Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

> > Note: In order for opt-out to work properly, you need to accept a "cookie" indicating that you have opted out of this service. If you use a program that removes cookies, you will have to repeat this opt-out process when the cookie is deleted. The cookie placed on your computer will contain the site name: "http://tmob.search-help.net.

Do you have more information about how this works? I cannot imagine how a cookie would affect whether the DNS server returns NXDOMAIN. The site could possibly do it by IP but then the cookie wouldn't need to exist. If opting out just changes the ads to a 404 that is still DNS hijacking.

The DNS server needs to return NXDOMAIN if a domain does not exist. Nothing else.



I hadn't actually tried using the opt-out, but I did think it was impossible for it to work as described. I tried it just now, and it just replaces the ads with a 404. So it would be more correct to say "There is no opt-out for the DNS hijacking."


Sure there's an opt-out -- don't use their DNS servers. Throw Google's or OpenDNS's into your device's settings.


I guess. It looks like I need to jailbreak my phone to change the DNS server, so if I get around to it I can opt out. It will work as long as the DNS hijacking just returns incorrect results from T-Mobile's DNS server, rather than replacing any NXDOMAIN response from any DNS server.


All port 53/80 traffic is proxied through Harmony anyways...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: