205

Last December the Court of Milan ordered Cloudflare to block sites added to Italy's Piracy Shield system. Cloudflare sees itself as a neutral intermediary but increasingly frustrated rightsholders say it should play a more active role by assisting their fight against piracy. A decision issued by the same court now requires Google to poison its Public DNS to prevent access to pirate sites. It was handed down on March 11 without Google being heard in the matter.

all 41 comments
sorted by: hot top controversial new old
[-] ExtremeDullard@lemmy.sdf.org 107 points 1 year ago

He who cares about privacy even a little bit and uses Google DNS servers doesn't really care about privacy.

[-] Xanza@lemm.ee 1 points 1 year ago

There are ways to use public dns safely. Specifically by running AdGuard Home which filters domains, then forwards your request.

[-] green@feddit.nl 1 points 1 year ago

Google does not automatically mean bad. It is dangerous precedent to blanket ban and remove nuance.

8.8.8.8 is an excellent service, and provides genuine privacy gains. The largest downside being that it is such a massive target for bad-faith and ignorant actors - like the Italian government.

[-] ExtremeDullard@lemmy.sdf.org 30 points 1 year ago* (last edited 1 year ago)

Google does not automatically mean bad

Yes it does.

Google does everything with an angle, and that angle is putting you under surveillance and collecting monetizable data on you.

Google has (or had, maybe?) fantastic products. They're truly great! The translator, the map, Youtube... But they're great for exactly the purpose of luring you into using them, so they can abuse your privacy with them.

Google products are trojan horses: they're irresistible but their true purpose is nefarious.

[-] green@feddit.nl 4 points 1 year ago

Like I said prior, there is nuance to be had here.

We agree that Google products are generally a honeypot (good products that lure you in), but which products are honeypots are important.

You very likely want to avoid Chrome, Gemini, and Google Search - but 8.8.8.8 is not a honeypot, it is a loss-leader. You will be lured in from 8.8.8.8 if you say "huh. this is a great service. is there anymore?", but 8.8.8.8 itself is not a malignant service.

[-] 01189998819991197253@infosec.pub 10 points 1 year ago

Their EULA states that they log all traffic (originating IP, requested url, and destination IP). for "business purposes" (at least, the last time I read it). Seems like a honeypot to me...

[-] green@feddit.nl 1 points 1 year ago

I'll leave the privacy policy here and let people decide for themselves.

They keep two types of logs. An identifiable one which is deleted in 24-48 hours (dns0 and quad9 also do this) and an anonymized one. There is no mention of "business partners"; and it also says explicitly that the information is not used to target ads.

As the privacy policy and service reads, it is not a honeypot. However, Google generally does not act in good faith, so there's no telling if they have 100% adhered to the policy.

No matter, to make calculated and informed decisions, we should have all the facts in order.

[-] Engywuck@lemm.ee 32 points 1 year ago* (last edited 1 year ago)

From an expat, congrats to Italy for being at the forefront of digital stupidity y (along with Spain).

[-] DaveX64@lemmy.ca 15 points 1 year ago

The Pirate community should just abandon DNS altogether and use IP addresses...most of us are savvy enough we don't need that Pablum anyway 🏴‍☠️

[-] green@feddit.nl 14 points 1 year ago* (last edited 1 year ago)

Tor itself has a pretty good routing scheme that seems like it could replace DNS entirely. There are obvious (but surmountable) UX issues and there may be scalability issues - but it is 100% worth investigating.

[-] DaveX64@lemmy.ca 8 points 1 year ago

FMHY should just distribute an updated HOSTS file, lol 🏴‍☠️

[-] krolden@lemmy.ml 8 points 1 year ago

That's basically what dns is

[-] ICastFist@programming.dev 6 points 1 year ago

The same is true for I2P

[-] kylian0087@lemmy.dbzer0.com 3 points 1 year ago

No we should all migrate to I2P instead.

[-] DaveX64@lemmy.ca 1 points 1 year ago

I2P

That's pretty cool sounding :)

[-] dRLY@lemmy.ml 3 points 1 year ago

I was going to comment basically the same thing! Going to need more sites list IP addresses along side their mirrors on whichever sites/chats that they provide them currently.

[-] electric_nan@lemmy.ml 2 points 1 year ago

Or something like OpenNic.

[-] nomugisan@lemmy.dbzer0.com 14 points 1 year ago
[-] blinkfink182@lemm.ee 5 points 1 year ago

Genuine question: is the performance up to par with Google or cloud flare or quad9? Been looking to move to a more privacy focused dns provider but obviously want to keep performance up too.

[-] oeightsix@lemmy.nz 6 points 1 year ago

Try NextDNS. It was built by Netflix architects. Even at the bottom of the world I have found their ultralow network's performance to be very good.

[-] VitoRobles@lemmy.today 2 points 1 year ago* (last edited 1 year ago)

Google and cloudflare has the resources (and servers) for high uptime and speed. Youre going to have to make a trade off.

[-] blinkfink182@lemm.ee 1 points 1 year ago

Definitely understand that. Was just curious how it was for folks.

[-] nomugisan@lemmy.dbzer0.com 1 points 1 year ago

I have no way of knowing. I think they're the same imo

[-] krolden@lemmy.ml 13 points 1 year ago

I wish I was cloudflare so I could just say "no"

Like, what are you gonna do about it? We control the internet. Go ahead and try and sue us again but we can just turn off 70% of all websites if we wanted to.

[-] dRLY@lemmy.ml 5 points 1 year ago

The Italian national block list keeps causing lots of non-blocked sites from working at all. All because of Cloudflare being used by so many sites. It is basically an issue that is always in TorrentFreak's news feed every other day or so. lol

[-] krolden@lemmy.ml 2 points 1 year ago
[-] Honse@lemmy.dbzer0.com 8 points 1 year ago

The solution to this is to self-host your own DNS server. This will also let you block ads network wide if you throw something like pihole in front of your DNS.

[-] bss03@infosec.pub 5 points 1 year ago* (last edited 1 year ago)

I have 8.8.8.8 and 8.8.4.4 in my resolver configuration. I've heard that 9.9.9.9 might not be poisoned like this. Besides running my own DNS (not even on a dare), is there a good way to get uncensored DNS resutls?

[-] dRLY@lemmy.ml 5 points 1 year ago

I am not sure if they are also being hit with orders. But Mullvad has some DNS options on their site. Doesn't require having their VPN either. I personally use either the Ad-block or Base ones. Even helps prevent in-app ads from loading in some games. Here is the relevant part of their site with the list of their options:

[-] swelter_spark@reddthat.com 3 points 1 year ago

Dnscrypt-proxy lets you select dns servers based on whether they filter traffic, keep logs, use DNSSEC, etc. You can also block specific providers, such as Google or Cloudflare.

[-] dRLY@lemmy.ml 1 points 1 year ago

I will have to give that a try. Is this the correct git? https://github.com/DNSCrypt/dnscrypt-proxy

[-] swelter_spark@reddthat.com 2 points 1 year ago

Yep, that's the one.

this post was submitted on 21 Mar 2025
205 points (99.5% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

68810 readers
6 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

🏴‍☠️ Other communities

FUCK ADOBE!

Torrenting/P2P:

Gaming:


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 2 years ago
MODERATORS