Hacker News Reader

I have a feeling the lesson at the end of this is going to involve setting longer TTLs.

That's a tough one, because in the event of a hijacked domain like this, a lower TTL would also force the "good" settings back faster.