Security News > 2021 > May > Friday Squid Blogging: Underwater Cameras for Observing Squid

Friday Squid Blogging: Underwater Cameras for Observing Squid
2021-05-28 21:09

Simple answer in 99.99% or more of cases is you can not unless you actually access the site Which of course in most policies is not covered.

To access the site you first have to get the URL converted to an IP address usually via the DNS. The DNS is a hierarchical system with very limited caching.

So what happens is you go "Over the top and down the other side" looking in those caches till either you find the IP address in the cache, or you hit the sites authorative DNS records, which will be in a lot of cases be held on a computer at the same site the server you are looking for the IP address for.

So you are as far as the CFAA guilty before you even get the IP address to follow, that might give you the site access policy, but probably does not.

The chances are you will then get sent via the Google suppled URL based on the Google DNS service pulled IP address to a web server you then "Access".

Now consider the online equivalents, how the heck are you expected to know what implicit contract is inplace if you can not see what type of site it is and the server freely alows you access by responding to your TCP request and compleating a transfer of information that does not contain any warnings or policy.


News URL

https://www.schneier.com/blog/archives/2021/05/friday-squid-blogging-underwater-cameras-for-observing-squid.html