this post was submitted on 21 Mar 2025
205 points (99.5% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

59648 readers
229 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

🏴‍☠️ Other communities

Torrenting/P2P:

Gaming:


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 2 years ago
MODERATORS
 

Last December the Court of Milan ordered Cloudflare to block sites added to Italy's Piracy Shield system. Cloudflare sees itself as a neutral intermediary but increasingly frustrated rightsholders say it should play a more active role by assisting their fight against piracy. A decision issued by the same court now requires Google to poison its Public DNS to prevent access to pirate sites. It was handed down on March 11 without Google being heard in the matter.

top 41 comments
sorted by: hot top controversial new old
[–] ExtremeDullard 106 points 1 week ago (4 children)

He who cares about privacy even a little bit and uses Google DNS servers doesn't really care about privacy.

[–] HouseWolf@lemm.ee 16 points 1 week ago (1 children)

I know at least one person who said they use Googles DNS because it stopped them getting pissy letters from their ISP.

Some people only care about privacy to the point were they don't see the immediate consequences for their actions.

[–] darkknight@discuss.online 11 points 1 week ago (1 children)

Lol what? I'd be curious to know the amount of dns queries required for an ISP to complain about this. I'd think it would have to be massive. Also, unless it's in their TOS, they wouldn't really have to comply. The only downside is if they're the only ISP for the user, which sucks and happens.

[–] jatone@lemmy.dbzer0.com 6 points 1 week ago (2 children)

think the pissy letters were about what the user was accessing not how frequently.

[–] med@sh.itjust.works 2 points 1 week ago

And a dnssec policy will solve that for you

[–] darkknight@discuss.online 1 points 1 week ago (1 children)

How would changing dns servers change browsing habits?

[–] jatone@lemmy.dbzer0.com 3 points 1 week ago

huh? im very curious on how your thought processes lead you to that statement from my comments lol.

[–] green@feddit.nl 2 points 1 week ago (1 children)

Google does not automatically mean bad. It is dangerous precedent to blanket ban and remove nuance.

8.8.8.8 is an excellent service, and provides genuine privacy gains. The largest downside being that it is such a massive target for bad-faith and ignorant actors - like the Italian government.

[–] ExtremeDullard 29 points 1 week ago* (last edited 1 week ago) (1 children)

Google does not automatically mean bad

Yes it does.

Google does everything with an angle, and that angle is putting you under surveillance and collecting monetizable data on you.

Google has (or had, maybe?) fantastic products. They're truly great! The translator, the map, Youtube... But they're great for exactly the purpose of luring you into using them, so they can abuse your privacy with them.

Google products are trojan horses: they're irresistible but their true purpose is nefarious.

[–] green@feddit.nl 4 points 1 week ago (1 children)

Like I said prior, there is nuance to be had here.

We agree that Google products are generally a honeypot (good products that lure you in), but which products are honeypots are important.

You very likely want to avoid Chrome, Gemini, and Google Search - but 8.8.8.8 is not a honeypot, it is a loss-leader. You will be lured in from 8.8.8.8 if you say "huh. this is a great service. is there anymore?", but 8.8.8.8 itself is not a malignant service.

[–] 01189998819991197253@infosec.pub 8 points 1 week ago (1 children)

Their EULA states that they log all traffic (originating IP, requested url, and destination IP). for "business purposes" (at least, the last time I read it). Seems like a honeypot to me...

[–] green@feddit.nl 1 points 1 week ago (1 children)

I'll leave the privacy policy here and let people decide for themselves.

They keep two types of logs. An identifiable one which is deleted in 24-48 hours (dns0 and quad9 also do this) and an anonymized one. There is no mention of "business partners"; and it also says explicitly that the information is not used to target ads.

As the privacy policy and service reads, it is not a honeypot. However, Google generally does not act in good faith, so there's no telling if they have 100% adhered to the policy.

No matter, to make calculated and informed decisions, we should have all the facts in order.

[–] umbrella@lemmy.ml 1 points 1 week ago* (last edited 1 week ago)

anonymized data is said to not be so anonymous, depending on how they do it.

[–] umbrella@lemmy.ml 1 points 1 week ago (1 children)

what are some good private dns services i can use that are not google? preferrably outside the us?

[–] med@sh.itjust.works 7 points 1 week ago

Quad9. Swiss based, dnssec available, has beaten blocking orders by Sony before.

They're about as open as resolvers get, and they pretty much released everything they could when courts tried to interfere with them.

This article is basically referencing the same event as OPs article, but after Canal+ expanded the scope of their legal challenge.

[–] Xanza@lemm.ee 1 points 1 week ago

There are ways to use public dns safely. Specifically by running AdGuard Home which filters domains, then forwards your request.

[–] Engywuck@lemm.ee 32 points 1 week ago* (last edited 1 week ago)

From an expat, congrats to Italy for being at the forefront of digital stupidity y (along with Spain).

[–] DaveX64@lemmy.ca 15 points 1 week ago (4 children)

The Pirate community should just abandon DNS altogether and use IP addresses...most of us are savvy enough we don't need that Pablum anyway 🏴‍☠️

[–] green@feddit.nl 14 points 1 week ago* (last edited 1 week ago) (2 children)

Tor itself has a pretty good routing scheme that seems like it could replace DNS entirely. There are obvious (but surmountable) UX issues and there may be scalability issues - but it is 100% worth investigating.

[–] DaveX64@lemmy.ca 8 points 1 week ago (1 children)

FMHY should just distribute an updated HOSTS file, lol 🏴‍☠️

[–] krolden@lemmy.ml 8 points 1 week ago

That's basically what dns is

[–] ICastFist@programming.dev 6 points 1 week ago

The same is true for I2P

[–] dRLY@lemmy.ml 3 points 1 week ago

I was going to comment basically the same thing! Going to need more sites list IP addresses along side their mirrors on whichever sites/chats that they provide them currently.

[–] kylian0087@lemmy.dbzer0.com 3 points 1 week ago (1 children)

No we should all migrate to I2P instead.

[–] DaveX64@lemmy.ca 1 points 1 week ago

I2P

That's pretty cool sounding :)

[–] electric_nan@lemmy.ml 2 points 1 week ago

Or something like OpenNic.

[–] nomugisan@lemmy.dbzer0.com 14 points 1 week ago (1 children)
[–] blinkfink182@lemm.ee 5 points 1 week ago (3 children)

Genuine question: is the performance up to par with Google or cloud flare or quad9? Been looking to move to a more privacy focused dns provider but obviously want to keep performance up too.

[–] oeightsix@lemmy.nz 6 points 1 week ago

Try NextDNS. It was built by Netflix architects. Even at the bottom of the world I have found their ultralow network's performance to be very good.

[–] VitoRobles@lemmy.today 2 points 1 week ago* (last edited 1 week ago) (1 children)

Google and cloudflare has the resources (and servers) for high uptime and speed. Youre going to have to make a trade off.

[–] blinkfink182@lemm.ee 1 points 1 week ago

Definitely understand that. Was just curious how it was for folks.

[–] nomugisan@lemmy.dbzer0.com 1 points 1 week ago

I have no way of knowing. I think they're the same imo

[–] krolden@lemmy.ml 13 points 1 week ago (1 children)

I wish I was cloudflare so I could just say "no"

Like, what are you gonna do about it? We control the internet. Go ahead and try and sue us again but we can just turn off 70% of all websites if we wanted to.

[–] dRLY@lemmy.ml 5 points 1 week ago (1 children)

The Italian national block list keeps causing lots of non-blocked sites from working at all. All because of Cloudflare being used by so many sites. It is basically an issue that is always in TorrentFreak's news feed every other day or so. lol

[–] krolden@lemmy.ml 2 points 1 week ago
[–] Honse@lemmy.dbzer0.com 7 points 1 week ago

The solution to this is to self-host your own DNS server. This will also let you block ads network wide if you throw something like pihole in front of your DNS.

[–] bss03@infosec.pub 5 points 1 week ago* (last edited 1 week ago) (1 children)

I have 8.8.8.8 and 8.8.4.4 in my resolver configuration. I've heard that 9.9.9.9 might not be poisoned like this. Besides running my own DNS (not even on a dare), is there a good way to get uncensored DNS resutls?

[–] dRLY@lemmy.ml 5 points 1 week ago (1 children)

I am not sure if they are also being hit with orders. But Mullvad has some DNS options on their site. Doesn't require having their VPN either. I personally use either the Ad-block or Base ones. Even helps prevent in-app ads from loading in some games. Here is the relevant part of their site with the list of their options:

[–] swelter_spark@reddthat.com 3 points 1 week ago (1 children)

Dnscrypt-proxy lets you select dns servers based on whether they filter traffic, keep logs, use DNSSEC, etc. You can also block specific providers, such as Google or Cloudflare.

[–] dRLY@lemmy.ml 1 points 1 week ago (1 children)

I will have to give that a try. Is this the correct git? https://github.com/DNSCrypt/dnscrypt-proxy

[–] swelter_spark@reddthat.com 2 points 5 days ago

Yep, that's the one.