Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PiHole-Google: Completely Block Google and Its Services

github.com

Post reply on HN
Print view View original

121–130 of 141 posts

Re: PiHole-Google: Completely Block Google and Its Services

#121

Post by her_tummy_hurts »

maccard wrote: post #69
geokon wrote: post #50

The problem is that JS Fonts and other CDNed stuff won't load and websites will hang or work weird - particularly Stackoverflow. Bc it's all over https you can't MITM it and inject your own with OpenWRT/piholes. Decentraleyes (a Firefox browser extension) fixes some of this, but not all. If anyone has any additional suggestions, please let me know (it makes life bearable in China without a VPN)

Are there any extensions that modify external resources and point them towards a "trusted" cdn? e.g. requesting " rel="nofollow">https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.mi... Would automatically remap to https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.m...

That’s a really cool idea

Re: PiHole-Google: Completely Block Google and Its Services

#122

Post by orpep90nxkfo »

hombre_fatal wrote: post #114
orpep90nxkfo wrote: post #88

Earlier quoted context omitted.

Not Google, but Twitter thinks I’m a 45 old married male with 3 kids I’m 39, divorced, and have 2 kids It’s almost as if the big data sales pitch is an epic joke like nuclear powered everything being pitched in the 50s

What? That is an incredibly accurate profile derived from random tweets / follows, and certainly accurate enough to serve you ads.

Fair point. Except I don’t post, follow feeds only, put nothing about my personal life in my profile, and they asked for my birthday.

So my point was aimed more at advertisers buying on Twitter: they filled in the blanks and got them all wrong. And the one they had the data for they got wrong.

That and I’m not a internet consumer really. Twitter can see I’ve blocked over 1,000 accounts that promoted tweets. Is that statistic being shared with advertisers?

Likely not. Advertisers believe so who cares.

It’s so ephemeral as to be useless.

Re: PiHole-Google: Completely Block Google and Its Services

#123

Post by mirimir »

dmitriid wrote: post #82
mirimir wrote: post #55

Earlier quoted context omitted.

True. But even if I had sound, I'd pick text over video. I don't have the patience for unedited rambling. I don't have sound because it'd be a security vulnerability. Given that my wife has a mobile on 24/7.

Do you or did you consume all of educational content through static text and images only? Or maybe, just maybe, a lot of things were explained and shown to you?

Lectures and rambling are distinguishable.

Some of my professors did ramble, now and then, but that was mostly OK.

Re: PiHole-Google: Completely Block Google and Its Services

#124

Post by fileoffset »

madads wrote: post #76

I would like to simply block irrelevant YouTube ads while my toddler indulges in ‘Land before time’ episodes. Is that possible? Last time I checked they use some randomised domains to load ads...

Try the YouTube Enhancer addon in Firefox

Re: PiHole-Google: Completely Block Google and Its Services

#125

Post by 3xblah »

jasode wrote: post #65
3xblah wrote: post #34

Another approach is whitelisting. Like a default firewall rule of "block all" and a set of specific exceptions, I find this approach can be easier to manage. Probably not going to work for everyone but works for me. Figure out what domains I need to access for the content I am after[1] and just allow those. "Block" everything else. For example, I might need something like .googlevideo.com once in a while but I will n…

>Another approach is whitelisting. Like a default firewall rule of "block all" and a set of specific exceptions, I find this approach can be easier to manage. I tried the whitelisting approach but quickly found out this breaks many websites with shopping cart and credit-card checkouts because they use payments api gateways. Because the url for the card processing gateway is a different company from the ecommerce site…

For commercial web use, I use a DNS cache just like the website creator would expect; I use a popular browser in these instances, too. Nothing out of the ordinary. For exactly the reason you mention. If something goes wrong I want to be able to say I am the "typical user", not an enlightened one.

However, I rarely use the web for commercial purposes. Almost all use is non-commercial.

I do not use a Pi-Hole. I do like dnsmasq. I prefer djbdns. I use older hardware running Net/OpenBSD as routers and newer hardware running OpenWRT.

I also do not use popular graphical browsers much. I probably would not use whitelisting if I was doing all web use via a popular graphical browser. I reasonably consistent speed across all websites by using text-only browsers and tcp/http clients.

Cannot really speak for other users. Everyone is different. For me, whitelisting works well.

Re: PiHole-Google: Completely Block Google and Its Services

#126

Post by mikedilger »

geokon wrote: post #50

The problem is that JS Fonts and other CDNed stuff won't load and websites will hang or work weird - particularly Stackoverflow. Bc it's all over https you can't MITM it and inject your own with OpenWRT/piholes. Decentraleyes (a Firefox browser extension) fixes some of this, but not all. If anyone has any additional suggestions, please let me know (it makes life bearable in China without a VPN)

Just this morning I setup a greasemonkey script to rewrite those URLs to a local webserver (things like ajax.googleapis.com serving things like jquery). Pages load faster now too. Very limited, but works in many cases:

  // ==UserScript==
  // @name     localize ajax googleapis
  // @version  1
  // @grant    none
  // @run-at  document-start
  var scripts = document.getElementsByTagName("script");
  for (i=0; i
EDIT: I just read the other comments and installed decentraleyes. I'm sure it's way better than this grease I just posted.

Re: PiHole-Google: Completely Block Google and Its Services

#127

Post by cpach »

inetknght wrote: post #102
Remed wrote: post #60

Earlier quoted context omitted.

You can create a self-signed certificate for Google domains and trust it on your machines. Then you can MITM. This won't work well if you want to do it at a scale, with a number of 3rd party users, but if the only user is you or your family, it should do the trick.

> You can create a self-signed certificate for Google domains and trust it on your machines. Then you can MITM. Can you point to or write up a blog post with a proof of concept?

mkcert[1] is probably the easiest way to generate root certificate and leaf certificate(s). Then you can use a proxy like Squid to intercept the traffic[2]. You’d also need a local DNS server to point hosts like fonts.googleapis.com to your own web server.

https://github.com/FiloSottile/mkcert

https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-...

[Edit: Now that I think of it, I’m not sure if Squid is really required...]

Re: PiHole-Google: Completely Block Google and Its Services

#128

Post by keithnoizu »

keithnoizu wrote: post #86
geokon wrote: post #50

The problem is that JS Fonts and other CDNed stuff won't load and websites will hang or work weird - particularly Stackoverflow. Bc it's all over https you can't MITM it and inject your own with OpenWRT/piholes. Decentraleyes (a Firefox browser extension) fixes some of this, but not all. If anyone has any additional suggestions, please let me know (it makes life bearable in China without a VPN)

Speaking as someone in china on business at the moment, does anything really make like in China bearable with out a VPN.

The real time censoring of all the news channel whenever the escalation in hong kong comes up is a bit too much for me.

Re: PiHole-Google: Completely Block Google and Its Services

#129

Post by cpach »

Gregordinary wrote: post #100
edf13 wrote: post #95

Earlier quoted context omitted.

Won’t work for Google as their Cets are pinned

Not sure about other browsers, but Chrome will ignore certificate pins if the cert provided chains to local trust anchor. From: http://www.chromium.org/Home/chromium-security/security-faq#... "Chrome does not perform pin validation when the certificate chain chains up to a private trust anchor. A key result of this policy is that private trust anchors can be used to proxy (or MITM) connections, even to pinned sites.…

Does anyone know how Chrome does do distinguish a private trust anchor from all the other root certificates that are provided by the operating system? (Comodo, Comsign, Digicert et al)

Re: PiHole-Google: Completely Block Google and Its Services

#130

Post by Aromasin »

distances wrote: post #44
whatshisface wrote: post #38

Earlier quoted context omitted.

Personalization makes it incredibly hard to "watch the watchers," because everyone is getting a slightly different view of what Google is doing. I would like to see a program where users submitted data about their recommendations to researchers so that we could uncover Google's opinions. It would have a lot of financial value to YouTubers and would make it harder for Google to abuse their role as censor. I could imag…

I clear my YouTube search and watch history about once a week. Partly because of privacy, but also because a single binge of, say, metal casting videos does not mean I want them recommend ever again in the future.

The problem with this is that it then just suggests the content that hits the front page instead - so for the most part a load of crap. All I'm doing is swapping recommended videos on, say, metal casting, for YouTube's "on-brand" content creators which pump out generic content on a bi-daily basis at 10 minutes in length.
Post reply on HN