[{"data":1,"prerenderedAt":442},["ShallowReactive",2],{"project-36754366":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":26,"sentiment":27,"stance_mix":28,"scored_comments":32,"aspects":33,"strip":41,"post_text":43,"what":44,"said":57,"maker_in_thread":156,"shape":161,"grid":165,"attempts":405,"same_week":406,"maker_shows":38,"maker_hidden":433,"reader_version":434,"card":435},"36754366","youpay","Use DNS TXT to share information","title","Show HN: Use DNS TXT to share information",null,"danradunchev",1689570387,2023,143,91,443,3109,15,"notable","infrastructure","dns tunneling","cli",[23,20,24,25],"dns txt records","base64","censorship circumvention","mixed",-0.225,{"positive":29,"neutral":30,"mixed":31,"critical":30},3,9,0,21,{"privacy":34,"idea":36,"execution":39,"performance":40},{"positive":31,"critical":35},8,{"positive":37,"critical":38},2,1,{"positive":31,"critical":31},{"positive":31,"critical":31},[38,31,31,42,29,42,42,31,29,29,31,31,31,31,31,31,31,31,31,31,31,31,31,31,38,31,31,29,31,38,38,38,38,38,29,31,29,31,31,29],5,"dig +short TXT youpay.govorenefekt.com @1.1.1.1 | fold -s\n\nYou can base64 encode an image, split to TXT records and send over Internet. Useful in certain circumstances. Like when one of the communicating parties is under severe censorship.",{"problem":45,"audience":9,"pricing":9,"motivation":51,"time_to_build":9,"stack":55,"openness":56,"stage":56,"team_size":56},{"value":46,"source":47,"evidence":48},"Sending data when one party is under severe censorship","maker",[49],{"id":50},"post",{"value":52,"source":47,"evidence":53},"Demonstrate using DNS TXT records to share information under censorship",[54],{"id":50},[],"unknown",{"praise":58,"objections":71,"requests":113,"questions":114,"alternatives":126},[59],{"value":60,"source":61,"evidence":62},"Interesting or fun DNS hack; DNS is used as intended","commenter",[63,67],{"id":64,"by":65,"text":66},"36758213","runjake","It was pretty common for orgs to use TXT and HINFO (“host info”) records up through the 1990s. I still use them at work to provide hints and more information but the current…",{"id":68,"by":69,"text":70},"36756883","madmax108","It's always amusing to see DNS \"hackery\"[1] like this, and always makes me go back to DNS Toys (https:\u002F\u002Fwww.dns.toys\u002F), which generated a huge discussion on HN a year ago [2] ---…",[72,87,102],{"value":73,"source":61,"evidence":74},"DNS is insecure and unencrypted; TXT records can be spoofed or intercepted",[75,79,83],{"id":76,"by":77,"text":78},"36761866","gunapologist99","You could also securely hash a username and password together with something like argon2ID, and then authenticate users by seeing if the base64'ed TXT record exists. No need to…",{"id":80,"by":81,"text":82},"36757633","hannob","That is... interesting that they do not even use HTTPS or any type of signature for that info. So a man in the middle could prevent updates from happening, and freshclam wouldn't…",{"id":84,"by":85,"text":86},"36758242","toast0","clamav.net, like most domains, doesn't enable DNSSEC. Further, as designed, local resolvers don't validate DNSSEC, they just ask the recursive resolver to; a MITM between the…",{"value":88,"source":61,"evidence":89},"DPI and DNS monitoring make this easy to detect",[90,94,98],{"id":91,"by":92,"text":93},"36757335","breakingcups","DPI will make short work of your unencrypted DNS records..",{"id":95,"by":96,"text":97},"36757848","badrabbit","OP, this is trivial to detect. DNS command and control is a thing malware\u002Fattackers use which among other things include TXT records,DoH, long A or AAAA records and many other…",{"id":99,"by":100,"text":101},"36762281","LinuxBender","A word of caution, don't try this in a corporate environment. Many corporate firewalls will generate security alerts on high DNS request rates. PaloAlto PAN's specifically have…",{"value":103,"source":61,"evidence":104},"Captive portals and censors can hijack DNS queries",[105,109],{"id":106,"by":107,"text":108},"36756238","1vuio0pswjnm7","\"Like when one of the parties is under severe censorship.\" What if the censor hijacks DNS queries. This is also done outside the realm of censorship, e.g., hotel wifi networks.",{"id":110,"by":111,"text":112},"36755624","candiddevmike","Relying on DNS is not recommended when under severe censorship",[],[115],{"value":116,"source":61,"evidence":117},"Whether DNSSEC would prevent tampering",[118,122],{"id":119,"by":120,"text":121},"36758078","mrweasel","Won't DNSSEC prevent MITM attacks in this case? From https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FDomain_Name_System_Security_Extensions - \"DNSSEC can protect any data published in the DNS,…",{"id":123,"by":124,"text":125},"36762416","8organicbits","> DANE and DNSSEC are horrible bodges that don't actually do anything useful or in a secure way. Adoption is extremely poor, usability is horrible, and the approach used is quite…",[127,138,145,149],{"value":128,"source":61,"evidence":129},"iodine for IP over DNS",[130,134],{"id":131,"by":132,"text":133},"36755831","Hnrobert42","The iodine protocol allows bi-directional ipv4 traffic over DNS. https:\u002F\u002Fgithub.com\u002Fyarrick\u002Fiodine",{"id":135,"by":136,"text":137},"36755853","mobilio","Get ready for iodine https:\u002F\u002Fgithub.com\u002Fyarrick\u002Fiodine Or IP-over-DNS",{"value":139,"source":61,"evidence":140},"SoftEther VPN over DNS or ICMP",[141],{"id":142,"by":143,"text":144},"36758406","xyx0826","Not a proxy but SoftEther VPN supports connection over DNS and\u002For ICMP. This is meant for circumventing firewalls.…",{"value":146,"source":61,"evidence":147},"DNS Toys",[148],{"id":68,"by":69,"text":70},{"value":150,"source":61,"evidence":151},"Hesiod",[152],{"id":153,"by":154,"text":155},"36765895","puppetmaster","I am just stopping by to say that this is actually a thing. It is called hesiod and works great in small, maybe air-gapped networks. As a side note, anything security related…",{"comments":38,"answered":31,"key":157},[158],{"id":159,"text":160},"36754375","The quote used is from excellent article here: https:\u002F\u002Fbgr.com\u002Ftech\u002Fthe-internet-isnt-free-it-never-was-and-it-probably-never-will-be\u002F",{"commenters":162,"max_depth":163,"maker_replies":38,"first_comment_mins":38,"lifespan_hours":164},61,7,70,[166,168,172,174,175,178,181,183,186,188,190,194,198,202,204,205,208,210,213,216,218,222,226,229,233,235,238,240,242,243,248,250,251,252,254,256,259,261,263,265,267,269,271,274,277,281,283,287,289,291,294,297,300,303,306,307,308,311,314,317,320,322,325,328,332,336,338,341,343,345,347,350,354,357,360,361,363,366,370,373,376,379,382,384,388,391,393,395,397,400,402],[76,31,38,167,77,31],"project\u002Fcritical\u002Fprivacy",[169,31,31,170,171,31],"36762228","commenter\u002Fneutral\u002Fprivacy","blechinger",[173,31,31,170,124,31],"36762355",[123,31,31,170,124,31],[176,31,31,170,177,31],"36762983","igorhvr",[179,31,31,180,124,31],"36764085","commenter\u002Fneutral\u002Fnone",[182,31,31,180,77,31],"36786149",[184,31,31,180,185,31],"36796621","tptacek",[153,31,42,187,154,31],"project\u002Fpositive\u002Fidea",[189,31,31,170,77,31],"36786072",[191,38,29,192,193,31],"36755745","project\u002Fneutral\u002Fexecution","fanf2",[195,38,29,196,197,31],"36761141","project\u002Fneutral\u002Fidea","hashstring",[199,37,42,200,201,31],"36755111","maker\u002Fpositive\u002Fnone","dormento",[203,37,31,180,193,31],"36755773",[64,29,42,187,65,31],[206,29,31,180,207,31],"36761533","whartung",[209,29,31,180,65,31],"36761876",[211,29,31,180,212,31],"36767602","toomuchtodo",[214,29,29,196,215,31],"36762485","Eduard",[131,217,29,196,132,31],4,[219,217,31,220,221,31],"36756108","other\u002Fneutral\u002Fnone","c7DJTLrn",[223,217,29,224,225,31],"36756294","project\u002Fneutral\u002Fperformance","ale42",[227,217,31,228,221,31],"36756407","commenter\u002Fneutral\u002Fperformance",[230,217,31,231,232,31],"36756681","other\u002Fneutral\u002Fperformance","michaelmior",[234,217,31,180,225,31],"36759078",[236,217,31,220,237,31],"36757442","contravariant",[239,217,31,220,85,31],"36758309",[241,217,31,180,237,31],"36758617",[68,42,31,220,69,31],[244,245,31,246,247,31],"36757317",6,"other\u002Fneutral\u002Fidea","EnglishLFC",[80,245,31,249,81,31],"other\u002Fcritical\u002Fprivacy",[119,245,31,170,120,31],[84,245,31,170,85,31],[253,245,31,170,193,31],"36758334",[255,245,31,170,185,31],"36761524",[257,245,31,170,258,31],"36758558","egberts1",[260,245,31,170,85,31],"36758770",[262,245,31,170,258,31],"36758908",[264,245,31,170,185,31],"36761535",[266,245,31,180,215,31],"36762532",[268,245,31,170,120,31],"36760551",[270,245,31,170,185,31],"36761516",[272,245,31,170,273,31],"36762237","devrand",[275,245,31,170,276,31],"36763629","mike_d",[278,245,31,279,280,31],"36761419","other\u002Fneutral\u002Fprivacy","omoikane",[282,245,31,170,258,31],"36758531",[284,245,31,285,286,31],"36760633","commenter\u002Fcritical\u002Fprivacy","orangepurple",[288,245,31,170,258,31],"36771513",[290,245,31,170,258,31],"36790443",[292,245,31,180,293,31],"36762398","WorldMaker",[295,245,31,180,296,31],"36764095","freedude",[298,163,31,220,299,31],"36757878","RajT88",[301,163,31,220,302,31],"36757912","tekknolagi",[304,163,31,220,305,31],"36757932","smashed",[99,163,38,167,100,31],[142,163,31,246,143,31],[309,163,31,246,310,31],"36762313","fruitreunion1",[312,163,31,180,313,31],"36758585","andrelaszlo",[315,163,31,316,310,31],"36762288","commenter\u002Fneutral\u002Fidea",[318,163,31,220,319,31],"36760845","philipwhiuk",[321,163,31,220,77,31],"36761656",[323,35,29,196,324,31],"36756196","ahachete",[326,30,31,220,327,31],"36756704","laserlight",[329,330,31,220,331,31],"36755825",10,"xabi",[333,334,31,220,335,31],"36755884",11,"knagy",[95,337,38,167,96,31],12,[339,337,31,180,340,31],"36758578","ngc6677",[342,337,31,180,96,31],"36760199",[106,344,38,167,107,31],13,[110,346,38,167,111,31],14,[348,346,31,180,349,31],"36755925","PinguTS",[351,346,38,352,353,31],"36756371","project\u002Fcritical\u002Fidea","detourdog",[355,346,38,167,356,31],"36757606","exabrial",[358,346,31,180,359,31],"36779381","acuozzo",[91,17,38,167,92,31],[362,17,38,167,124,31],"36762512",[159,364,31,365,10,38],16,"maker\u002Fneutral\u002Fnone",[367,368,29,196,369,31],"36757931",17,"nigamanth",[371,372,31,220,356,31],"36757583",18,[374,372,31,220,375,31],"36757695","threesevenths",[377,372,31,220,378,31],"36757706","CrLf",[380,372,31,220,381,31],"36762559","sgjohnson",[135,383,29,196,136,31],19,[385,386,31,220,387,31],"36761384",20,"AtNightWeCode",[389,386,31,220,390,31],"36761429","donselaar",[392,386,31,220,197,31],"36761445",[394,386,31,180,387,31],"36761893",[396,386,31,170,197,31],"36765284",[398,386,31,279,399,31],"36761507","thewataccount",[401,386,31,220,124,31],"36762568",[403,32,29,196,404,31],"36762920","nathancahill",[],[407,412,417,421,425,429],{"id":408,"name":409,"points":410,"category":411},"36707877","Free Music Demixer",190,"creative",{"id":413,"name":414,"points":415,"category":416},"36750083","Automorphic",174,"ai",{"id":418,"name":419,"points":420,"category":19},"36788210","Infisical",131,{"id":422,"name":423,"points":14,"category":424},"36786239","gmi100","dev_tools",{"id":426,"name":427,"points":428,"category":19},"36758292","Peeng",84,{"id":430,"name":431,"points":432,"category":424},"36738295","PikaTorrent",65,false,"v2",{"id":436,"name":5,"line":6,"ai":433,"cat":19,"year":12,"points":13,"comments":14,"rec":26,"s":437,"top":17,"kw":438,"maker":10,"domain":439,"tier":18,"attempts":31,"strip":440,"url":-1,"mix":441,"praise":60,"objection":73,"sub":20},36754366,-0.22,[23,20,24,25],"","1005355033000000000000001003011111303003",[29,30,31,30],1793991069540]