Hacker News Reader

You'd need to know those domains exist to resolve them.

This unusual (mis-) configuration allowed to enumerate those domains exhaustively.

So if I had a friend in North Korea and they told me about one of those domains, I would not have been able to resolve it in my browser?

But now that this has happened anyone can?

Rather, if you had a friend in North Korea and they told you about the domains, you WOULD be able to resolve them.

Now that this has happened, you know all of the domain names and no longer need a friend in North Korea to tell you what they are.