Slashdot Mirror


Nominum Calls Open Source DNS "a Recipe For Problems"

Raindeer writes "Commercial DNS software provider Nominum, in an effort to promote its new cloud-based DNS service, SKYE, has slandered all open source/freeware DNS packages. It said: 'Given all the nasty things that have happened this year, freeware is a recipe for problems, and it's just going to get worse. ... So, whether it's Eircom in Ireland or a Brazilian ISP that was attacked earlier this year, all of them were using some variant of freeware. Freeware is not akin to malware, but is opening up those customers to problems.' This has the DNS community fuming. Especially when you consider that Nominum was one of the companies affected by the DNS cache poisoning problem of last year, something PowerDNS, MaraDNS and DJBDNS (all open source) weren't vulnerable to."

25 of 237 comments (clear)

  1. Linux seems to be fine... by ichthus · · Score: 4, Insightful

    Linux seems to be fine for them to run their web server.

    --
    sig: sauer
    1. Re:Linux seems to be fine... by Wodin · · Score: 4, Insightful
      --
      -- Wodin
  2. Re:Yeah, Like Closed Source is better. by Spazztastic · · Score: 5, Funny

    Yeah, because the poster child of closed source - Windows - is *so* secure...

    I resent that, Mr. Anonymous Coward. Windows is the most secure system in the entire world as long as you leave the system unplugged from the network and inside of a Faraday cage. With the USB ports disabled and no CD-ROM/Floppy drive. And armed guards at the door.

    It's a feasible option for any business.

    --
    Posts not to be taken literally. Almost everything is sarcasm.
  3. Blow more smoke up our posteriors... by autocracy · · Score: 5, Insightful

    I'll sum up their argument: We use security through obscurity, and that makes us better. You should pay us for that. Also, when we say "cloud-based," we really just mean "in our data centers." They're really abusing the definition of cloud computing, just because it's the current profit-generating buzzword.

    --
    SIG: HUP
    1. Re:Blow more smoke up our posteriors... by MightyMartian · · Score: 4, Interesting

      Does the word "cloud" have any particular meaning? Of course you should have multiple geographically and network diverse DNS servers. I run my master DNS on my own server, but my pay like $10 a year for my secondaries, which slave to the master. Under no circumstances will I ever give up control of my DNS, or use some shitty web app to manage my DNS records, and that's why I insist that the master (even if invisible) sit squarely on my end.

      But then again, this has been the general recommendation for a couple of decades now, so I have no idea what "cloud computing" has to do with it. Offsite mirrors of critical data, DNS or otherwise, is simply sound practices.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    2. Re:Blow more smoke up our posteriors... by Chris+Mattern · · Score: 5, Funny

      Does the word "cloud" have any particular meaning?

      "Cloud" means "in our data centers", so that you're paying us money. If you're still using your own servers, you're not in the "cloud", and you're not paying us money.

      Obviously, it is absolutely imperative that you migrate all your services to the cloud.

  4. Re:Yeah, Like Closed Source is better. by JohnBailey · · Score: 4, Funny

    I resent that, Mr. Anonymous Coward. Windows is the most secure system in the entire world as long as you leave the system unplugged from the network and inside of a Faraday cage. With the USB ports disabled and no CD-ROM/Floppy drive. And armed guards at the door. It's a feasible option for any business.

    Until you turn it on...

    --
    It is difficult to get a man to understand something when his job depends on not understanding it.
  5. Re:Yeah, Like Closed Source is better. by Spazztastic · · Score: 5, Funny

    I resent that, Mr. Anonymous Coward. Windows is the most secure system in the entire world as long as you leave the system unplugged from the network and inside of a Faraday cage. With the USB ports disabled and no CD-ROM/Floppy drive. And armed guards at the door.

    It's a feasible option for any business.

    Until you turn it on...

    I NEVER TOLD YOU TO DO THAT! YOU'VE DOOMED US ALL!

    --
    Posts not to be taken literally. Almost everything is sarcasm.
  6. Good Grief by MightyMartian · · Score: 5, Insightful

    I don't know about you, but any company that feels the only way they can sell their product is to basically slander their competitors isn't likely to get my attention. As it is, and as much of a pain in the ass as Bind can be, I have yet to encounter anything quite as powerful as Bind9. It's certainly not without flaws, but after having had to deal with the inadequacies of Microsoft's DNS, anyone who comes up to me and says "Oh yeah, those open source DNS servers are the lesser products" is either a liar or a moron.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
    1. Re:Good Grief by Monkeedude1212 · · Score: 4, Insightful

      I don't know about you, but any company that feels the only way they can sell their product is to basically slander their competitors isn't likely to get my attention.

      And from the blog thats linked:

      Way, way back when, Nominum employees successfully performed a denial of service attack on PowerDNS. I thought they had grown over this kind of behavior, but it appears they didn't.

      I hope no one goes to Nominum, they play dirty. I don't think the internet needs to be more dirty, what with all the scammers out there, both hackers and ISP's alike.

    2. Re:Good Grief by MightyMartian · · Score: 5, Informative

      Well, I haven't seen a product that is as powerful as Bind9, paid or unpaid. The pain in the ass bit is simply the configuration, which when you start talking about various views based on ACLs, can get a bit eye-splitting (but then again, that applies to lots of things with ACLs, like Cisco IOS, Squid, etc).

      The guy is a liar. You know it. I know it. I think anybody who actually works with DNS infrastructure knows it.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
  7. Even if what they say is true... by Aim+Here · · Score: 4, Interesting

    ... how can you trust these guys to write your DNS software? They're the very guys who were contracted to write Bind9, the foremost open source domain name server, which they're now complaining about.

    And, from TFA:

    You really do need to look under the hood and kick the tyres. Maybe it's a Ferrari on the outside, but it could be an Austin Maxi on the inside.

    Reconcile THAT little gem with support for closed source software.

    1. Re:Even if what they say is true... by Spazztastic · · Score: 4, Insightful

      ... how can you trust these guys to write your DNS software? They're the very guys who were contracted to write Bind9, the foremost open source domain name server, which they're now complaining about.

      The other question is if they are now using elements of the Bind9 source in their closed source system and are not properly disclosing it.

      --
      Posts not to be taken literally. Almost everything is sarcasm.
    2. Re:Even if what they say is true... by jggimi · · Score: 4, Informative

      Bind is ISC licensed, which is similar to a BSD license. Disclosure is not required. See this example template.

  8. Freeware will not eat your children by spun · · Score: 5, Insightful

    "But it is opening up these customers to problems." Nice, textbook FUD/propaganda. Put the thought out there. Deflect attention from your own failings. Lump all 'freeware' DNS into the same basket. Call it 'freeware' instead of Open Source to link it to badly written DOS/Windows programs. Wow, this company is sleazy. It would be such poetic justice for some grey hat hackers to take these goons down.

    Open source DNS is tried and true, everyone uses it. No one was ever fired for installing BIND. This new flash in the pan company has been hacked before, how long until they are hacked again? Why trust your DNS to some untested startup using inappropriate buzzwords like 'cloud computing?' Why pay for what you can get for free? Why outsource your DNS to someone who may or may not be here tomorrow? Heh. We can play at the FUD game, too.

    --
    - None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
  9. Re:Well by the_womble · · Score: 5, Insightful

    The argument will be that since they run Redhat it's not considered open source or freeware, even though it is a Linux distribution that is proprietary.

    It is easy enough to prove that Red Hat is open source, the problem is that the "repeat the press release" standard of journalism of the article that accepts any assertion made by an interviewee or a press release as fact.

  10. Contradictions by Bert64 · · Score: 5, Insightful

    You really do need to look under the hood and kick the tyres. Maybe it's a Ferrari on the outside, but it could be an Austin Maxi on the inside.

    He contradicts himself, he tells you to kick the tyres and look under the hood, and then touts his product which he explicitly states won't let you look under the hood...

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  11. It's like meat by CopaceticOpus · · Score: 5, Funny

    I have the same problem with using local butchers. They buy their meat on the open market, and it is possible to track that meat down to the farm where the cow came from. Those cows are kept outdoors, where anyone can see them. Lord knows what toxins people might be injecting into those cows.

    That's why I only eat meat from MeatCorp. All of MeatCorp's meat is made behind closed doors, in a giant, guarded metal building. Nobody knows what happens inside, and that makes me feel safe when I eat MeatCorp brand Meat Circles.

  12. I'll let you finish by RiotingPacifist · · Score: 4, Funny

    Yo Nominum, im really happy for you, and imma let you finish, but microsoft is one of the best trolls of all time!

    --
    IranAir Flight 655 never forget!
  13. Is this the same Nominum? by Minwee · · Score: 4, Funny

    Isn't Nominum that company that was formed about ten years ago for the purpose of developing the open source BIND and DHCP for ISC?

    Yeah, these guys.

    And now they're turning around and saying "Don't use that open source BIND because it's crap. We should know, we wrote it!"

    1. Re:Is this the same Nominum? by CTachyon · · Score: 4, Informative

      Isn't Nominum that company that was formed about ten years ago for the purpose of developing the open source BIND and DHCP for ISC?

      Yeah, these guys.

      And now they're turning around and saying "Don't use that open source BIND because it's crap. We should know, we wrote it!"

      Even more beautifully, try digging the version numbers from their nameservers:

      $ dig +short @ns1.nominum.net CH TXT version.bind.
      "Nominum ANS 3.0.1.0"
      $ dig +short @ns2.nominum.net CH TXT version.bind.
      "9.3.5-P2"
      $ dig +short @ns3.nominum.net CH TXT version.bind.
      "Nominum ANSPremier 4.1.0.0"

      One of the 3 nameservers for their own domain is running BIND, and a fairly old version of it at that!

      --
      Range Voting: preference intensity matters
  14. Re:Well by secmartin · · Score: 4, Interesting

    That's why we have bloggers, right? Journalists are paid to copy-paste from press released, while bloggers derive their satisfaction from actually reading between the lines / further than the press release (that is, of course, generally speaking; there is at least some good investigative journalism left).

    I just had a great example of this in my mailbox. A press release from a storage company announcing a new trade-in program; it's amazing how many websites just copy-pasted the cheerful announcement without mentioning they are facing a delisting from the NASDAQ or any other useful background info. Examples like this keep popping up, it makes you wonder about Murdoch's plans to charge for that "premium" content...

  15. Re:Well by whoever57 · · Score: 5, Insightful

    But why is it the journalist's job to spell out that you're reading a press release from a commercial DNS provider denigrating competition.

    Because that's the job of a reporter -- to investigate, analyse, interpret and explain the information. Otherwise, the reporter is adding no value and simple economic theory would suggest that his/her job should disappear.

    And newspaper owners wonder why they are losing business?

    --
    The real "Libtards" are the Libertarians!
  16. Re:Well by lorenlal · · Score: 4, Interesting

    That answer just pisses me off.

    If I have a secret way of blocking a hacker...

    Right. That sounds like an awesome idea. How useful is that "secret" if the customer knows about it? It needs to be documented in that case, which means everyone knows about it, which means it's another attack surface. Plus, there must be a way of turning that feature back off.

    If the customer doesn't know about it. It's only a matter of time before said hacker finds out about it, cause it will get out there. It also means that anyone who works (and worked for) said vendor can exploit that feature for their own purposes. The customer who paid for the software is just left out in the cold. Good job there. Sounds like an excellent reason to not use open code.

    Well done Nominum...

  17. "a secret way of blocking a hacker" by alizard · · Score: 4, Interesting

    security by obscurity = automatic EPIC FAIL.

    I won't be using nominum services, even if there's a free version. That's a confession of incompetence.