[176112] in North American Network Operators' Group
Re: Mozilla performing pdf.js DNS queries?
daemon@ATHENA.MIT.EDU (Seth Mos)
Thu Nov 13 09:27:58 2014
X-Original-To: nanog@nanog.org
Date: Thu, 13 Nov 2014 15:27:50 +0100
From: Seth Mos <seth.mos@dds.nl>
To: nanog@nanog.org
In-Reply-To: <78C35D6C1A82D243B830523B4193CF5F75CB1CAC55@SBS1.blinker.local>
Errors-To: nanog-bounces@nanog.org
David Hofstee schreef op 13-11-2014 14:39:
> Pdf is quite a standard. One might wonder what it cannot do. One could call it evil.
>
> http://superuser.com/questions/368486/link-to-image-within-pdf-and-have-the-image-displayed
Ah yes, a image within a PDF could definitely do this I suppose. I just
thought it odd that the browser would leak this out.
dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11
dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11
This could become a whole can of worms if a .js TLD ever makes it to the
internet and registers this domain name.
We see this from Ubuntu terminals running Mozilla Firefox 33.0
Best regards,
Seth
>
>
>
> David Hofstee
>
> Deliverability Management
> MailPlus B.V. Netherlands (ESP)
>
>
> -----Oorspronkelijk bericht-----
> Van: NANOG [mailto:nanog-bounces@nanog.org] Namens Seth Mos
> Verzonden: Thursday, November 13, 2014 2:26 PM
> Aan: NANOG list
> Onderwerp: Mozilla performing pdf.js DNS queries?
>
> Hi,
>
> Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a decent amount of queries for pdf.js from what appear to be mozilla browsers.
>
> Seems rather odd that it is performing DNS queries for a internal PDF viewer.
>
> Has anyone else come across these lookups?
>
> Kind regards,
>
> Seth
>
>
