Hacker News Reader

Comment by faster | Hacker News Reader

I expect bots on a new unadvertised site within minutes. I've seen it many times. Bots are always scanning, along with script kiddies.

View on HN

It is far more likely that Google found the new site from telemetry from Chrome than it is a random bot, owned by Google scanned the site within seconds.

Google also runs their own public DNS servers which afaik Chrome defaults to. They can just sit server side waiting for DNS lookups of domains they've never seen before and queue them up for the Google bot. No browser telemetry needed.

> Google also runs their own public DNS servers which afaik Chrome defaults to.

The statement that Chrome does not honour the networking stack's DNS settings does not agree with my observational data. I run pi-hole DNS and Chrome absolutely fails to load domains blacklisted there.

This is configurable, the default is to use the default network stack.

Settings > search for Use secure DNS for DNS-over-TLS.

Why does chrome need to use DNS other than what I have set up through my IP stack? How does that work for inranet sites?

Because they see their solution as more secure. Intranet sites still work because Chrome only prefers their DNS first, it will still use your system settings if it doesn't work.

Seems testable by setting up randomized subdomains hosting http and visiting with different browsers. Also, make sure you aren't using Google's DNS services to resolve or managing your domain's DNS through their registrar.

Reply on news.ycombinator.com