DNS Screwup Accidentally Extends Great Firewall Of China To Chile And The US?
from the yes,-but-could-you-use-Google? dept
A bit surprised this story didn't get more attention, but apparently some sort of DNS networking "error" meant that certain computers in both the US and Chile came up against the infamous Great Firewall of China -- meaning many sites were suddenly inaccessible (and, one assumes, Google sent folks to Google Hong Kong):Security experts are not sure exactly how this happened, but it appears that at least one ISP recently began fetching high-level DNS (domain name server) information from what's known as a root DNS server, based in China. That server, operated out of China by Swedish service provider Netnod, returned DNS information intended for Chinese users, effectively spreading China's network censorship overseas. China tightly controls access to a number of Web sites, using technology known colloquially as the Great Firewall of China.I'm reminded of the case when Pakistan tried to block YouTube and ended up blocking YouTube around the globe. Just a bit of a scary reminder of how fragile and interconnected the internet can be at times.
The issue was reported Wednesday by Mauricio Ereche, a DNS admin with NIC Chile, who found that an unnamed local ISP reported that DNS queries for sites such as Facebook.com, Twitter.com and YouTube.com -- all of which have been blocked in China -- were being redirected to bogus addresses.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: chile, china, dns, great firewall, us
Reader Comments
Subscribe: RSS
View by: Time | Thread
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re:
Even if you setup your own DNS you still need to point it somewhere, and if that source screws up your still down.
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re:
-- Your comment shows you to the ignorant one.
"Even if you setup your own DNS you still need to point it somewhere, and if that source screws up your still down."
-- Well, Duh. Thank you Capt Obvious.
-- Well, mister know it all ... is that all you've got?
[ link to this | view in chronology ]
Control?
[ link to this | view in chronology ]
Let's get ready to
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Should CHINA even be allowed to operate root DNS
[ link to this | view in chronology ]
Re: removing China from the DNS chain
The true problem is not with China, they've chosen the path that they are on. The problem is with the individuals programming their ISP routers with the wrong AS numbers. Good on them for fixing it quickly, but hopefully they'll do a sanity check before publishing their 'shortest route' algorithm to their users again.
[ link to this | view in chronology ]
Re: Re: removing China from the DNS chain
[ link to this | view in chronology ]
Re: www.b2b2.us
[ link to this | view in chronology ]
Step 2 = ...
Step 3 = PROFIT ?!?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
also expect heavy regulations to get the permission granted
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]