Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There is also now DNS poisoning of high profile sites like Facebook and Twitter. So be sure to use a DNS proxy that is outside China.


> So be sure to use a DNS proxy that is outside China.

This is where many people think wrong. GFW hijacks all UDP port 53 data, and OpenDNS fails like others. You MUST use a clean DNS server inside China or on localhost. Query DNS via IPv6/SSH/VPN/Socks/TOR/TCP.


Yes, I use OpenDNS now, but it fails like others.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: