Hacker News Reader

It's nice to see a country as large as Brazil having 24% of its domains with DNSSEC records (973k out of 3.9m domains). I expected it to be close to zero.

This is very interesting work. I wish there was an easy way to see DNSSEC statistics for each ccTLD side-by-side with the fingerprint report.

View on HN

brazil is the only country other than US that understood internet control.

they have their own, centralized registrar, and they use proper tlds such as gov, jus (justice) etc with their own tls system (which sometimes update faster than browsers can keep up so you have to add root signatures manually to your systems)

I was actually surprised when Kaspersky announced NIC.br was compromised and many banking sites where hijacked. If I remember correctly, they (NIC.br) identified a vulnerability but then denied Kaspersky claims.

https://www.wired.com/2017/04/hackers-hijacked-banks-entire-...

Did anyone ever release any more info on this?

so far, all points to the bank falling for a scam and releasing credentials to nic.br

Probably wouldn’t be terribly hard to generate that data.

Reply on news.ycombinator.com