Re: DNS Prefetching and nyms

Nomen Nescio <[email protected]> Tue, 18 Jun 2024 08:21:55 +0200 (CEST)
Newsgroups alt.anonymous,alt.privacy.anon-server
Organization dizum.com - The Internet Problem Provider
Message-ID <[email protected]>
On 17 Jun 2024, Anonymous <[email protected]> posted some 
news:[email protected]:

> The Mozilla Thunderbird client shows a well-intentioned though very
> dangerous behaviour called 'DNS Prefetching'. If mail comes with an
> external link Thunderbird tries in advance of any user action to look
> up the given domain's IP address with the intention of reacting faster
> later on in case the link is followed. Now imagine an adversary
> creating a mail message that contains a link with a unique domain name
> she controls herself (like '[email protected]'
> and sending it to a nym account that has to be compromised. When
> Thunderbird gets hold of this message it tries to translate the domain
> name into its IP address by contacting the adversary's DNS server and
> by doing so reveals the IP address of the nym holder.

Use Tor.

"Proxy DNS when using SOCKS v5"

or,

Run your own DNS server, configure OpenDNS as your forwarders.

https://www.hanewin.net/dns-e.htm
https://maradns.samiam.org/download.html
https://technitium.com/dns/
https://www.portablefreeware.com/?id=1869
https://mayakron.altervista.org/support/acrylic/Home.htm
https://simpledns.plus/
http://linuxmafia.com/faq/Network_Other/dns-servers.html

Run a legacy Windows DNS server as a virtual machine, configure OpenDNS as 
your forwarders.  It works fine.