@dnscryptpl

Free, Non-logged and Uncensored DNSCrypt service based in PL

Poznań, Poland
Joined August 2014
GM! There has been a ~20 minute outage between 8:27 and 8:47 CET. VM lost networking and got it back. I also rebooted and there went my 400+ days uptime but the kernel is upgraded.
1
Come join the 10th anniversary of dnscrypt on YT and discord!
#sdns2021 kicks off in 24 hours! Check out our latest line-up and register here: sdns2021.dnscrypt.info/ We'll be streaming live from: youtu.be/X75gksX7-eo #DNSCrypt #DNS #privacy
1
1
#DNSCrypt is 10 years old!
This quoted post is unavailable.
‼️With a 1 month more of operation I'm turning off the legacy service under the soltysiak moniker as announced on 23-DEC-2020. Please change to: - dnscrypt.pl - for vanilla service - dnscrypt.pl-guardian for malware filtering‼️
1
1
1
FYI, new service as shown on DNSCloak
1
The notes from the NDSS DNS Privacy Workshop 2021 are up: dnsprivacy.org/wiki/display/… Thanks again to our note takers: Han Zhang and @ahounsel!
2
5
I've been using email and twitter for handling incidents and support. It's ok but kinda old. What's a better?
0%Slack
0%Discord
20%Other, see comment
80%Email is enough
5 votes • Final results
1
1
Signed up for 👽 AlienVault Open Threat Exchange (OTX) and with a little python scripting added the domain indicator feed to our blocklists :-)
1
1
Added 3 malicious domains from @CSIRT_KNF Also upgraded encrypted-dns-server to 0.3.23 github.com/pysiak/dnscrypt.p…
1
1
Added this one to the blocklist and reloaded. Thanks @CSIRT_KNF! commit: github.com/pysiak/dnscrypt.p…
Ostrzegamy przed fałszywą aplikacją podszywającą się pod "Kwarantanna domowa" od @CyfryzacjaKPRM. Ww. Aplikacja to złośliwe oprogramowanie, które wykrada dane do bankowości internetowej za pomocą fałszywego panelu logowania do banku. Niebezpieczny URL: kwarantannadomowa[.]com
1
2
DNSCrypt Poland retweeted
OpenWRT forum breached lists.openwrt.org/pipermail/…
5
8
DNSCrypt Poland retweeted
NSA advises enterprises to block DoH. They also recommend MITM'ing TLS to do so. No mention of dnscrypt though, or anonymized dnscrypt. Source: a google alert pointing to itpro.co.uk/network-internet… article
Thanks to @niebezpiecznik for reporting on android malware distributed through a website impersonating @wirtualnapolska email services. * This commit adds it to the guardian blocklist: github.com/pysiak/dnscrypt.p… * check live domain list (6MB) here: poz1.dnscrypt.pl/guardian.tx…
🚨 Uwaga! Ktoś właśnie w bardzo sprytny i całkiem dopracowany sposób atakuje użytkowników poczty WP: niebezpiecznik.pl/post/uwaga… ⚠️ Ostrzeżcie znajomych, nawet jak mają e-maile u innych dostawców, bo coś czujemy, że tan atak zaraz pojawi się w odmianach "na Onet", "o2" itp. Pls RT!
As the new service stores configuration in github you can review or do PRs. Much better, eh? * manualblocks: github.com/pysiak/dnscrypt.p… * whitelists: github.com/pysiak/dnscrypt.p…
Although the domains used in the recent SolarWinds was already in ut1-blacklists, I'm adding them in manualblocks.conf to dnscrypt.pl-guardian github.com/pysiak/dnscrypt.p…
If you are looking for detection rules for #SolarWinds IoC, @olafhartong created some with #Sysmon & #Splunk...or just with KQL (♥️) . #SUNBURST #ThreatHunting
1
1
This is one example how new DNSCrypt Poland services will operate in terms of transparency for the malware/phishing blocking in the non-vanilla tier: github.com/pysiak/dnscrypt.p…
1
Ok, so new service will have 2 flavours to choose from: 1. completely vanilla 2. well-defined malware, phishing filtering All zero-log, DNSSEC, etc. Both under internal testing. No clear appetite for DoH, so not doing it. Stay tuned.
1
3
Would you use DoH?
50%Do it!
50%Don't bother
4 votes • Final results
Current service is using malware/phishing lists. Do you think I should also offer:
57%Unfiltered, vanilla DNS
43%Malware + light adware
23 votes • Final results