Live data from Hacker News

Pi-hole 5.0

pi-hole.net

101–110 of 254 posts

Re: Pi-hole 5.0

#101
post #28

Alternatively for MAX_lazyness and convenience I've been using https://nextdns.io , does all the same stuff and is the alternative to cloudflare in Firefox for DNS-over-Https (DOH)

It’s a great service but only the first 300k queries are free, then you are no longer offered any of the benefits unless you pay $1.99 per month

Is that not a trivial amount for hands off DNS recursion services? Consider the cost to purchase a Raspberry Pi, set it up, electricity, wear and tear on flash storage, etc

If you point me at a checkout page for $2/month to not even have to think about plugging a Pi in, I’m going to pull my credit card out in a heartbeat. A single coffee costs me more. Think about your time!

Re: Pi-hole 5.0

#102
post #88

Earlier quoted context omitted.

I set up a pihole and literally forgot about it. Like I was cleaning out a closet on moving day and found it plugged in. Took a moment to even realise what it was doing there.

I’m reminded almost every day that I have a pi-hole since it is not my dns provider when on my company’s vpn. It’s absolutely night and day on so much of the web. Some sites have so many ads now it’s just shocking to be frank.

Why not use a client based content filter such as uBlock Origin?

Re: Pi-hole 5.0

#103
post #80
post #55

Earlier quoted context omitted.

> This CNAME method is also a huge security issue, but I'm not gonna go into that. I will. The CNAME method could potentially allow a malicious actor to harvest user cookies, gain access to their accounts, and utterly destroy them.

How does this work exactly? asking for a friend.. (like the requests from browser to definitely-not-an-ad-subdomain.dastx.me also include cookies set by *.dastx.me content?)

Yep. Cookies frequently pass from parent domain (edoceo.com) to child (ads.edoceo.com)

Re: Pi-hole 5.0

#104
post #88

Earlier quoted context omitted.

I’m reminded almost every day that I have a pi-hole since it is not my dns provider when on my company’s vpn. It’s absolutely night and day on so much of the web. Some sites have so many ads now it’s just shocking to be frank.

Why not use a client based content filter such as uBlock Origin?

Not them, but you can’t do that at every company.

Re: Pi-hole 5.0

#105
post #39

Pi-hole on Apple Watch - just ran up a quick proof of concept. Would there be any use/interest in this? https://www.reddit.com/r/pihole/comments/gathus/pihole_on_ap...

That’s pretty neat! Do you plan on open sourcing it? I’m hesitant to trust an application with my pi-hole api token (and with it, all of my browsing/network data).

It's not my project. I am using it from within Test Flight. It is great for non-technical people who just need to temporarily disable Pi-Hole in order to get some sort of functionality to work that wouldn't otherwise.

One idea that I want to explore is to create an Alexa Skill to temporarily disable Pi-Hole. This has probably been done already.

Re: Pi-hole 5.0

#106
post #28

Alternatively for MAX_lazyness and convenience I've been using https://nextdns.io , does all the same stuff and is the alternative to cloudflare in Firefox for DNS-over-Https (DOH)

Too bad in my country all ISPs are required by the government to intercept (or block) all dns requests except their own dns server to block any domain listed in the national domain blocklist database. DNS on port other than 53 is still working though, so I have set up my pihole to use an upstream dns server that accept connection on a higher port and a cloudflare DoH server as a fallback (not sure why but DoH is real…

Out of curiosity, which country is that (if you're comfortable sharing)? That's a surprising policy I'd not heard of before.

Re: Pi-hole 5.0

#107
"Javascript is required. Please enable javascript before you are allowed to see this page."

Required to read the text of the announcement. No. Required to make donations via Stripe. Yes.

RSS does not require Javascript. Looks like the full text announcement.

https://pi-hole.net/feed/

Alternatively:

   echo 159.203.180.3 pi-hole.net >> /etc/hosts

Re: Pi-hole 5.0

#108

Earlier quoted context omitted.

No additional hardware required, you can use it to provide some protection to your family without having to worry about remote access to the Pi-Hole to configure things, works for your devices on the go, cheaper than running pi-hole in the cloud yourself unless. Pricing wise it’s over 2 years worth of service for the price of an original Pi, a good SD card and a case. The only circumstances where Pi Hole is unquestio…

FWIW, pihole is not tied to any particular hardware. For example: https://github.com/pi-hole/docker-pi-hole

I know I mentioned you can run it in the cloud/hosted, however for most home installations unless you have a dedicated VM server that is always on it does requires additional hardware.

I run pi-hole on my qnap nas at home since it’s always on anyhow.

Re: Pi-hole 5.0

#109
post #88

Earlier quoted context omitted.

I’m reminded almost every day that I have a pi-hole since it is not my dns provider when on my company’s vpn. It’s absolutely night and day on so much of the web. Some sites have so many ads now it’s just shocking to be frank.

Why not use a client based content filter such as uBlock Origin?

Also maybe they use their phone and many combinations of PhoneType + BrowserType don't support the same quality of adblocking as PiHole.

Re: Pi-hole 5.0

#110

Earlier quoted context omitted.

What is the use case of per client blocking?

Blocking Facebook stuff on every device except my wife’s phone.

Why not just tell your DHCP server to give her the regular DNS servers? Is this situation where she wants ad blocking but still wants to use FB?
Post reply on HN