Mmm, Pi-hole

#1

Post by cryptography » Wed, Sep 26, 2018, 12:24 PM UTC

Mmm, Pi-hole
troyhunt.com

Re: Mmm, Pi-hole

#2

Post by tomrod » Wed, Sep 26, 2018, 12:39 PM UTC

This is excessive. Amazingly so.

I don't mind an ad or two. I don't want you siphoning my network and computational resources without compensation.

Re: Mmm, Pi-hole

#3

Post by josefresco » Wed, Sep 26, 2018, 12:39 PM UTC

> And yes, I'll chat to her about the Fox News situation as well!

Highlight of the article right here.

Re: Mmm, Pi-hole

#4

Post by avenius » Wed, Sep 26, 2018, 12:46 PM UTC

It's about time this became a public discussion. Websites have become so horribly bloated, while most discussions seem to revolve around whether ads are acceptable or not.

Re: Mmm, Pi-hole

#5

Post by lousken » Wed, Sep 26, 2018, 12:46 PM UTC

With disabled js dailymail loads 603(6.8MB) files 590 of which are images.

Re: Mmm, Pi-hole

#6

Post by r3bl » Wed, Sep 26, 2018, 12:47 PM UTC

Off-topic, but that Vollkron font definitely styles 1s very weirdly. I thought it said I.I.I.I instead of 1.1.1.1 until I copied the text and pasted it somewhere else.

Re: Mmm, Pi-hole

#7

Post by galadran » Wed, Sep 26, 2018, 12:49 PM UTC

> Do you use a popular browser extension? How confident are you that the creator wouldn’t accept a $10k offer to hand it over only to have it then go rogue on you?

What makes the Pi-Hole organization any more trustworthy? (and the software stack it all depends on)

Personally, I'm inclined to trust them both and hope that the long arm of the GDPR will be effective. Optimistic, I know.

Re: Mmm, Pi-hole

#8

Post by travisp » Wed, Sep 26, 2018, 12:54 PM UTC

galadran wrote: post #7

> Do you use a popular browser extension? How confident are you that the creator wouldn’t accept a $10k offer to hand it over only to have it then go rogue on you? What makes the Pi-Hole organization any more trustworthy? (and the software stack it all depends on) Personally, I'm inclined to trust them both and hope that the long arm of the GDPR will be effective. Optimistic, I know.

In this case it just acts as a DNS resolver. That's potentially risky when resources don't use SSL, but far less than a browser extension that can change a page in place, inject JavaScript, and record keystrokes on all pages.

Re: Mmm, Pi-hole

#9

Post by jwilk » Wed, Sep 26, 2018, 12:57 PM UTC

josefresco wrote: post #3

> And yes, I'll chat to her about the Fox News situation as well! Highlight of the article right here.

Hopefully he told her beforehand he's going to spy on her…

Re: Mmm, Pi-hole

#10

Post by msmith » Wed, Sep 26, 2018, 1:01 PM UTC

galadran wrote: post #7

> Do you use a popular browser extension? How confident are you that the creator wouldn’t accept a $10k offer to hand it over only to have it then go rogue on you? What makes the Pi-Hole organization any more trustworthy? (and the software stack it all depends on) Personally, I'm inclined to trust them both and hope that the long arm of the GDPR will be effective. Optimistic, I know.

Since Pi-Hole is a DNS server running on a separate machine, it just doesn’t have the same level of access as browser extension would. Even if it was rogue, the worst it could do is share the list of domains that you visit, and possibly hijack your HTTP (but not HTTPS) sessions.