Seems to operate the same way adguard from mac/android does?
Lockdown: Open-source firewall that blocks app tracking, ads, snooping
11–20 of 79 posts
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#12It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes.
But the ad-blocking vpn server is 127.0.0.1, so perhaps, like it says all the blocking happens right on your phone.
This is what I've been waiting for if this works.
Still getting ads on instagram though.
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#13So pihole then.
No.
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#14For an open source app distributed on the App Store, is there actually any way of verifying that what you get on your phone is the same as the source code you can read?
If Apple keeps pushing their Bitcode LLVM IR trans-compiling, along with magic App Store re-linking, they will kill the possibility of reproducible builds forever. In Apple's world, you are supposed to trust their app vetting process, not the source code on some website.
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#15So pihole then.
This is at the device level as opposed to network level of pihole.
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#16It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. But the ad-blocking vpn server is 127.0.0.1, so perhaps, like it says all the blocking happens right on your phone. This is what I've been waiting for if this works. Still getting ads on instagram though.
On Android, DNS66 does exactly this, available on F-Droid. https://f-droid.org/en/packages/org.jak_linux.dns66/
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#17Looks like the core of this is done via https://developer.apple.com/documentation/networkextension
some cool stuff here:
- Content Filter Providers: https://developer.apple.com/documentation/networkextension/c...
- DNS Proxy Provider: https://developer.apple.com/documentation/networkextension/d...
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#18Is there anywhere with an in-depth overview of what this does? Does it just fail DNS request and block known IPs? How are the lists maintained and updated? With TLS and it surely not mitm-ing connections, that's all it can do correct?
The source indicates that they check-in DNS blocklists as JSON files [0] and txt files (one of which has Facebook IPv4s) [1]. So, the updates to those would require app updates, I guess, unless there's OTA for the blocklists somewhere in the code that I missed. My experience with running client-side DNS based blockers are they consume additional battery and need a lot of RAM if you block with aggressive lists that ha…
> "The folks who build the lockdownhq apps are also the makers of ...[a bunch of other iOS apps]."
are you saying the same group of subcontractors built them all? or that it's the same app repackaged multiple times? or something else?
i use adguard on iOS and while i don't like the first-party exposure (to adguard itself), it's better than being completely naked in public to all sorts of shady actors (including telecom/wireless providers). or is it?
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#19It's "open source", but there's only been 5 commits since August last year? Where do the updates to blocking rules etc come from?
Also, the homepage states "Over 1 Billion Trackers Blocked", but that really feels misleading.
I'd say Guardian Firewall is a much better choice: https://twitter.com/guardianiosapp
Re: Lockdown: Open-source firewall that blocks app tracking, ads, snooping
#20Earlier quoted context omitted.
The source indicates that they check-in DNS blocklists as JSON files [0] and txt files (one of which has Facebook IPv4s) [1]. So, the updates to those would require app updates, I guess, unless there's OTA for the blocklists somewhere in the code that I missed. My experience with running client-side DNS based blockers are they consume additional battery and need a lot of RAM if you block with aggressive lists that ha…
> "The folks who build the lockdownhq apps are also the makers of ...[a bunch of other iOS apps]." are you saying the same group of subcontractors built them all? or that it's the same app repackaged multiple times? or something else? i use adguard on iOS and while i don't like the first-party exposure (to adguard itself), it's better than being completely naked in public to all sorts of shady actors (including telec…
> are you saying the same group of subcontractors built them all?
No. Sorry, I meant that the creators of lockdownhq also built confirmedvpn.
> or something else?
Yes. Alternatives.