This is really groundbreaking but it got less noise than I thought it would. Adhell (an app that is capable of doing system wide ad blocking along with many other things thanks to Knox which is Samsung-only capability) was the main reason I stayed with Samsung for years. Now every phone with Android Pie will be to use dns based ad blocking in all networks without running an annoying app in the background.
There's also AdAway, which runs on any rooted Android phone, and doesn't require you to show all your traffic to a particular DNS server.
AdGuard DNS: A Privacy-Oriented DNS Server
41–50 of 111 posts
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#42Earlier quoted context omitted.
It doesn't cost that much to run a DNS server, even with DoH/DoT. You can easily serve a few million users with a milisecond latency off a cheap instance with 2GB instance. That's not to say the cost is zero, but with with multiple caching layers (O/S, browser, router, etc), and serving same results for everyone, server costs are not very high.
This might be a little more expensive than usual if it returns NXDOMAIN for known ad serving domains. Many DNS clients don't cache failures.
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#43I’ve been using Pi-Hole on my home network and it’s amazing. Routinely 18-20%% of DNS requests are blocked. When my wife goes out onto another network she says she is shocked at how ugly her web browsing becomes (ads on nytimes, huffpo, etc). I highly recommend it. Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP.
> Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP. Curious how you set this up? I see cloudflare as an option in the pihole settings but doesn't appear to be encrypted? (at least as a default)
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#44Earlier quoted context omitted.
This might be a little more expensive than usual if it returns NXDOMAIN for known ad serving domains. Many DNS clients don't cache failures.
Don't know how AdGuard does this, but pihole returns 127.0.0.1 for ad-serving domains. I don't know enough about DNS to guess why it does that instead of returning a failure, though my guess is that maybe doing so prevents software from falling through to a user's secondary DNS server.
Edit: Apparently it is. https://pi-hole.net/2018/05/18/nxdomain-and-null-blocking-wi...
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#45I never liked the idea of using DNS services for filtering web content. For one, it seems like the wrong tool for the job. Filtered content can simply switch to identifying content by IP address instead of DNS, correct? Or change DNS constantly. And for two, of course there are concerns with handing someone your DNS queries in return for filtering...
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#46Re: AdGuard DNS: A Privacy-Oriented DNS Server
#47How is it being monetized? I have become more and more suspicious of “free” privacy services. Unless there is an exchange of money for a service, it is highly likely that eventually the company will either fold, or decide to sell the previously private information.
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#48Misleading claim: any external DNS server is not private. Your requests are directed to a third-party. I suspect data-mining you is how they pay their server bills. The correct technical solution for privacy is running your own DNS server locally.
> We will never sell your data or use it to target ads. Period.
> We’ve retained KPMG to audit our systems annually
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#49I’ve been using Pi-Hole on my home network and it’s amazing. Routinely 18-20%% of DNS requests are blocked. When my wife goes out onto another network she says she is shocked at how ugly her web browsing becomes (ads on nytimes, huffpo, etc). I highly recommend it. Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP.
You might already know this, but in case you don't: they can still see the domain names you visit in plain text because of TLS SNI: https://en.wikipedia.org/wiki/Server_Name_Indication Encrypted SNI is a thing on the horizon that'll let us give the dual middle finger to our ISPs. As far as I know, it is not here now though.
Re: AdGuard DNS: A Privacy-Oriented DNS Server
#50I’ve been using Pi-Hole on my home network and it’s amazing. Routinely 18-20%% of DNS requests are blocked. When my wife goes out onto another network she says she is shocked at how ugly her web browsing becomes (ads on nytimes, huffpo, etc). I highly recommend it. Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP.
> Am using it with cloudfare’s encrypted DNS just as one more middle finger to my ISP. Curious how you set this up? I see cloudflare as an option in the pihole settings but doesn't appear to be encrypted? (at least as a default)