AdGuard DNS: A Privacy-Oriented DNS Server • Hacker News Board

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#101

Post by AdamGibbins » Mon, Dec 31, 2018, 6:49 PM UTC

chewz wrote: post #100

Amazonerh wrote: post #6

Earlier quoted context omitted.

But does it work on outside home and on 4G?

For 10$/year I am running a VPS server in Amsterdam with strongswan ([1] VPN server) and dnscrypt-proxy 2.0 ([2] DNS server which is dispersing queries to multiple DNSCrypt servers and also blocking various ads and bad agents) on it. I also keep nginx to avoid pinging Apple or Google for checking if internet works (captive.apple.com, http://connectivitycheck.gstatic.com/generate_204 are re-routed to my own server). F…

The problem I have with this setup is when using networks that require you click through a captive portal. Often external DNS servers can't resolve their portals -- so you can't click through to open up to the wider internet and have to screw around flipping the DNS temp. After wondering what on earth is going on for a minute or two, as you've forgotten, again.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#102

Post by gcb0 » Mon, Dec 31, 2018, 7:33 PM UTC

jerluc wrote: post #19

gcb0 wrote: post #17

someonewhocares.org/host Local solution. I remember this url from memory, "install" on every device/router I touch.

Neat! Minor note, I think this should be https://someonewhocares.org/hosts (note the plural)

indeed!

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#103

Post by igneo676 » Mon, Dec 31, 2018, 7:56 PM UTC

ignoramous wrote: post #32

The instructions to use adguard DNS on their website doesn't contain how to use adguard DNS over TLS with Android. For anyone running on Android 9 (edit) or later, navigate to Settings -> WiFi and Internet -> Private DNS Select Private DNS provider hostname Add dns.adguard.org (DNS over TLS) Click save. Visit https://googleads.g.doubleclick.net/ and you should see browser's 'Server not found' instead of Google's (dis…

Just wanted to say thanks!

I already use Ad Blocking on my personal phone (LineageOS + AdAway) but my wife's phone is still stock Android and without an Ad Blocker. Intra + AdGuard just fixed that. Goodbye pervasive tracking

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#104

Post by ignoramous » Mon, Dec 31, 2018, 8:38 PM UTC

AdamGibbins wrote: post #101

chewz wrote: post #100

Earlier quoted context omitted.

For 10$/year I am running a VPS server in Amsterdam with strongswan ([1] VPN server) and dnscrypt-proxy 2.0 ([2] DNS server which is dispersing queries to multiple DNSCrypt servers and also blocking various ads and bad agents) on it. I also keep nginx to avoid pinging Apple or Google for checking if internet works (captive.apple.com, http://connectivitycheck.gstatic.com/generate_204 are re-routed to my own server). F…

The problem I have with this setup is when using networks that require you click through a captive portal. Often external DNS servers can't resolve their portals -- so you can't click through to open up to the wider internet and have to screw around flipping the DNS temp. After wondering what on earth is going on for a minute or two, as you've forgotten, again.

Just curious: Wouldn't visiting sites like http://neverssl.com work? If it doesn't, then it's a good opportunity for someone to put a static-ip behind something like http://neverssl.com

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#105

Post by AdamGibbins » Mon, Dec 31, 2018, 8:46 PM UTC

ignoramous wrote: post #104

AdamGibbins wrote: post #101

Earlier quoted context omitted.

The problem I have with this setup is when using networks that require you click through a captive portal. Often external DNS servers can't resolve their portals -- so you can't click through to open up to the wider internet and have to screw around flipping the DNS temp. After wondering what on earth is going on for a minute or two, as you've forgotten, again.

Just curious: Wouldn't visiting sites like http://neverssl.com work? If it doesn't, then it's a good opportunity for someone to put a static-ip behind something like http://neverssl.com

No because often they redirect you to a DNS address that only exists in their internal DNS. And that internal DNS is often to an internal only IP, so you can't VPN all your traffic. e.g. you'll go to http://neverssl.com then get bounced to http://some.internal.net which resolves to 10.10.1.1 which finally serves the portal you have to click through.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#106

Post by oaf357 » Tue, Jan 01, 2019, 12:32 AM UTC

I'm a little disappointed they abandoned CoreDNS. I was really enjoying work with it.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#107

Post by pedrocx486 » Tue, Jan 01, 2019, 9:21 AM UTC

judge2020 wrote: post #48

majui wrote: post #40

Misleading claim: any external DNS server is not private. Your requests are directed to a third-party. I suspect data-mining you is how they pay their server bills. The correct technical solution for privacy is running your own DNS server locally.

https://1.1.1.1/ > We will never sell your data or use it to target ads. Period. > We’ve retained KPMG to audit our systems annually

On Reddit I'd never dare to say this. Cloudflare is widely hated and painted as the enemy of privacy.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#108

Post by intopieces » Tue, Jan 01, 2019, 7:13 PM UTC

LeonM wrote: post #62

intopieces wrote: post #11

Earlier quoted context omitted.

For $5/month you can roll your own OpenVPN server with Digital Ocean and it will. [0] Bonus: your cellular ISP can't see your traffic and you're automatically protected at coffee shops. Downside: Battery life takes a slight hit due to encryption. [0] https://www.digitalocean.com/community/tutorials/how-to-bloc...

Regarding the bonus: you're just shifting the problem. Your ISP can't see your traffic, but now digital ocean can.

Sure. Someone can see my traffic. You're never anonymous on the Internet. But, as other commenters have said, it's a matter of aligning incentives: the likelihood that DigitalOcean will take any notice of my measly account is much lower than my ISP, which would love to know what I'm up to. If that incentive estimation changes, I'm off to a different solution.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#109

Post by nickpsecurity » Tue, Jan 01, 2019, 7:21 PM UTC

LeonM wrote: post #62

intopieces wrote: post #11

Earlier quoted context omitted.

For $5/month you can roll your own OpenVPN server with Digital Ocean and it will. [0] Bonus: your cellular ISP can't see your traffic and you're automatically protected at coffee shops. Downside: Battery life takes a slight hit due to encryption. [0] https://www.digitalocean.com/community/tutorials/how-to-bloc...

Regarding the bonus: you're just shifting the problem. Your ISP can't see your traffic, but now digital ocean can.

It's true. You can reduce risk by using an ethical company. I recommend Prgmr.com over DO. Not just cuz they kindly host Lobste.rs for free. Ive watched one's comments for years plus how they discuss downtime or vulnerabilities kn their blog. They consistently seem like straight-forward, honest business. Low likelihood of nefarious stuff.

Re: AdGuard DNS: A Privacy-Oriented DNS Server

#110

Post by mtgx » Tue, Jan 01, 2019, 7:33 PM UTC

ignoramous wrote: post #32

The instructions to use adguard DNS on their website doesn't contain how to use adguard DNS over TLS with Android. For anyone running on Android 9 (edit) or later, navigate to Settings -> WiFi and Internet -> Private DNS Select Private DNS provider hostname Add dns.adguard.org (DNS over TLS) Click save. Visit https://googleads.g.doubleclick.net/ and you should see browser's 'Server not found' instead of Google's (dis…

Cloudflare should really make an address like dns.cloudflare.com, too. 1dot1dot1dot1.cloudflare-dns.com is cute as an "inside joke" of sorts, but to most people who don't know about IPs and such it would be easier to use the former.