I found a really really stale name server that didn't respect TTLs.
I found a HN post that recommended switching my nameservers to OpenDNS, which uses SmartCache. Seems like a better approach in general.
Same. I use OpenDNS and I had no idea there was an attack happening until I asked a co-worker to review something on GitHub and they couldn't access it. SmartCache saved me a lot of hours that could have been lost Friday.
Me too. I also setup a crontab to capture DNS entries for all services I depend on.