frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Quad9 (DNS Resolver) to Exit France

https://quad9.net/news/blog/au-revoir-france/
175•farrokhi•1h ago

Comments

babarock•1h ago
Punishing the DNS resolver is weird. Would you punish the phone book company for having the number of a criminal listed?
pixl97•50m ago
Because they can.

Attacking the people doing the actual bad things is hard, attacking a single unified organization is easy.

teroshan•47m ago
Same reason copyright abusers threaten people that help remove the DRM from their Amazon-bought e-book so it can be read on their non-Amazon bought e-reader with a $250,000 fine and five years in prison for circumventing a digital lock using DMCA, because it's what the legal API allows them to achieve their end goal.

It's not about if it makes sense from a moral point of view.

mitxela•31m ago
You would if you could and it'd probably work.

I believe the position of the French government is that anyone in the path of a crime can be ordered to block the part of the crime that relates to them, without having any liability for the crime. So quad9 are not criminals for not blocking pirate sites, but still have to block specific sites when ordered.

iamnothere•6m ago
Where does this line of reasoning end though? Shouldn’t the browser makers be blocking the sites too? What about curl? What about the OS and local DNS resolvers (unbound etc)? Maybe Ethernet and wifi cards should contain blocking logic? At some point you have to draw a line!
JoshTriplett•28m ago
The most likely answer is that they didn't think about it or didn't understand or didn't care. But on the off chance they did, perhaps they thought the DNS provider would enforce the ruling worldwide.
rdtsc•2m ago
It shows maliciousness (we can bully this smaller player for a win) and/or total incompetence (we don't even understand how internet works, but we'll issue rulings anyway).
Onavo•1h ago
Another user commented on

> €580,000 to €1,000 per day. But deleted his/her comment.

To put this into perspective, €365K a year is roughly the fully loaded total comp cost of a high-senior to low staff level software engineer or a mid level ML engineer at a frontier lab in Cali.

jubilanti•1h ago
Per each infraction. They said they currently have 20 other cases pending. And who knows how many would be to come.
nadermx•1h ago
"The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court."

Imagine doing everything possible to stop something. They then circumvent your protections with yet another service, and you get fined.

I wish I could even suggest what someone could do against these trolls.

This is like saying "we put a lock requested by court and where found guilty because plantif hacked us after"

bitpush•46m ago
> Imagine doing everything possible to stop something. They then circumvent your protections with yet another service, and you get fined.

Isnt this what gets all tech companies into trouble all the time. Something objectionable happens (ChatGPT helping someone bulid a bomb for instance) and we go like "Do better".

mitxela•32m ago
And for contempt of court nonetheless. That's meant for when you blatantly don't do the thing the court told you to do, not when you did it but it didn't work how the court wanted.
irusensei•1m ago
Lately Sony Corpos have been really getting into their supervillain arc aren’t they?
artooro•1h ago
Quad9 is getting picked on because they do not have a large financial backing. Not because it makes any logical sense. France is shooting themselves in the foot.
martinjc•59m ago
Sony being sleazy again. You start to wonder why they pick on the wrong people.
gumby•58m ago
Why does it matter that it’s a recursive resolver? They mention this a lot but it seems like the decision would just as much apply to a non-recursive resolver.

I didn’t attempt find the ruling; perhaps the lawsuit was written in an odd way.

ButlerianJihad•54m ago
It is difficult to envision a "non-recursive DNS resolver" in public service. Recursion is the usual and customary way that DNS names are resolved by the leaf servers, because they are not authoritative for much of anything.

The most common configuration for non-recursive DNS servers is with forwarders. The DNS server accepts queries and simply forwards all of them upstream to another resolver, which... makes its own recursive queries.

It is simply not feasible to avoid having recursive resolvers in the chain of lookups. That's how things work with DNS.

gumby•42m ago
We used to just leave that responsibility to the querying host’s own resolver. I don’t fetishize the end-to-end principle (though I come close) so I suppose a recursive resolver service could be a sort of optimization (plenty of ppl look up, say, gmail.google.com so why not cache it).

In any case, if all resolvers these days are recursive why mention it?

I know this is far from the most important question on the topic of this thread!

toast0•28m ago
> We used to just leave that responsibility to the querying host’s own resolver.

When? I didn't get online until the 90s, but resolv.conf delegating recursion to some other node was the way of the world back then. And still is. Some people do run a recursive resolver locally, but it's not so common afaik.

> In any case, if all resolvers these days are recursive why mention it?

Quad9 is named as a recursive resolver in contrast to being an authoritative server. Quad9 and the server I run for my domain are both DNS servers, both provide name resolution, but one is recursive and the other isn't. Used to be, you might run one server for both jobs, but that fell out of fashion for good reasons.

Felger•54m ago
"There are more important reasons geoIP blocking will not work."

Okay, now waiting to see how they will technically block those french users from the 24th nov onward...

burnte•35m ago
They don't have to. Despite Europe's best efforts, national laws are not enforceable outside the borders without lots of cooperation, and tech regulation is not an area where people are collaborating.
JokerDan•48m ago
DNS resolvers getting sued should stop resolving domains/properties of the companies suing them too when they are forced to take these kinds of actions/steps off the back of a legal decision like this.
drdexebtjl•36m ago
Keep resolving, but instead of resolving multiple A records, resolve just one. Fuck that one server in particular.

Delay updates by 1 week.

Answer randomly with the up-to-date or the out-of-date records.

raverbashing•24m ago
Obviously

The problem is that these types of companies are started by naive idealistic techs who only know how to play by the rules and can't figure out why people would misuse their products

trentor•46m ago
Crazy. A company that actually exits the market they threatened to leave. Meta and Twitter should take note.
declan_roberts•44m ago
Europe needs to strengthen its free speech protections. It turns out, even though the US founders had no idea what DNS was, they still created the right framework to protect it.
AndroTux•25m ago
As long as you don’t say Artificial Intelligence instead of Super Intelligence, you’re all good.
DemiGuru•43m ago
I mentioned not too long ago that Mullvad was handing its resolver users over to Quad9. Sadly, I didn’t realize how accurate my concerns would be. Quad9 is a good operator, they actually fought Sony in a German court instead of quietly complying. Yet, they were still ordered to block the content. That’s the core problem. A blocking order is only as damaging as the resolver it impacts. Every time an operator shuts down and redirects its users to Quad9, it pools more users into one place. This makes the next blocking order even more valuable and effective for whoever files it. And now we're seeing Quad9 backing out of a market.
nish__•42m ago
How have our democracies not abolished copyright law yet? These laws only serve the 1%. I have no idea why we still put up with them.
cyanmagenta•37m ago
> How have our democracies not abolished copyright law yet? These laws only serve the 1%

Yeah, fuck those billionaire authors and artists in coffee shops not wanting people to rip off the books and art they create without compensation.

nish__•29m ago
Copyright laws don't benefit independent artists. They only work for you if you can afford a litigation team.
AndroTux•23m ago
The 1% just copied all available data without consequence. Yet, Quad9 gets sued and loses.
surgical_fire•14m ago
AI companies already ripped those things off.

Copyright is a sham. It does not protect the small guy, only the rich corporations.

I am back to piracy, now on a moral imperative. I can pay for stuff, but I think the morally superior thing to do is to pirate away.

roblabla•10m ago
I find it extra funny that you think copyright protect small time authors and artists, when we have _very clear_ examples of it not protecting them for shit, even before the entire IA saga. Remember the Disney/Star Wars saga where they refused to pay the Star Wars author for the books they were selling?

https://archive.bookstr.com/article/royalty-wars-over-star-w...

Copyright doesn't protect small-time authors - because small-time authors don't have the means to harness the legal system to their advantage the way that big corpos that take advantage of them do.

_imnothere•37m ago
Time to boycott Sony, they deserve no money from anyone, and I meant anyone.

They're just f*ing with people without getting anyone good stuff.

Suppose they're doing this for copyright, it's not like the pirates would be stopped by a mere DNS block rule set anyway.

antiframe•15m ago
> Time to boycott Sony, they deserve no money from anyone, and I meant anyone.

Because when they installed rootkits on user's machines wasn't that time?

Because when they removed content users purchased from their machines wasn't that time?

Because when they spy on what users watch on their TVs in the privacy of their home wasn't that time?

Sony is like a tree. The best time to boycott Sony was decades ago. The second best time is today.

raquuk•8m ago
Yes, but in this case the plaintiff is beIN SPORTS France.
0x0000000•31m ago
Maybe i missed it in the post, but how are they going to implement it? They mentioned geoIP is insufficient for complying with the block, so if they dont have a way to block only these domains for users in France, how will they block all requests for users in France?

To be clear I dont think they should comply with the block, but i didn't grasp how they're going to block everything if they dont have a way to only block some things.

eloisant•11m ago
They're removing all presence they have in France, their servers mostly.

They want to be out of reach of French courts basically.

rafram•26m ago
They are in a difficult position because the entire point of their DNS resolver is that it blocks malicious sites (malware, phishing, etc.). Very easy for Sony to say, why can't they add piracy to the list? They "refuse to alter or lie to you" in their DNS responses - how would a malware block be lying if those other blocks are not?
Jepacor•25m ago
Welp, I've been using quad9 and I'm French, does anyone have an alternative I can switch to?
capitol_•11m ago
I recommend Norway, they have lovely fjords.
Bender•17m ago
I am curious if a large number of people stood up their own DoH/DoT servers would France go after each one, even if they were not operating servers physically in France?

- Would they expect individual operators of small DoH/DoT open servers to block domains at their behest?

- Should I test this theory by creating an open resolver in France?

cyanmagenta•1m ago
I don’t necessarily disagree, but by that same logic we shouldn’t have any civil laws because regular people can’t afford to hire lawyers to sue people.

But still, if someone posts a copy of your book or painting online, you can pretty cheaply file a DMCA request that it be taken down, and most large players will comply. If you throw out copyright law altogether, you get rid of that too.

sham1•10m ago
While your point is valid enough -- although it could have been made without this kind of snarky and sarcastic snide -- it seems clear that global copyright legislation is a lot more beneficial to the wealthy capital owners rather than the artists that you were alluding towards. Now, this is no insurmountable obstacle at least in theory. The laws could be modified in a way that lets small artists etc focus on following their passions without starving, without allowing capital to do what is essentially the intellectual equivalent of enclosure of the Commons.

Of course, one thing needed for this is the political will as well as getting rid of the idea of defending exploitation by the billionaire class by conflating their needs with the needs of starving artists because one can technically argue that copyright helps both, despite everyone knowing that one party is benefiting a lot more from it than the other.

numpad0•17m ago
FOSS depends on copyright laws. Oldest versions of Linux and UNIX are more than 20 years old, so early versions of both would be hypothetically now in public domain in the absence of Disney-lobbied maximalist versions of copyright laws, or in the total absence of one.
dist-epoch•14m ago
How do you feel about OpenAI training on all of the books in the world.
christophilus•11m ago
Fine, as long as they aren't the only ones who get to do it. Having the world's knowledge at everyone's fingertips is a goal I think we should aim for.

eMudhra to Exit Global SSL/TLS Certificate Business

https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
421•bo0tzz•2h ago•294 comments

Quad9 (DNS Resolver) to Exit France

https://quad9.net/news/blog/au-revoir-france/
177•farrokhi•1h ago•50 comments

Crystal 1.22.0

https://crystal-lang.org/2026/10/12/1.22.0-released/
98•ksec•2h ago•46 comments

What Is Gridifcation

https://musicalform.substack.com/p/what-is-gridifcation
218•gumby•3d ago•94 comments

Show HN: Run full iOS 16.5 firmware on Android Devices

https://github.com/oosexgang/hackios-xnu-kernel
22•aghuang•49m ago•5 comments

What's Getting Pwned

https://pwn.watch/
121•mrkd•2h ago•79 comments

Jailbreaking the Switch 2

https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/
447•ledoge•8h ago•160 comments

Faster than earcut: triangulating 3.7M map polygons in 489 ms

https://globus.software/blog/2026/10/16/cutting-map-polygons/
142•molind•6h ago•29 comments

Google cleared 300 hectares of Finnish forest

https://www.techspot.com/news/114100-google-cleared-300-hectares-finnish-forest-data-center.html
39•wetwater•43m ago•14 comments

The Last Museum: Semantic search across 5.8M artworks from major museums

https://lastmuseum.com/
41•surprisetalk•3h ago•11 comments

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/
409•alphax314•13h ago•126 comments

SBD: We Have a Filesystem at Home

https://fly.io/blog/sprites-block-device/
31•torutofu•3h ago•23 comments

VMMouse for NT 3.x: QEMU/VMware mouse integration driver

https://github.com/rhargreaves/vmmouse-nt3
21•kiyouta•3d ago•4 comments

The painter behind Manhattan’s Gilded Age interiors

https://engelsbergideas.com/notebook/the-unknown-painter-behind-manhattans-gilded-age-interiors/
32•hoffmannesque•1d ago•4 comments

The recently proposed o(n log n) integer multiplication algorithm [pdf]

https://web.maths.unsw.edu.au/~davidharvey/research/subnlogn.pdf
278•craigcitro•13h ago•231 comments

Startup taps underwater volcano as energy source in "proof point" test

https://arstechnica.com/science/2026/10/startup-taps-underwater-volcano-as-energy-source-in-proof...
75•wffurr•2d ago•31 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitatio...
178•cubefox•4h ago•49 comments

Pentulive (Puppy Live) [video]

https://yle.fi/t/18-332106/fi
35•NaOH•3d ago•6 comments

Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
549•passenger•18h ago•318 comments

Show HN: Uberblok – an interactive museum of ZFS internals

https://uberblok.storagebits.workers.dev/
7•storagebits•1d ago•0 comments

MPs moving to restrict gambling ads in Canada amid mounting harms

https://www.cbc.ca/news/investigates/gambling-ads-restrictions-canada-9.7388888
35•Teever•1h ago•9 comments

Several Linux kernel vulnerabilities accidentally posted to public mailing list

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
192•mrkn1•5h ago•54 comments

Eigenmoon: linear algebra puzzles by moonlight

https://eigenmoon.vercel.app/
45•jessicarumbelow•2d ago•12 comments

Claude Duet

https://claude.com/product/claude-duet
504•kuberwastaken•21h ago•463 comments

No more icons in every menu by default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
423•riffraff•2d ago•241 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
575•abhisek•1d ago•186 comments

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
164•jimauthors•1d ago•92 comments

GitLab critical patch release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
394•artooro•21h ago•90 comments

Rust Style Guide

https://google.github.io/styleguide/rustguide.html
359•kaycebasques•21h ago•218 comments

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/
409•swyx•1d ago•71 comments