Hacker News Reader

Sorry, I need a little more explanation.

Are you saying that North Korea would otherwise be keeping these domains out of sight from users that aren't in North Korea? So now that these domains are out there anyone can view them and lurk/spy/gather info?

View on HN

You'd need to know those domains exist to resolve them.

This unusual (mis-) configuration allowed to enumerate those domains exhaustively.

So if I had a friend in North Korea and they told me about one of those domains, I would not have been able to resolve it in my browser?

But now that this has happened anyone can?

Rather, if you had a friend in North Korea and they told you about the domains, you WOULD be able to resolve them.

Now that this has happened, you know all of the domain names and no longer need a friend in North Korea to tell you what they are.

Reply on news.ycombinator.com