Risk
2/14/2012
04:19 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Becomes Largest Public DNS Provider

Search giant's DNS service, now handling 70 billion requests a day, also makes Google more knowledgeable about what people are doing online.

Office 365 Vs. Google Apps: Top 10 Enterprise Concerns
Office 365 Vs. Google Apps: Top 10 Enterprise Concerns
(click image for larger view and forslideshow)
Google has become the largest public DNS service in the world, an event that might either please or frighten you, depending on your view of Google.

The company launched Google Public DNS in December 2009 and on Tuesday said its service is handling more than 70 billion requests a day.

Google software engineer Jeremy K. Chen likens DNS to a phone book for the Internet, a comparison that presumes a familiarity with phone books that might be absent in many younger Internet users. "If you had to look up hundreds or thousands of phone numbers every day, you'd want a directory that was fast, secure and correct," he said in a blog post. "That's what Google Public DNS provides for tens of millions of people."

Although Google's stated goal with its DNS service might be to make the Internet faster, more secure, and more easily organized through search, its advertising business is likely to perform better as a consequence of that goal.

[ Networks aren't always friendly. Read 500 Malware Networks Available To Launch Attacks. ]

DNS stands for Domain Name System. It is a service that maps numeric 32-bit IPv4 and 128-bit IPv6 addresses, such as 74.125.224.72, to alphanumeric domain names such as Google.com.

Providers of DNS service have considerable power: They can disassociate domain names and IP addresses, making websites unreachable by those using domain names.

When DNS providers do so, it tends to be at the direction of law enforcement authorities. But such takedowns are not always considered just or well-executed. The recent controversy surrounding proposed anti-piracy bills SOPA and PIPA was partly because the draft legislation would have forced ISPs to implement DNS filtering to protect copyrighted content.

Cricket Liu, vice president of architecture at Infoblox, a maker of networking control hardware, says that whether one is concerned about Google's growing power as a DNS provider depends on whether one has a charitable or skeptical view of the company.

"Google is providing fast, unfiltered DNS," he said, "and all of that is good. But they're also grabbing this huge stream of data, generated by all those people who use the company's DNS service."

Having access to that information reveals a lot about what people do and where they go online, he said. Companies such as OpenDNS have recognized the value of DNS data and have built businesses by delivering paid advertising in place of a browser-generated error page when users mistype URLs and by providing additional security and filtering services.

Google states explicitly that Google Public DNS "never blocks, filters, or redirects users, unlike some open resolvers and ISPs."

However, Open DNS founder and CEO David Ulevitch took issue with this claim in a 2009 blog post. "Google claims that [its] service is better because it has no ads or redirection," he wrote. "But you have to remember they are also the largest advertising and redirection company on the Internet."

Google also maintains a separate privacy policy for Google Public DNS. The company says it maintains two sets of server logs related to the service: temporary and permanent. The temporary logs contain user IP addresses and those are deleted in 24 to 48 hours (barring a court order to the contrary). The permanent logs, which contain city-level location data but nothing personally identifiable, are retained for at least two weeks. A small random sample taken from the permanent logs is kept indefinitely.

Google says it does not share public DNS data with other services, though it's not clear whether this data firewall will persist after March 1, when Google consolidates its privacy policies. A Google spokesperson did not immediately respond to a request for comment.

Hacks of Comodo and DigiNotar exposed weakness in the Secure Sockets Layer protocol. The new Dark Reading supplement shows you what's being done to fix it. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Michael Martinez
50%
50%
Michael Martinez,
User Rank: Apprentice
2/14/2012 | 10:35:28 PM
re: Google Becomes Largest Public DNS Provider
"Excuse me -- but WHY does God need a starship?"

How is it that Google is now the largest DNS provider in the world? They claim they service 70 billion DNS requests a day. Great!

How many requests are the OTHER DNS providers serving per day? I'd just like to see some official, trustworthy data, not more egregious marketing claims.

Thank you.
Register for Dark Reading Newsletters
Dark Reading Live EVENTS
INsecurity - For the Defenders of Enterprise Security
A Dark Reading Conference
While red team conferences focus primarily on new vulnerabilities and security researchers, INsecurity puts security execution, protection, and operations center stage. The primary speakers will be CISOs and leaders in security defense; the blue team will be the focus.
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "Jamie, the darn Unicorn is back."
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
[Strategic Security Report] Assessing Cybersecurity Risk
[Strategic Security Report] Assessing Cybersecurity Risk
As cyber attackers become more sophisticated and enterprise defenses become more complex, many enterprises are faced with a complicated question: what is the risk of an IT security breach? This report delivers insight on how today's enterprises evaluate the risks they face. This report also offers a look at security professionals' concerns about a wide variety of threats, including cloud security, mobile security, and the Internet of Things.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.