
Debunking Trump's “secret server” - apress
http://blog.erratasec.com/2016/11/debunking-trumps-secret-server.html#.WBie7-ErLyJ
======
hga
And as usual, the ends justify the means:

 _Those researchers violated their principles

The big story isn't the conspiracy theory about Trump, but that these malware
researchers exploited their privileged access for some purpose other than
malware research.

Malware research consists of a lot of informal relationships. Researchers get
DNS information from ISPs, from root servers, from services like Google's
8.8.8.8 public DNS. It's a huge privacy violation -- justified on the
principle that it's for the general good. Sometimes the fact that DNS
information is shared is explicit, like with Google's service. Sometimes
people don't realize how their ISP shares information, or how many of the root
DNS servers are monitored.

People should be angrily calling their ISPs and ask them if they share DNS
information with untrustworthy researchers. People should be angrily asking
ICANN, which is no longer controlled by the US government (sic), whether it's
their policy to share DNS lookup information with those who would attempt to
change US elections._

