First screen, captured 8 days ago. Open the video.

So my ISP was hijacking my DNS

What HN thinks

Port 53 is apparently a public suggestion box the ISP reads and rewrites.

Likely legally mandated blocking
Several commenters, including a UK ISP owner, note ISPs are often forced by law to tamper with DNS for censorship or piracy enforcement, especially since the target was a torrent site.
Encrypt DNS or tunnel everything
Use DoH/DoT, a local resolver, or a trusted VPN, since some ISPs transparently intercept all UDP port 53 traffic.
DNSSEC is useful but flawed
Some push DNSSEC validation via local unbound, while others say low adoption, last-mile gaps and breakage on real sites make it insufficient.

Consensus: Most agree plain DNS cannot be trusted on many networks and encrypted transports like DoH/DoT or a VPN are the practical fix.

Recommended in the comments

Pi-hole (tool): Running it as the network's DHCP server routes devices around a locked ISP router.
Unbound (tool): Running it locally enables DNSSEC validation.
DNS over HTTPS (other): Enabling it in Firefox bypassed tampering and laggy resolvers.
OpenWrt (product): Used as a self-controlled router behind the ISP's equipment.

Summarised by Claude from the comment thread 8 days ago.

Points: 202
Comments: 157
Best rank: #11
Posted: 2026-11-04 by frostbyte7
Category: Security

dns dns-hijacking dns-over-https dnssec isp homelab unbound privacy

All captures:

Full page

Captured 8 days ago. Click for the whole screenshot.

Looks similar

Unlocking any car from X brand in most of the world (shubs.io)

578 points by infosecau 5 days ago | 317 comments

Screenshot of bsdhowto.ch: Why not use DNS over HTTPS (DoH)?

Why not use DNS over HTTPS (DoH)?(bsdhowto.ch)

137 points by Bogdanp 1 year ago | 230 comments

Screenshot of gyptazy.com: Live-migration support in FreeBSD and bhyve coming

Live-migration support in FreeBSD and bhyve coming (gyptazy.com)

64 points by JohnDohnBohn 5 hours ago | 15 comments

Blog post presenting a work-in-progress RFC implementation of live VM migration for bhyve on FreeBSD 15.1, covering design, test results, and blockers to upstreaming.

freebsd bhyve live-migration virtualization

Screenshot of mysk.blog: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay (mysk.blog)

153 points by lapcat 3 months ago | 24 comments

Screenshot of level102.itch.io: Echoloc: A minimalist echolocation horror videogame

Echoloc: A minimalist echolocation horror videogame (level102.itch.io)

5 points by ggambetta 6 days ago | 1 comments

Itch.io page for ECHOLOC, a free browser-based 3D horror game where the player navigates dark halls by clicking their tongue to echolocate while avoiding a sound-hunting creature.

echolocation horror-game itch-io html5-games

Text post

Earlier today we experienced a DDoS HTTP attack, which was automatically mitigated by OVH, so only caused minimal disruption. However it's concerning that it happened at all, as all the ips were Cloudflare ips, e.g.: 162.158.202.23 - - [01/Dec/2023:23:30:02 -0500] "GET / HTTP/1.…