Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AdGuard DNS: A Privacy-Oriented DNS Server

adguard.com

Post reply on HN
Print view View original

21–30 of 111 posts

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#21

Post by FabianBeiner »

mderazon wrote: post #2

I've been looking for something like this for quite some time. I was hoping Cloudflare will offer it but they haven't My main questions are How do we know if we can trust them with our data? How fast are they compared to Cloudflare ? I wish there was something like Signal but for DNS. Similar in the way that you don't have to trust them to know they are not doing nefarious things with your dns queries. I know I can i…

This script might help you compare the speed of the DNS server to any other DNS server out there: https://github.com/cleanbrowsing/dnsperftest/blob/master/dns...

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#22

Post by cyberpip »

djhworld wrote: post #20
Amazonerh wrote: post #6

Earlier quoted context omitted.

But does it work on outside home and on 4G?

I've recently installed Wireguard on one of my Pis to support this, so I can use my pihole while I've been away for the christmas break - has worked perfectly. Admittedly not got it working on android yet but I'm under the impression that there is a way of getting Wireguard working on android

WireGuard is in F-Droid https://f-droid.org/en/packages/com.wireguard.android/ .

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#23

Post by tedivm »

babyslothzoo wrote: post #10

Great idea, but how is this monetized or supported? What are they doing with the data?

They sell their AdGuard program on Android. Because the full version of the program isn't available on the PlayStore (it breaks rules by interfering with other apps) they depend a lot on marketing and word of mouth to get new customers.

The code for their DNS servers is actually open source, so if you want the functionality without relying on AdGuard you can run your own server.

https://github.com/AdguardTeam/AdguardDNS

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#25

Post by cyberpip »

Nullabillity wrote: post #5
Amazonerh wrote: post #3

This is really groundbreaking but it got less noise than I thought it would. Adhell (an app that is capable of doing system wide ad blocking along with many other things thanks to Knox which is Samsung-only capability) was the main reason I stayed with Samsung for years. Now every phone with Android Pie will be to use dns based ad blocking in all networks without running an annoying app in the background.

There's also AdAway, which runs on any rooted Android phone, and doesn't require you to show all your traffic to a particular DNS server.

There is also Blokada, which creates a local VPN on Android and runs it against a hosts file: https://f-droid.org/en/packages/org.blokada.alarm/ .

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#26

Post by ameshkov »

You might want to checkout AdGuard Home if you want to run it on your own server or in your own network: https://github.com/AdguardTeam/AdGuardHome

Notable differences between it and Pi-Hole:

1. Easy to set up and use. It's just a single binary, everything you need is inside.

2. Supports every DNS encryption protocol out-of-the-box: DNS-over-HTTPS, DNS-over-TLS, DNSCrypt.

3. Can run on any platform (even on Windows since today).

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#27

Post by 2bitencryption »

I never liked the idea of using DNS services for filtering web content.

For one, it seems like the wrong tool for the job. Filtered content can simply switch to identifying content by IP address instead of DNS, correct? Or change DNS constantly.

And for two, of course there are concerns with handing someone your DNS queries in return for filtering...

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#28

Post by ignoramous »

drewg123 wrote: post #8
EpiphanyMachine wrote: post #7

update: They say they do not log anything, and pass no information upstream to the authoritative DNS server. ------ I didn't see anything in the announcement about logging or other privacy related questions. The FAQ also didn't list this information. The only thing they mention about privacy is how a dns request to them is protected, but not what they do with the data. Did I miss something? ------- Reading their priv…

I suspect this really screws with the DNS tricks used by many CDNs to route requests to near-by servers. So I would not be surprised if, when using this, YouTube, Netflix, etc, get much slower.

I see the website loading speeds are affected, but I think it is worth it. This is a good stop-gap for anyone who have not setup a pi-hole just yet but at do not want to install an app or an extension in its stead.

Prior to this, I was running Intra [0] on my Android phone to route all DNS traffic to cloudflare-dns and had been pretty happy to use it in tandem with PrivacyBadger, uMatrix, and uBlockOrigin on Firefox.

Someone suggested using AdAway [1] on rooted devices and another app that does a similar trick of running a local VPN on Android through user supplied hosts file. Great alternative.

[0] https://getintra.org/

[1] https://adaway.org/

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#29

Post by maltalex »

On one hand, it looks pretty cool and convenient. On the other, using a DNS server requires a lot of trust.

Giving some unknown company the ability to trivially man-in-the-middle your connection or sell your browsing history is pretty scary. The fact that their code is open source helps a bit, but there's no way to tell whether the code running on their servers is the same as on github.

I'll stick with my pihole/hostsman [0]

[0]: http://www.abelhadigital.com/hostsman/

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#30

Post by ignoramous »

2bitencryption wrote: post #27

I never liked the idea of using DNS services for filtering web content. For one, it seems like the wrong tool for the job. Filtered content can simply switch to identifying content by IP address instead of DNS, correct? Or change DNS constantly. And for two, of course there are concerns with handing someone your DNS queries in return for filtering...

Privacy is one major reason you might want to switch to a dns provider you trust. Not to mention security as well as it isn't uncommon for ISPs or rouge actors to 'take over' domains solely using attacks via DNS.

If you're not using DNS over TLS or HTTPS, I suggest you start right now.

If you're undecided abt DNS based adblock, consider reading this blog post: https://www.troyhunt.com/mmm-pi-hole/

Post reply on HN