2

I am based outside of the US, but I still want to watch Netflix. So I am thinking about signing up a DNS service such as unblocked-us, but I worry that as I am now querying an unknown ( relative to Google DNS, that is) DNS server, my details over the internet may not be secured, as the DNS service provider, or hackers can hack into the DNS server and leak my browsing habits and my other private information.

What do you think? Do you think that my fear is warranted?

| improve this question | | | | |
  • I'm not sure what you mean... Why are you calling that DNS (en.wikipedia.org/wiki/Domain_Name_System)? It seems like a remote http proxy, is all... And the rest of the question also seems confused, I think you misunderstand most of the terms you used. – AviD Dec 18 '13 at 11:03
  • @AviD The asker is correct in this case, it is a DNS service not a proxy or VPN service. They handle the DNS requests and then resolve them in their own way. – Gerve May 10 '14 at 11:12
  • @Gerve I'm not sure what you're saying. Are you disagreeing with Chris's answer below? – AviD May 10 '14 at 22:46
  • @AviD no I agree with Chris's answer, but I disagree with your comment. Unblock US operate a DNS server that allows clients to bypass geo IP restrictions from media providers. When their DNS server receives requests to Netflix they respond with their own proxy IPs. The asker was correct in describing the service as a DNS server. – Gerve May 11 '14 at 19:48
  • @Gerve what you describe is really both - the DNS server to actively create a (MitM) proxy for the client, which is the core service. Just because they use DNS to hijack the connection, doesn't mean its not a proxy service. – AviD May 13 '14 at 8:33
7

From what I understand, unblocked-us is setup by pointing your computer to their DNS server. Their DNS server answers ALL DNS requests with their own servers, thus becoming a proxy/MITM.

E.g. you want to goto Youtube.com. This would resolve to 173.194.112.104 in a regular DNS server. However going through Unblocked-us DNS server they would yield a different reply, their own IP address. This can be illustrated better with the nslookup command:

nslookup netflix.com 8.8.8.8 (Google DNS)
Server:  google-public-dns-a.google.com
Address:  8.8.8.8
Non-authorative answer: 
Name:    netflix.com
Address:  69.53.236.17

nslookup netflix.com 208.122.23.22 (Unblock-us)
Server:  UnKnown
Address:  208.122.23.22
Name:    netflix.com
Addresses:  173.208.170.14
      192.227.246.14
      204.12.200.14
      67.216.222.14
      172.245.210.14

This is absolutely dangerous. You are not only querying someone else's DNS server, you are actually proxying everything through their servers as well. Whether you want this or not is up for you to decide.

| improve this answer | | | | |
  • 2
    It should be noted that secure connections (SSL) will remain secure as long as you pay attention to the domains and certificates (which you should do anyway). – Vatev Dec 18 '13 at 11:31
  • 1
    You give this provider about the same trust as you give your local ISP, e.g. both have nearly full control over your traffic and can manipulate what they want (except SSL, unless they get a CA certificate somehow). If both are entitled to this level of trust you must decide for yourself. – Steffen Ullrich Jan 17 '14 at 21:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.