawyer acting on behalf of Assange, wrote on Twitter after the shutdown: "Pressure appears to have been applied to close the WikiLeaks domain name."

Andre Rickardsson, an expert on computer security at Sweden's Bitsec Consulting, told Reuters: "I don't believe for a second that this has been done by everydns themselves. I think they've been under pressure," he said, apparently referring to US authorities.

A new Germany-based WikiLeaks domain – wikileaks.dd19.de – also appeared on Friday morning, with its data apparently hosted in California. People have also taken to setting up alternative domain names that point to the WikiLeaks address. Robin Fenwick, a UK-based web services director, this morning launched Wikileeks.org.uk – a "joke domain" that points to the WikiLeaks DNS address.

In a statement on its website, the free everydns.net service said that the "distributed denial of service" (DDOS) attacks by unknown hackers – who are trying to knock WikiLeaks off the net – meant that the leaks site was interfering with the service being provided to other users. That in turn meant that WikiLeaks had broken everydns.net's terms of service, and it cut the site off at 3am GMT on Friday (10PM EST Thursday).

DNS services translate a website name, such as guardian.co.uk, into machine-readable "IP quads" – in that case 77.91.249.30, so that http://77.91.249.30 will show the Guardian site. If the DNS fails, the site is only reachable via IP address – but WikiLeaks has not yet provided one via Twitter or other means.

Everydns.net said that the attacks – which have been going on all week, and led the site to temporarily host its services on Amazon's more resilient EC2 "cloud computing" service – "threaten the stability of the EveryDNS.net infrastructure, which enables access to almost 500,000 other websites".

WikiLeaks was given 24 hours' notice of the termination, and everydns said: "Any downtime of the wikileaks.org website has resulted from its failure to use another hosted DNS service provider."

The move comes after several days of WikiLeaks coming under a determined DDOS attack, apparently from hackers friendly to the point of view of the US government, which has disparaged the site's leaking of thousands of US diplomatic cables.

US companies have also come under intense political pressure to remove any connection to, or support for, WikiLeaks. Amazon ended its hosting of the cables on its EC2 cloud computer service earlier this week, but last night insisted in a blogpost that its decision was not due to pressure from Senator Joe Lieberman, who has called for the removal of the data – and who has influenced at least one other US company to withdraw support for WikiLeaks data.

In a blogpost late on Thursday, Amazon said reports that government inquiries prompted it to remove the data were "inaccurate".

Amazon said:

"[Amazon Web Services] does not pre-screen its customers, but it does have terms of service that must be followed. WikiLeaks was not following them. There were several parts they were violating. For example, our terms of service state that "you represent and warrant that you own or otherwise control all of the rights to the content… that use of the content you supply does not violate this policy and will not cause injury to any person or entity". It's clear that WikiLeaks doesn't own or otherwise control all the rights to this classified content. Further, it is not credible that the extraordinary volume of 250,000 classified documents that WikiLeaks is publishing could have been carefully redacted in such a way as to ensure that they weren't putting innocent people in jeopardy."

It noted that:

"When companies or people go about securing and storing large quantities of data that isn't rightfully theirs, and publishing this data without ensuring it won't injure others, it's a violation of our terms of service, and folks need to go operate elsewhere."

But as commentators have pointed out, that stance is contradicted by the fact that Amazon has previously hosted the "war logs" from WikiLeaks which contained data about the US wars in Afghanistan and Iraq.

Connecting to WikiLeaks is presently not possible until it gets a new DNS service. WikiLeaks itself said on Twitter that the ending of DNS services was allegedly due to "claimed mass attacks" and called for further donations to "keep us strong".
Enhanced by Zemanta

Wednesday, September 08, 2010

State of the Art - OpenDNS Simplifies Life for Web Users - NYTimes.com

A screenshot of a 'phishing blocked' pageImage via WikipediaState of the Art - OpenDNS Simplifies Life for Web Users - NYTimes.com
I’m about to make your life better. No need to thank me.
But first, a warning: On the way to understanding how your life will get better, you’ll have to read about some technical, fairly arcane topics. Trust me: it’ll be worth it.
In this case, the topic is your Web browsing, and the magic wand is a free service called OpenDNS.
You know how every Web site has an address, like www.google.com or www.nytimes.com? Turns out that’s just a fakeout. It’s a convenient crutch for you, the human with limited brain capacity.
Behind the scenes, the actual address is a string of numbers (called an I.P. address, for Internet protocol) that looks something like this: 74.125.53.100. (That happens to be Google’s address.)
Nobody can remember those addresses, though they are no longer than a phone number, so the Web’s thoughtful designers came up with a secondary system: plain-English addresses like www.whatever.com. When you type that into your browser, a computer at your Internet provider performs a quick lookup. “Aha,” it says to itself in its little digital way, “you just typed www.google.com. What you really want, of course, is 74.125.53.100. Please hold; I’ll connect you.”
That, in a nutshell, is how D.N.S. works. (It stands for domain name system, in case that helps.)
Unfortunately, from time to time, your Internet provider’s D.N.S. computer goes down. To you, it seems that the Web itself has gone out, because you can’t pull up any sites at all. In December 2008, for example, 1.2 million Los Angeles citizens thought that the entire Web had gone offline, because of a crashed Time Warner D.N.S. computer.
That story was gleefully provided by OpenDNS, the one-of-a-kind company with a killer idea: to provide a free, alternative D.N.S. service that works better than your Internet provider’s. Faster, more reliably and with more features. You don’t pay anything, sign up for anything or install anything. All you have to do is make one change to your network settings, and you get all of these benefits:
NO D.N.S. CRASHES The company claims that in its five-year history, its D.N.S. computers have had zero downtime. In fact, had you been using OpenDNS in 2008, the Time Warner crash would not have affected you at all. You’d have kept right on surfing while your next-door neighbors were gnashing their teeth and playing board games.
A similar feature called SmartCache lets you pull up individual Web sites even when, because of broken addresses, they are unavailable to everyone else.
FASTER PAGES To speed up the conversion of plain-English addresses to numeric ones, every Internet provider caches, or preloads, the addresses of thousands of the most popular Web sites. This trick can save you microseconds or fractions of seconds with every page you open. When you visit a site that’s not on that “most popular” list, though, you may wait a bit.
But OpenDNS caches the entire Web. Every Web site appears slightly faster. If you don’t actually feel the difference, you can measure it using Google’s free Namebench program. It told me that OpenDNS was performing that looking-up business 14.8 percent faster than what I’d been getting before.
TYPO CORRECTIONS As long as OpenDNS is inserting itself between you and the Web, it can do you some favors. One is correcting typos. If you type “nytimes.cmo” or “wikipedia.og,” for example, OpenDNS quietly and instantly corrects the typo and sends you where you wanted to go. Most of the time, you never even realize your fingers misfired.
Unfortunately, this feature auto-fixes only the suffix (.com, .org, .gov and so on). If you type “dinseyworld.com” or “wikipeida.org,” you’re on your own.
PHISHING PROTECTION Phishing is the Internet scheme where you get a fake e-mail note from your bank about a problem with your account. When you click the link to correct the problem, you get a fake Web site, designed to look just like your bank’s — and by logging in, you unwittingly supply your name and password to the bad guys.
OpenDNS intercepts and blocks your efforts to visit the fake sites. It works like a charm.
SHORTCUTS Web address shortcuts are short, memorable abbreviations for your favorite sites. You can set up “nyt” so that, when you type it into your address bar, you go to a much longer Web address like http://www.nytimes.com/pages/todayspaper/index.html.
Shortcuts are great. There’s limited space on your bookmarks toolbar, and the bookmarks menu is clumsy for people who like to keep their hands on the keyboard. And unlike the similar feature in Firefox, OpenDNS’s shortcuts work in any browser on any computer or phone in the house.
PARENTAL CONTROLS The latest OpenDNS feature is site-blocking. Here again, having an account means that you can create a setting that applies to every computer in the house — and block your choice of 57 categories of Web sites, including Pornography, Nudity, Lingerie, Instant Messaging, File Sharing, Game and Humor. (Honestly. What kind of parent would block humor?)
How can OpenDNS possibly track every Web site on earth and put it into the right 57 categories? It doesn’t. Its fans do. Anyone can submit a site to the master database of categorized sites, whereupon other people vote on its placement. This Wikipedia-style crowdsourcing is ingenious, and, as far as my testing was concerned, bulletproof.
(Teenagers often subscribe to mailing lists that publish the addresses of proxies and anonymizers, special sites that they use to get around traditional Web blockers installed by schools or parents. But I was amused to learn that the engineers at OpenDNS subscribe to those lists, too. They block the proxies as fast as they are created.)
All of this OpenDNS goodness is free, automatic and always improving. Surely there’s a catch. How, for example, does OpenDNS make money?
First, although everything described here is free, the company sells additional services to businesses.
Second, if you type the address of a nonexistent site, OpenDNS throws up the equivalent of Google’s “Did you mean?” screen: a list of sites, provided for (and paid for) by Yahoo, that behave as though you’ve done a search for that term. Presto: more income.
About the only worry anyone seems to have about OpenDNS is about privacy. Already, 20 million people use OpenDNS, according to the company — 1 percent of everyone on the Internet. Even if OpenDNS doesn’t know your name or anything about you, couldn’t it be collecting all kinds of Web traffic data, concocting its evil plans?
Of course, whoever is providing your D.N.S. lookups now (not to mention your bank, phone company and grocery store) could be doing exactly the same thing right now. At a certain point, you have to let go.
The biggest realistic challenge may be setting up OpenDNS in the first place. It involves typing two addresses into the D.N.S. settings page of your computer or router: 208.67.222.222 and 208.67.220.220. That new address directs your computers’ Web requests to OpenDNS’s lookup service.
At OpenDNS.com, the step-by-step instructions take all of two minutes to complete. But fooling around with these network underpinnings may strike some people as intimidating.
You can, if you like, turn on OpenDNS on each computer and phone in your building individually. But it’s much smarter and quicker to make the change on the router itself, the little box that distributes your Internet connection throughout your home. At OpenDNS.com, you’ll find illustrated instructions for each router brand.
In any case, OpenDNS is one of the last great freebies of the Web. It manages to pull off the Google trick: offering, at no charge, incredible utility and speed to the masses — while still finding inoffensive ways to make money. Even if you use only one or two of its features, you’ll find that OpenDNS makes your Web life better.
Come to think of it, you can thank me after all.
________________________________
This is a wonderful service which I have used for a while. I have configured both of my two routers, my MacBook, and my iPod touch to use the Open DNS servers.
John H. Armwood

Tuesday, August 24, 2010

State of the Art - OpenDNS Simplifies Life for Web Users - NYTimes.com

State of the Art - OpenDNS Simplifies Life for Web Users - NYTimes.com
I’m about to make your life better. No need to thank me.
But first, a warning: On the way to understanding how your life will get better, you’ll have to read about some technical, fairly arcane topics. Trust me: it’ll be worth it.
In this case, the topic is your Web browsing, and the magic wand is a free service called OpenDNS.
You know how every Web site has an address, like www.google.com or www.nytimes.com? Turns out that’s just a fakeout. It’s a convenient crutch for you, the human with limited brain capacity.
Behind the scenes, the actual address is a string of numbers (called an I.P. address, for Internet protocol) that looks something like this: 74.125.53.100. (That happens to be Google’s address.)
Nobody can remember those addresses, though they are no longer than a phone number, so the Web’s thoughtful designers came up with a secondary system: plain-English addresses like www.whatever.com. When you type that into your browser, a computer at your Internet provider performs a quick lookup. “Aha,” it says to itself in its little digital way, “you just typed www.google.com. What you really want, of course, is 74.125.53.100. Please hold; I’ll connect you.”
That, in a nutshell, is how D.N.S. works. (It stands for domain name system, in case that helps.)
Unfortunately, from time to time, your Internet provider’s D.N.S. computer goes down. To you, it seems that the Web itself has gone out, because you can’t pull up any sites at all. In December 2008, for example, 1.2 million Los Angeles citizens thought that the entire Web had gone offline, because of a crashed Time Warner D.N.S. computer.
That story was gleefully provided by OpenDNS, the one-of-a-kind company with a killer idea: to provide a free, alternative D.N.S. service that works better than your Internet provider’s. Faster, more reliably and with more features. You don’t pay anything, sign up for anything or install anything. All you have to do is make one change to your network settings, and you get all of these benefits:
NO D.N.S. CRASHES The company claims that in its five-year history, its D.N.S. computers have had zero downtime. In fact, had you been using OpenDNS in 2008, the Time Warner crash would not have affected you at all. You’d have kept right on surfing while your next-door neighbors were gnashing their teeth and playing board games.
A similar feature called SmartCache lets you pull up individual Web sites even when, because of broken addresses, they are unavailable to everyone else.
FASTER PAGES To speed up the conversion of plain-English addresses to numeric ones, every Internet provider caches, or preloads, the addresses of thousands of the most popular Web sites. This trick can save you microseconds or fractions of seconds with every page you open. When you visit a site that’s not on that “most popular” list, though, you may wait a bit.
But OpenDNS caches the entire Web. Every Web site appears slightly faster. If you don’t actually feel the difference, you can measure it using Google’s free Namebench program. It told me that OpenDNS was performing that looking-up business 14.8 percent faster than what I’d been getting before.
TYPO CORRECTIONS As long as OpenDNS is inserting itself between you and the Web, it can do you some favors. One is correcting typos. If you type “nytimes.cmo” or “wikipedia.og,” for example, OpenDNS quietly and instantly corrects the typo and sends you where you wanted to go. Most of the time, you never even realize your fingers misfired.
Unfortunately, this feature auto-fixes only the suffix (.com, .org, .gov and so on). If you type “dinseyworld.com” or “wikipeida.org,” you’re on your own.
PHISHING PROTECTION Phishing is the Internet scheme where you get a fake e-mail note from your bank about a problem with your account. When you click the link to correct the problem, you get a fake Web site, designed to look just like your bank’s — and by logging in, you unwittingly supply your name and password to the bad guys.
OpenDNS intercepts and blocks your efforts to visit the fake sites. It works like a charm.
SHORTCUTS Web address shortcuts are short, memorable abbreviations for your favorite sites. You can set up “nyt” so that, when you type it into your address bar, you go to a much longer Web address like http://www.nytimes.com/pages/todayspaper/index.html.
Shortcuts are great. There’s limited space on your bookmarks toolbar, and the bookmarks menu is clumsy for people who like to keep their hands on the keyboard. And unlike the similar feature in Firefox, OpenDNS’s shortcuts work in any browser on any computer or phone in the house.
PARENTAL CONTROLS The latest OpenDNS feature is site-blocking. Here again, having an account means that you can create a setting that applies to every computer in the house — and block your choice of 57 categories of Web sites, including Pornography, Nudity, Lingerie, Instant Messaging, File Sharing, Game and Humor. (Honestly. What kind of parent would block humor?)
How can OpenDNS possibly track every Web site on earth and put it into the right 57 categories? It doesn’t. Its fans do. Anyone can submit a site to the master database of categorized sites, whereupon other people vote on its placement. This Wikipedia-style crowdsourcing is ingenious, and, as far as my testing was concerned, bulletproof.
(Teenagers often subscribe to mailing lists that publish the addresses of proxies and anonymizers, special sites that they use to get around traditional Web blockers installed by schools or parents. But I was amused to learn that the engineers at OpenDNS subscribe to those lists, too. They block the proxies as fast as they are created.)
All of this OpenDNS goodness is free, automatic and always improving. Surely there’s a catch. How, for example, does OpenDNS make money?
First, although everything described here is free, the company sells additional services to businesses.
Second, if you type the address of a nonexistent site, OpenDNS throws up the equivalent of Google’s “Did you mean?” screen: a list of sites, provided for (and paid for) by Yahoo, that behave as though you’ve done a search for that term. Presto: more income.
About the only worry anyone seems to have about OpenDNS is about privacy. Already, 20 million people use OpenDNS, according to the company — 1 percent of everyone on the Internet. Even if OpenDNS doesn’t know your name or anything about you, couldn’t it be collecting all kinds of Web traffic data, concocting its evil plans?
Of course, whoever is providing your D.N.S. lookups now (not to mention your bank, phone company and grocery store) could be doing exactly the same thing right now. At a certain point, you have to let go.
The biggest realistic challenge may be setting up OpenDNS in the first place. It involves typing two addresses into the D.N.S. settings page of your computer or router: 208.67.222.222 and 208.67.220.220. That new address directs your computers’ Web requests to OpenDNS’s lookup service.
At OpenDNS.com, the step-by-step instructions take all of two minutes to complete. But fooling around with these network underpinnings may strike some people as intimidating.
You can, if you like, turn on OpenDNS on each computer and phone in your building individually. But it’s much smarter and quicker to make the change on the router itself, the little box that distributes your Internet connection throughout your home. At OpenDNS.com, you’ll find illustrated instructions for each router brand.
In any case, OpenDNS is one of the last great freebies of the Web. It manages to pull off the Google trick: offering, at no charge, incredible utility and speed to the masses — while still finding inoffensive ways to make money. Even if you use only one or two of its features, you’ll find that OpenDNS makes your Web life better.
Come to think of it, you can thank me after all.
E-mail: pogue@nytimes.com
______________________________________
This DNS service is highly recommended. I have been using the free version for a while on all of my computers and on my iPod Touch. It is wonderful.
John H. Armwood