Ha! Love them lawyers!
Seriously. This service hijacks DNS records, rerouting all traffic through their servers so it looks like coming from USA, and they have a few issues. For one, they seem to no distinguish between individual user sessions properly, and they cache aggressively.
This means, for instance, that under Boxee you would see other people old feeds. It also means that they have not cached the applications keys yet, which is what is breaking the apps. And after that is fixed over time when the cache refreshes, you may "lose" apps again when we update them and their signatures, until the cache refreshes again.
Sample of how this works:
Code:
tsella@tsella-xps:~$ nslookup
> boxee.tv
Server: 192.168.1.1 my local DNS masq caching DNS results
Address: 192.168.1.1#53
Non-authoritative answer: Non-auth because it comes from a DNS server other than Boxee's
Name: boxee.tv
Address: 67.225.149.139 Our service ingress
> server 184.106.242.193 usvideo.org DNS server
Default server: 184.106.242.193
Address: 184.106.242.193#53
> boxee.tv
Server: 184.106.242.193 Missing non-auth. They claim they are SOA
Address: 184.106.242.193#53
Name: boxee.tv
Address: 50.22.92.203 and return IP of their servers
Name: boxee.tv
Address: 69.89.9.175
>
You should be aware that when using this sort of service may have significant security ramifications to you, depending on how they implemented it.
Tom
Bookmarks