Live data from Hacker News

Mmm, Pi-hole

troyhunt.com

331–340 of 421 posts

Re: Mmm, Pi-hole

#331
post #219

Isn't this an admission the internet is not safe by default, and you need specialized knowledge and hardware to make the Internet safe(r)? Xfinity/Comcast hardware (cable and WiFi integrated) works with the Pi-hole how? I can't change the DNS addresses on Xfinity hardware. Ok so I have to buy my own router, in which case Xfinity blames all problems on running by own hardware. Another ISP with which I'm familiar, when…

>Xfinity/Comcast hardware (cable and WiFi integrated) works with the Pi-hole how?

Once the pihole has been setup and has an IP it becomes a DNS server, you just then tell your end devices to use the piholes ip address as the dns server.

DNS requests either go where you want (static IP addressing) or where to the xfinity/Comcast (DHCP addressing).

And no, the internet is not safe by default, by neither is the real world.

Re: Mmm, Pi-hole

#332

My Pi-hole with updated block lists (blocking trackers as well as ads) sits at around 87.7% requests blocked, which is absolutely mind-blowingly ridiculous. I see absolutely no negative effects browsing like this. Everything I've come across still works fine. Even sites that detect uBlock Origin and tell me to disable it, will work with that disabled and Pi-hole still blocking the ads instead. I heavily believe we sh…

> I heavily believe we should be supporting creators As do I. There's two significant issues I have supporting most sites: 1. They provide only a subscription that is comparable cost to an old-media full subscription. Like most people in the Internet age I have a small number of main sources that I visit daily, and a much larger secondary tier where I may average one or two stories a week. Or they're the sites linked…

> I heavily believe we should be supporting creators

As do I. There's two significant issues I have supporting most sites:

If some big company like Apple, Microsoft, or Amazon wanted to get behind micropayments, they might be able to actually get it started. It would basically amount to disrupting the advertising model itself. Advertising would morph into influencer media produced at the behest of advertisers, but much of media would be much freer from the worst depredations of advertising.

Re: Mmm, Pi-hole

#333
post #264
post #234

Earlier quoted context omitted.

Personally, I don’t want to pay anything for content. Look at cable tv. It got so bad there is a cord cutting movement. The same will happen again in another form.

Cable sucks because the revenue comes from the ads, not your cable bill.

Which is interesting because that is the environment where paid ads have the least structural advantage.

My take is that no matter what people say they prefer to subsidize their content by viewing ads over actually paying the equitable price for it.

Re: Mmm, Pi-hole

#334
You don't have to run it on a Rasberry Pi! I have a little server under our stairs, with the Proxmox Hypervisor (KVM + LXC with a lovely GUI) on it. It's free and you can figure up VMs etc. PiHole is a LXC container. Seems silly to "waste" a bit of hardware when most people here will have access to some form of virtualisation. I've given it 256Mb of RAM and it runs fine.

Re: Mmm, Pi-hole

#335
post #131

My Pi-hole with updated block lists (blocking trackers as well as ads) sits at around 87.7% requests blocked, which is absolutely mind-blowingly ridiculous. I see absolutely no negative effects browsing like this. Everything I've come across still works fine. Even sites that detect uBlock Origin and tell me to disable it, will work with that disabled and Pi-hole still blocking the ads instead. I heavily believe we sh…

> I heavily believe we should be supporting creators Agreed. Do you disable your pi-hole on sites like Reddit? They vet their ads so not have any of the malicious attributes that you described. All the larger newspagers like WaPo and NYT are also good about this too. I'm all for blocking intrusive or malicious ads. But quality content depends on ad revenue. The author dedicated an entire paragraph on donating to the…

Ads on Reddit used to be alright, but since the advent of their dumpster fire of a redesign, their ads have turned into block worthy material.

Re: Mmm, Pi-hole

#336

My Pi-hole with updated block lists (blocking trackers as well as ads) sits at around 87.7% requests blocked, which is absolutely mind-blowingly ridiculous. I see absolutely no negative effects browsing like this. Everything I've come across still works fine. Even sites that detect uBlock Origin and tell me to disable it, will work with that disabled and Pi-hole still blocking the ads instead. I heavily believe we sh…

did you use the 'default' lists that come with the installation or did you add new ones? would you mind sharing your feed list?

Re: Mmm, Pi-hole

#337

Earlier quoted context omitted.

Can anyone recommend a "2018 good choice" for a consumer router that can run custom firmware (including dnsmasq), or a trustworthy recommendation website? Wirecutter for example doesn't note third party firmware: https://thewirecutter.com/reviews/best-wi-fi-router/

It may be more full-featured than you are looking for, but have a look at the Turris Omnia. It is extremely customisable and you can add an internal SSD to run LXC containers on (including one running Pi-hole, which is what I do). Not cheap, and sometimes unforgiving if you don't know exactly what you are doing, but worth every penny in my opinion. https://omnia.turris.cz/en/

Have you had any issues with the auto updater? I got rid of my Omnia after an auto-update broke DNS while I was away from home.

Ironically, went to Unifi after reading Troy's blogs about it - now regretting it immensely as the hardware is nowhere near as powerful as the Omnia.

Re: Mmm, Pi-hole

#338

Earlier quoted context omitted.

On an RPi I can plug it in to the USB on my router for power and connect with ethernet. Otherwise I have to run a full powered server perpetually to manage DNS for the home network. Made sense to me. I stopped using it as mine was seemingly hacked (100,000 lookups or so in a short time, presumably some sort of page-impression generation?) and I hadn't the time to trace if it was a problem with the project or not.

And if you’re that way inclined, a POE Pi hat can get another cable removed.

Have they fixed the PoE issues? http://linuxgizmos.com/refund-offered-for-raspberry-pi-poe-h...

Re: Mmm, Pi-hole

#339

Earlier quoted context omitted.

Can anyone recommend a "2018 good choice" for a consumer router that can run custom firmware (including dnsmasq), or a trustworthy recommendation website? Wirecutter for example doesn't note third party firmware: https://thewirecutter.com/reviews/best-wi-fi-router/

Not really an off-the shelf consumer router, but since you want to install custom firmware anyways, you might want to consider the PC-Engines APU2 board [1]. You can either install any "normal" desktop x86_64 Linux distribution or a specialized router OS such as OpenWrt [2]. The AMD APU on the board supports hardware virtualisation, so you're able to run several VMs via KVM to isolate the services the router is provi…

Unfortunately it does not come with 3 mPCIe slots, the one furthest to the left is an mSATA port.

Re: Mmm, Pi-hole

#340

My Pi-hole with updated block lists (blocking trackers as well as ads) sits at around 87.7% requests blocked, which is absolutely mind-blowingly ridiculous. I see absolutely no negative effects browsing like this. Everything I've come across still works fine. Even sites that detect uBlock Origin and tell me to disable it, will work with that disabled and Pi-hole still blocking the ads instead. I heavily believe we sh…

Whenever mine has gone much above 30% (70ish prob highest ever) it generally turns out to be an unattended app left open on the android device I have hanging off the back of the TV. I recall the NYT app, for example, pinging home every 30 seconds or so.

You can trace offending devices and traffic via pi-hole logs. The UI is a bit clunky but gets the job done.

Post reply on HN