This is a general DNS security thread for anyone willing to discuss, help newbies or learn more about DNS security in general.
Who among you are using DNSSEC [1, 2] already? Why do you use it? What do you use it for? Have you considered TLSA (DANE [3]), SSHFP [4], OPENPGPKEY [5] resource records (RRs) yet?
Perhaps you don't like DNSSEC and instead use DNSCrypt [6] or DNSCurve [7] for encryption of your queries?
Share your thoughts!
Newbies section:
Here are some very basic, newbie friendly, introductory DNSSEC videos:
https://www.youtube.com/watch?v=lTABuMxO2AM
https://www.youtube.com/watch?v=qlto6GfZEvA
DNSSEC uses asymmetric cryptography [8] to securely sign all resource record sets (RRsets) on all authoritative name servers that support DNSSEC. Your local DNSSEC enabled resolver then validates the authenticity of your DNS queries to make sure your query has not been tampered with. This thwarts attacks trying to, for example, redirect you to malicious and compromised servers instead.
If you're thinking about registering your own domain, check if your registrar offers DNSSEC. Some registrars automatically sign your zone, which means you most likely can already add your TLSA RRs and such. Other registrars offer to upload your Delegation Signer (DS) RR, or your public zone signing key (ZSK) / public key signing key (KSK) instead. That's also nice if you wish to just host your own authoritative name server.
[1] https://tools.ietf.org/html/rfc4033
[2] http://www.dnssec.net/
[3] https://tools.ietf.org/html/rfc6698
[4] https://tools.ietf.org/html/rfc4255
[5] https://tools.ietf.org/html/rfc7929
[6] https://www.dnscrypt.org/
[7] https://dnscurve.org/
[8] https://en.wikipedia.org/wiki/Public-key_cryptography
>>60678027
apt-get install dnscrypt-proxy
do I need more?
>>60678115
Really depends on what your goal is here. For DNSCrypt, you completely rely on the server of your choosing.
>>60678304
You can choose to use multiple server
I have set up my router to use DNScrypt + unbound for caching, bretty comfy
Why haven't you taken the iPill yet?
>>60678019
Because I'm not a professional consumer.
>>60678019
>Jeb uses a thinkpad
Pure pottery
>>60678019
Jeb > Drumpf
Just applied to target's electronics department. What am I in for?
If you're not white, prepared to get fucked with. Target is a fascist organization solely devoted to serving white folks with money. They will drive you out within a month OP. Just don't show up.
>>60677947
hopefully the 11th grade
>>60678070
Is this true? I thought Target was a SJW company
If thats the case I might apply there
Why do you people care so much about "botnets". Do you people really have something to hide?
I am being unironic here, I just don't get why its such a big deal.
>>60677917
>>60677917
Because some understand what governments actually are and what are the goals of groups that run them.
javascript hate thread?
javascript hate thread.
>this can easily be done in HTML 4.01 STRICT, but fuck that, lets build this cool jquery ajax (((app)))
i'm not stallman autistic, i do for example enjoy the gmail interface and that's written in javascript, but now i'm trying to buy some gay designer clothes and the fan on my macbook is going like crazy because those faggots thought it was a good idea to let the webstore depend heavily on javascript even though they had no idea what they were doing
>>60677757
You sound like you have no idea about anything related to javascript.
>>60677777
>You sound like you have no idea about anything related to javascript.
>>60677757
install noscript, the best way to stop webshit
post you're installed programs
>>60677749
low iq
this is all you need
>>60677749
>you are installed programs
>"""code"""
>"""HTML5""""
https://www.youtube.com/watch?v=xGmXxpIj6vs
>>60677668
>javascript in the screenshot
1/10
>>60677683
OP BTFO
>>60677668
he's a better programmer than 99% of /g/
>mechanical hard drives on consumer laptops in 2017
why is this allowed?
>>60677190
Normies can't into limited disk space, or expensive storage.
>>60677261
emmc storage is cheap and normies do fine with 32 gb or less on their phones which they're replacing their laptops with btw
>>60677190
Because of macfags that look at computer specs and go
>3.0 GHz processor
>500 GB storage
>Looks bretty gud m8
Objectively the best music player. Only fags will disagree.
http://www.aimp.ru/forum/index.php?topic=52114.0
though I loved it when I was winfag
I cant use it cuz propietary and no linux build
F2K
Why did Canonical give up on Unity?
>>60676365
Because nobody liked it and they tried forcing everyone to use it.
>>60676365
Touchscreen interface for people who don't use touchscreens
because the whole point of Unity was to trojan horse zeitgeist-daemon into people's machines to gather user statistics. Now they're done with that level of analytics.
TN or IPS?
currentDate.Year() > 2004 ? "IPS" : "TN"
TN for gaymen and everything else, IPS if you're a liberal arts fag.
IPS unless poorfag
Opinions /g/?
Ordered a cheap Asus x206ha 11.6 inch laptop for 269€
> Intel Atom x5-Z8350 (1.44GHz, 2M Cache)
> 4 GB RAM
> 32 GB eMMC
> Intel HD 300 Graphics
> Windows 10
> Weights under 1kg or 2.2 pounds for you amerifats
> MicroSD card reader
> Around 11-12 hours of batterylife with moderate usage (real use probs around 8 hours)
Intended for basic backpack travelling, so basic youtube, internet, word, movies, etc. No heavy gaming expect some old names like Baldurs Gate 2, HOMM 4
Intels Atom processors have bad compatibility and support for linux but i believe you can get Arch Linux to work on this laptop (reported issues with sounds drivers and sd card reader).
How fucked am I?
>1366 x 768 TN
trash
>Intel Atom
>youtube, movies
>>60676336
Modern atoms (especially the quad core ones) are on par with old mobile dual core i3 and i5s
Duckduckgo or Startpage? I want to escape the botnet
Install TempleOS
No botnet there.
I use Startpage
>>60676185
>Startpage
>enhanced by Google
Previous >>60670263
This thread is for the discussion of NyaaPantsu (nyaa.pantsu.cat), a free (FOSS) torrent indexer.
The aim of this project is to write a fully featured nyaa.se replacement in golang that anyone will be able to deploy locally or remotely.
FAQ
>https://pastebin.com/Gq9MrJN5
>Why is Pantsu down/error 502?
Most likely because the team is deploying changes. Wait for a bit and refresh the page. It should be mostly stable now.
News
>Added api searching
>Theme fix up is still ongoing but making progress
>Scrapers in progress
>Added untested reset api button
>Now use svgs for icons
>Mods have more mass edit tools
>Filelist tree views properly work
>Elastic search done but needs testing
Dev live server:
>https://dev.pantsu.cat
Database dumps:
>https://nyaa.pantsu.cat/dbdumps
Local Client:
>An anon made a local client in case the online sources are down: instructions and download at
>https://nyanner.net
qBittorrent plugin for Pantsu.
>https://github.com/4chenz/pantsu-plugin
Development roadmap:
>https://trello.com/b/gMJBwoRq/nyaa-pantsu-cat-roadmap
NyaaPantsu Status:
>https://status.pantsu.cat
>Copyrighters wall of shame
https://transparency.pantsu.cat
Development and discussion channel:
>https://github.com/NyaaPantsu/nyaa
>#nyaapantsu on Rizon
>>>/g/nrg
>>60676010
First
>will this ever be finished?
we will never know
>>60672865
This too much effort for just one person, wtf.
Be honest, anon. You did it. You wanted to hang with the cool kids so you did the retarded thing and bought a 7600k or a 7700k. How did it make you feel when Intel announced the i9 ensuring that all game engines will target 8c as the mainstream platform?
>>60675774
Seriously delete this right now
>>60675774
>azn with blonde hair
This is unsettling for some reason.
>all game engines will target 8c
>tfw I fell for the Ryzen meme
If only I played video games.