Live data from Hacker News

Mmm, Pi-hole

troyhunt.com

141–150 of 421 posts

Re: Mmm, Pi-hole

#141
post #138
post #111

There is clearly a mass market for preconfigured plug-&-play versions of this. Reminds me of the little bits they used to (probably still do) sell to go between landline phones & the jack to screen telemarketers.

You have to change DNS on your router or on each device so I don't think it could be entirely plug and play? Preconfigured + some instructions seems doable.

I could definetly see a world where a device like this fronts your home router and is zero config. Maybe a “super” router?

Re: Mmm, Pi-hole

#142

Earlier quoted context omitted.

I found the same thing with emails sent from an airline. It was frustrating because I did actually want to follow the links in the emails as they were to do with a flight I was taking.

You can whitelist domains, you can add to the blacklist or you can temporarily disable pihole (5-10min whatever) while you do something.

[deleted]

Re: Mmm, Pi-hole

#143
post #43

Someone on here recently recommended uMatrix for this purpose and I find that a nice trade-off between usability and request blocking. It's an extension but given it's less opaque than a generic ad-blocker I feel more in control and that it's less likely to go 'rogue' like adblockers do.

I consider myself a pretty savvy user, I'm not a web dev but I understand web technologies, javascript and all that and I simply can't use uMatrix decently. Am I supposed to audit every single external resource to whitelist it? For every website I may want to visit? I don't get it. Ublock seems to do an okay job of blocking most ads and tracking stuff so I'll stick to that in the meantime but I would be really intere…

uMatrix takes time to grok. It made no sense to me at first. Overtime I understood it and see it as a beautiful method of presenting data and using controls.

There is very good youtube tutorial of about 7 minutes that explains it use.

Re: Mmm, Pi-hole

#144
post #130

Earlier quoted context omitted.

Yup, that's a downside. The advantage is that it's much simpler and will also work when you're not on your home network.

How do I edit the hosts file on my iPhone?

Jailbreak it, install openssh, ssh in and edit /etc/hosts. There's also packages in Cydia that add adblock lists to your hosts for you.

Re: Mmm, Pi-hole

#145

Earlier quoted context omitted.

You, and the other commentator, are forgetting that the DNS Server handles all connections, not just those from your browser. Are you confident all the self updating software you use has no vulnerabilities? How about the video games that you play? Even assuming the use of HTTPS, there are other threats. For example, PiHole redirecting you to a MiTM, who simply observes your connection and can learn sensitive informat…

Exactly. This thing is in the best possible location for poisoning DNS for every system on your network. That should be a HUGE concern.

It is an order of magnitude safer than a browser plugin.

Re: Mmm, Pi-hole

#146

Earlier quoted context omitted.

> some websites refusing to function if ads are blocked Don't visit those sites! They want your eyes and/or your money (if a subscription is an option) and you don't want to give it to them. Just stop going there! Edit: I don’t understand the downvotes. Sites aren’t obligated to give you something for nothing. Why does it feel like that’s the default view here?

but there are other people that live in or visit my home. Maybe they want to visit those sites. I'd love a pi-hole like solution that was as easy to temporarily disable as a browser extension.

Isn’t that the compromise of roommates or family? Not everyone gets what they want.

Either they’ll move out, resent you, deal with it, or you’ll do what they want?

Re: Mmm, Pi-hole

#147
post #129

I tried pi-hole but my family couldn't make it work. Pihole blocks a lot of content they want to see, for example, email newsletters from our city gov. I understand why (privacy/tracking concerns) but it was just blocking too much and frustrating non-technical users in my house.

That's interesting. There's another comment further down saying it broke stuff too, but I've honestly never had that happen. The most I've ever seen it "break" anything was formatting issues when people didn't declare the ad div size.

To be fair, we're very light/casual web users as most of my hobbies/entertainment are physical electronics and my wife/kids mostly watch Netflix/Stan or just browse reddit/news sites.

I'm sure there's plenty of stuff it breaks (due to how it works and how complex modern sites/web-apps can be), I've just been lucky that all of the sites we use seem to work fine.

Re: Mmm, Pi-hole

#148
post #129

I tried pi-hole but my family couldn't make it work. Pihole blocks a lot of content they want to see, for example, email newsletters from our city gov. I understand why (privacy/tracking concerns) but it was just blocking too much and frustrating non-technical users in my house.

A lot of these list maintainers put a lot of work into not breaking things, but their are just too many websites out their to know if a block breaks one of them or not. Send the list maintainer an email - or if they are on Github/Gitlab open a ticket and have a discussion. I think you'll find many of them are happy to remove breaking domains. Of course whitelist is always an option too if the list maintainer disagrees with the removal of a domain.

Also, there is a popular whitelist project for the Pi-Hole that can make it more user friendly: https://github.com/anudeepND/whitelist

Re: Mmm, Pi-hole

#149

Earlier quoted context omitted.

It’s essentially dnsmasq which can be run directly on your wireless router if you are using custom firmware. No separate hw needed, no need to horse around with dockers or containers or any of that stuff. I’d guess a lot of people are already running dnsmasq for other purposes, so adding the blocklist and periodically updating it should be trivial.

I was doing this using Tomato and it introduced serious stability issues in the two routers (both Asus) I tried it on. Pi-Hole is a drop in replacement to an existing network setup that doesn't require hacking your router to install a custom firmware. It will also persist router upgrades. My only gripe with Pi-Hole, which isn't their fault really, is that power losses can quickly corrupt the Raspberry Pi's SD Card. I…

Use a different root filesystem. Ext4 is not robust against power loss, as I've discovered in multiple embedded Linux systems where Ext4 was used.

The best filesystems for robustness against power loss seem to be log-structured filesystems like YAFFS2 or QNX's ETFS. The design of the filesystem basically means that a block is never modified on flash, only obsoleted by future writes. The trade-off is that the filesystem has to be reconstructed from the raw blocks at power-on but it's incredibly robust. And the filesystem also has to be garbage-collected before additional writes can be performed. But as long as you run your filesystem below capacity this isn't a big deal.

Re: Mmm, Pi-hole

#150

Earlier quoted context omitted.

It’s essentially dnsmasq which can be run directly on your wireless router if you are using custom firmware. No separate hw needed, no need to horse around with dockers or containers or any of that stuff. I’d guess a lot of people are already running dnsmasq for other purposes, so adding the blocklist and periodically updating it should be trivial.

Can anyone recommend a "2018 good choice" for a consumer router that can run custom firmware (including dnsmasq), or a trustworthy recommendation website? Wirecutter for example doesn't note third party firmware: https://thewirecutter.com/reviews/best-wi-fi-router/

Not really an off-the shelf consumer router, but since you want to install custom firmware anyways, you might want to consider the PC-Engines APU2 board [1]. You can either install any "normal" desktop x86_64 Linux distribution or a specialized router OS such as OpenWrt [2]. The AMD APU on the board supports hardware virtualisation, so you're able to run several VMs via KVM to isolate the services the router is providing.

Of course this board doesn't come with the features of a fully-fledged consumer router, such as built-in DSL/DOCSIS modem, DECT, WiFi, etc, so your mileage may vary. It comes with 3 independent Ethernet ports and 3 mPCIe slots though.

[1] http://pcengines.ch/apu2.htm [2] https://openwrt.org/toh/pcengines/apu2

Post reply on HN