{"video_id":"snHpPBwOMPE","title":"How DNS Leaks Reveal Your Browsing History","channel":"Techquickie","show":"Techquickie","published_at":"2019-05-06T14:58:16Z","duration_s":280,"segments":[{"start_s":0.0,"end_s":6.68,"text":"Thanks for watching Techquickie. Click the subscribe button, then enable notifications with the bell icon so you won't miss any future videos.","speaker":null,"is_sponsor":0},{"start_s":6.84,"end_s":12.0,"text":"So I would argue that it's healthy to be a little concerned about the people who follow you around online,","speaker":null,"is_sponsor":0},{"start_s":12.36,"end_s":19.08,"text":"be it the government, unscrupulous advertisers, or maybe your crazy ex who swears she'll never love another man.","speaker":null,"is_sponsor":0},{"start_s":20.32,"end_s":25.76,"text":"But even if you've taken all of the obvious precautions including hiding behind seven proxies,","speaker":null,"is_sponsor":0},{"start_s":25.76,"end_s":32.16,"text":"browsing only in incognito mode, whole drive encryption, and stationing an attack dog outside of your computer room,","speaker":null,"is_sponsor":0},{"start_s":32.92,"end_s":38.48,"text":"unfortunately, there might still be an insidious hole in your defenses that could expose a fair amount about you.","speaker":null,"is_sponsor":0},{"start_s":38.48,"end_s":40.98,"text":"I'm talking about DNS leaks.","speaker":null,"is_sponsor":0},{"start_s":40.98,"end_s":45.76,"text":"And if you don't know what the DNS is, you can check out our other video right up here on how it works.","speaker":null,"is_sponsor":0},{"start_s":45.76,"end_s":51.98,"text":"But simply put, it's the system that matches web addresses you enter, like youtube.com, to numerical IP","speaker":null,"is_sponsor":0},{"start_s":52.34,"end_s":55.44,"text":"addresses so that your web browser will know which site to bring up.","speaker":null,"is_sponsor":0},{"start_s":55.44,"end_s":55.72,"text":"And","speaker":null,"is_sponsor":0},{"start_s":55.72,"end_s":63.84,"text":"now typically, whenever you try to visit a new website, your computer will ask a DNS server maintained by your ISP for its IP address.","speaker":null,"is_sponsor":0},{"start_s":64.4,"end_s":70.14,"text":"Now this means that your ISP knows which sites you're visiting, which normally wouldn't be an issue,","speaker":null,"is_sponsor":0},{"start_s":70.22,"end_s":74.42,"text":"but if you're doing something sensitive, you may not want your ISP to have this information,","speaker":null,"is_sponsor":0},{"start_s":75.4,"end_s":80.36,"text":"especially if they're logging it indefinitely or, much worse, selling it to third parties.","speaker":null,"is_sponsor":0},{"start_s":80.36,"end_s":83.52,"text":"Oh, but come on John, that's amateur hour stuff.","speaker":null,"is_sponsor":0},{"start_s":83.52,"end_s":85.4,"text":"I use a VPN that I pay","speaker":null,"is_sponsor":0},{"start_s":85.4,"end_s":88.12,"text":"actual money for, so I'm totally safe, right?","speaker":null,"is_sponsor":0},{"start_s":88.34,"end_s":90.14,"text":"Well, maybe not.","speaker":null,"is_sponsor":0},{"start_s":90.14,"end_s":95.9,"text":"Depending on how your VPN is configured, it might be using a secure encrypted tunnel to connect you with the websites themselves,","speaker":null,"is_sponsor":0},{"start_s":96.58,"end_s":103.16,"text":"but the DNS request to help you navigate to those sites might still be going to your ISP's DNS server.","speaker":null,"is_sponsor":0},{"start_s":103.73,"end_s":111.85,"text":"Now this is because some operating systems, and Windows is notorious for this, will rely on whatever DNS server it is saved as the","speaker":null,"is_sponsor":0},{"start_s":111.95,"end_s":115.11,"text":"default. So if this is your ISP's, it might completely","speaker":null,"is_sponsor":0},{"start_s":115.11,"end_s":120.65,"text":"ignore the fact you have a VPN running and send all of your browsing requests to your ISP anyway.","speaker":null,"is_sponsor":0},{"start_s":120.99,"end_s":126.05,"text":"Now, they won't see exactly what pages you're visiting or the contents of a message you type,","speaker":null,"is_sponsor":0},{"start_s":126.27,"end_s":132.29,"text":"but they can build a shockingly robust profile of your online life based on just this information alone.","speaker":null,"is_sponsor":0},{"start_s":132.55,"end_s":134.87,"text":"So how can you plug these pesky leaks?","speaker":null,"is_sponsor":0},{"start_s":135.23,"end_s":141.77,"text":"Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature,","speaker":null,"is_sponsor":0},{"start_s":141.81,"end_s":143.93,"text":"which will encrypt and route all DNS requests to the ISP.","speaker":null,"is_sponsor":0},{"start_s":143.93,"end_s":145.09,"text":"So how can you plug these pesky leaks? Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature, which will encrypt and route all DNS requests to the ISP.","speaker":null,"is_sponsor":0},{"start_s":145.11,"end_s":147.27,"text":"So how can you plug these pesky leaks? Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature, which will encrypt and route all DNS requests to the ISP.","speaker":null,"is_sponsor":0},{"start_s":147.49,"end_s":153.65,"text":"After turning this setting on, you can test it as a site that checks for any remaining leaks to see if it's functioning properly,","speaker":null,"is_sponsor":0},{"start_s":153.65,"end_s":155.85,"text":"and we'll put a link to one of those sites down in the video description.","speaker":null,"is_sponsor":0},{"start_s":155.85,"end_s":162.85,"text":"And even if you're not using a VPN, you can still route DNS requests through different servers if you don't trust your ISP.","speaker":null,"is_sponsor":0},{"start_s":162.85,"end_s":167.21,"text":"There are a number of publicly DNS servers out there that you can find with a little research.","speaker":null,"is_sponsor":0},{"start_s":167.61,"end_s":170.73,"text":"Two of the more notable ones are run by Google and CloudFlare.","speaker":null,"is_sponsor":0},{"start_s":171.41,"end_s":175.09,"text":"To set this up just bring up your IPv4 settings under","speaker":null,"is_sponsor":0},{"start_s":175.11,"end_s":179.31,"text":"Ethernet properties in Windows and enter the IP addresses of the DNS servers","speaker":null,"is_sponsor":0},{"start_s":179.31,"end_s":184.23,"text":"you'd like to use. Though Windows 8 and 10 users should note that a new feature","speaker":null,"is_sponsor":0},{"start_s":184.23,"end_s":191.31,"text":"called SMHNR, that's a mouthful, anyway, well it could still route your request","speaker":null,"is_sponsor":0},{"start_s":191.31,"end_s":194.85,"text":"through your ISP, so we've linked a plugin that can disable it in the video","speaker":null,"is_sponsor":0},{"start_s":194.85,"end_s":199.11,"text":"description if you're using a VPN. And well-regarded public DNS servers can","speaker":null,"is_sponsor":0},{"start_s":199.11,"end_s":203.19,"text":"have other benefits. For example, Google claims that their service only keeps","speaker":null,"is_sponsor":0},{"start_s":203.19,"end_s":207.81,"text":"logs of users' IP addresses for 48 hours before deleting them, provides speed","speaker":null,"is_sponsor":0},{"start_s":207.81,"end_s":212.41,"text":"improvements in many cases, and encrypts your DNS requests as well. Of course, no","speaker":null,"is_sponsor":0},{"start_s":212.41,"end_s":217.41,"text":"matter who you use, you're still trusting essentially some rando, just not your ISP.","speaker":null,"is_sponsor":0},{"start_s":217.41,"end_s":222.13,"text":"To be respectful of your privacy, so read their privacy policies thoroughly. You","speaker":null,"is_sponsor":0},{"start_s":222.13,"end_s":225.57,"text":"don't want to spring a leak somewhere else, or else your request for privacy","speaker":null,"is_sponsor":0},{"start_s":225.57,"end_s":230.55,"text":"will end up feeling kind of like a boat ride in a pasta strainer. And speaking of","speaker":null,"is_sponsor":0},{"start_s":230.55,"end_s":232.63,"text":"racing across the lake in a pasta strainer,","speaker":null,"is_sponsor":0},{"start_s":232.63,"end_s":233.17,"text":"are you ready to go?","speaker":null,"is_sponsor":0},{"start_s":233.17,"end_s":236.25,"text":"Are you racing against the clock as a freelancer? It's challenging, but with the","speaker":null,"is_sponsor":0},{"start_s":236.25,"end_s":238.67,"text":"growth of the internet, there's never been more opportunities for the","speaker":null,"is_sponsor":0},{"start_s":238.67,"end_s":241.93,"text":"self-employed. To meet this need, check out FreshBooks Cloud Accounting","speaker":null,"is_sponsor":0},{"start_s":241.93,"end_s":246.29,"text":"Software, designed for the way that you work. It's the simplest and easiest way","speaker":null,"is_sponsor":0},{"start_s":246.29,"end_s":249.79,"text":"to be more productive, more organized, and more importantly, get paid quickly.","speaker":null,"is_sponsor":0},{"start_s":249.79,"end_s":254.11,"text":"Create and send professional-looking invoices in less than 30 seconds, set up","speaker":null,"is_sponsor":0},{"start_s":254.11,"end_s":257.71,"text":"online payments with just a couple of clicks, and get paid up to four days","speaker":null,"is_sponsor":0},{"start_s":257.71,"end_s":261.07,"text":"faster. See when your client has seen your invoice and put an end to the","speaker":null,"is_sponsor":0},{"start_s":261.07,"end_s":262.64,"text":"guessing games.","speaker":null,"is_sponsor":0},{"start_s":262.64,"end_s":265.96,"text":"FreshBooks is offering a 30-day unrestricted free trial to our viewers.","speaker":null,"is_sponsor":0},{"start_s":265.96,"end_s":270.1,"text":"To claim it, just go to freshbooks.com slash techwiki and enter techwiki in the","speaker":null,"is_sponsor":0},{"start_s":270.1,"end_s":271.96,"text":"how did you hear about us section.","speaker":null,"is_sponsor":0},{"start_s":271.96,"end_s":275.32,"text":"Okay guys, thanks for watching. Like, dislike, check out other channels, leave a","speaker":null,"is_sponsor":0},{"start_s":275.32,"end_s":278.08,"text":"comment down below with your ideas for future videos, and don't forget to","speaker":null,"is_sponsor":0},{"start_s":278.08,"end_s":278.58,"text":"subscribe.","speaker":null,"is_sponsor":0}],"full_text":"Thanks for watching Techquickie. Click the subscribe button, then enable notifications with the bell icon so you won't miss any future videos. So I would argue that it's healthy to be a little concerned about the people who follow you around online, be it the government, unscrupulous advertisers, or maybe your crazy ex who swears she'll never love another man. But even if you've taken all of the obvious precautions including hiding behind seven proxies, browsing only in incognito mode, whole drive encryption, and stationing an attack dog outside of your computer room, unfortunately, there might still be an insidious hole in your defenses that could expose a fair amount about you. I'm talking about DNS leaks. And if you don't know what the DNS is, you can check out our other video right up here on how it works. But simply put, it's the system that matches web addresses you enter, like youtube.com, to numerical IP addresses so that your web browser will know which site to bring up. And now typically, whenever you try to visit a new website, your computer will ask a DNS server maintained by your ISP for its IP address. Now this means that your ISP knows which sites you're visiting, which normally wouldn't be an issue, but if you're doing something sensitive, you may not want your ISP to have this information, especially if they're logging it indefinitely or, much worse, selling it to third parties. Oh, but come on John, that's amateur hour stuff. I use a VPN that I pay actual money for, so I'm totally safe, right? Well, maybe not. Depending on how your VPN is configured, it might be using a secure encrypted tunnel to connect you with the websites themselves, but the DNS request to help you navigate to those sites might still be going to your ISP's DNS server. Now this is because some operating systems, and Windows is notorious for this, will rely on whatever DNS server it is saved as the default. So if this is your ISP's, it might completely ignore the fact you have a VPN running and send all of your browsing requests to your ISP anyway. Now, they won't see exactly what pages you're visiting or the contents of a message you type, but they can build a shockingly robust profile of your online life based on just this information alone. So how can you plug these pesky leaks? Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature, which will encrypt and route all DNS requests to the ISP. So how can you plug these pesky leaks? Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature, which will encrypt and route all DNS requests to the ISP. So how can you plug these pesky leaks? Well, if you are using a VPN you trust, the most straightforward way is to enable its anti-DNS leak feature, which will encrypt and route all DNS requests to the ISP. After turning this setting on, you can test it as a site that checks for any remaining leaks to see if it's functioning properly, and we'll put a link to one of those sites down in the video description. And even if you're not using a VPN, you can still route DNS requests through different servers if you don't trust your ISP. There are a number of publicly DNS servers out there that you can find with a little research. Two of the more notable ones are run by Google and CloudFlare. To set this up just bring up your IPv4 settings under Ethernet properties in Windows and enter the IP addresses of the DNS servers you'd like to use. Though Windows 8 and 10 users should note that a new feature called SMHNR, that's a mouthful, anyway, well it could still route your request through your ISP, so we've linked a plugin that can disable it in the video description if you're using a VPN. And well-regarded public DNS servers can have other benefits. For example, Google claims that their service only keeps logs of users' IP addresses for 48 hours before deleting them, provides speed improvements in many cases, and encrypts your DNS requests as well. Of course, no matter who you use, you're still trusting essentially some rando, just not your ISP. To be respectful of your privacy, so read their privacy policies thoroughly. You don't want to spring a leak somewhere else, or else your request for privacy will end up feeling kind of like a boat ride in a pasta strainer. And speaking of racing across the lake in a pasta strainer, are you ready to go? Are you racing against the clock as a freelancer? It's challenging, but with the growth of the internet, there's never been more opportunities for the self-employed. To meet this need, check out FreshBooks Cloud Accounting Software, designed for the way that you work. It's the simplest and easiest way to be more productive, more organized, and more importantly, get paid quickly. Create and send professional-looking invoices in less than 30 seconds, set up online payments with just a couple of clicks, and get paid up to four days faster. See when your client has seen your invoice and put an end to the guessing games. FreshBooks is offering a 30-day unrestricted free trial to our viewers. To claim it, just go to freshbooks.com slash techwiki and enter techwiki in the how did you hear about us section. Okay guys, thanks for watching. Like, dislike, check out other channels, leave a comment down below with your ideas for future videos, and don't forget to subscribe."}