Holes in the Geofence: Privacy Vulnerabilities in "Smart" DNS Services

12/14/2020
by   Rahel A. Fainchtein, et al.
0

Smart DNS (SDNS) services advertise access to "geofenced" content (typically, video streaming sites such as Netflix or Hulu) that is normally inaccessible unless the client is within a prescribed geographic region. SDNS is simple to use and involves no software installation. Instead, it requires only that users modify their DNS settings to point to an SDNS resolver. The SDNS resolver "smartly" identifies geofenced domains and, in lieu of their proper DNS resolutions, returns IP addresses of proxy servers located within the geofence. These servers then transparently proxy traffic between the users and their intended destinations, allowing for the bypass of these geographic restrictions. This paper presents the first academic study of SDNS services. We identify a number of serious and pervasive privacy vulnerabilities that expose information about the users of these systems. These include architectural weaknesses that enable content providers to identify which requesting clients use SDNS. Worse, we identify flaws in the design of some SDNS services that allow any arbitrary third party to enumerate these services' users (by IP address), even if said users are currently offline. We present mitigation strategies to these attacks that have been adopted by at least one SDNS provider in response to our findings.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
12/10/2019

Client-side Vulnerabilities in Commercial VPNs

Internet users increasingly rely on commercial virtual private network (...
research
09/28/2020

Anonymity with Tor: A Survey on Tor Attacks

Anonymity networks are becoming increasingly popular in today's online w...
research
06/27/2018

An Extensive Evaluation of the Internet's Open Proxies

Open proxies forward traffic on behalf of any Internet user. Listed on o...
research
10/07/2021

Attacks on Onion Discovery and Remedies via Self-Authenticating Traditional Addresses

Onion addresses encode their own public key. They are thus self-authenti...
research
04/20/2018

IPTV Over ICN

The efficient provision of IPTV services requires support for IP multica...
research
04/03/2020

On the Path to High Precise IP Geolocation: A Self-Optimizing Model

IP Geolocation is a key enabler for the Future Internet to provide geogr...
research
10/16/2021

Characterizing Improper Input Validation Vulnerabilities of Mobile Crowdsourcing Services

Mobile crowdsourcing services (MCS), enable fast and economical data acq...

Please sign up or login with your details

Forgot password? Click here to reset