Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

72% of smart TVs and 46% of game consoles hardcode DNS settings

labzilla.io

Post reply on HN
Print view View original

561–570 of 673 posts

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#561

Post by judge2020 »

scrps wrote: post #225
xurukefi wrote: post #212

I always found it puzzling that DNS blacklisting for adblocking purposes works at all . I mean I'm not a webdev or anything like that, so what I'm saying might be a bit native, but couldn't you simply serve your ads using the same domain you use for your content? This immediately defeats things like PiHole completely.

Sadly that is already happening, luckily there are ways to defeat cname cloaking. https://blog.apnic.net/2020/08/04/characterizing-cname-cloak...

This has been happening for a century with first-party advertisements and "sponsored content" that is baked into the content being consumed.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#562

Post by judge2020 »

ant6n wrote: post #498
verisimilidude wrote: post #288

Earlier quoted context omitted.

I imagine most people capable of rooting a TV would already have better alternatives at hand: an Apple TV, an Nvidia Shield, a PlayStation, etc. There’s not much daily incentive to tinker.

All of these still require a Display.

And the respective TVs work without internet - the only possible attack vector (by the manufacturers) is if they start trying to connect to random unprotected wifi networks, or god forbid the Amazon Sidewalk network[0].

0: https://www.amazon.com/Amazon-Sidewalk/b/?node=21328123011

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#563

Post by fartcannon »

I recently bought a dumb TV (Proscan something or other, 4K) where I watch Netflix, Prime Video, Youtube and Crave TV in a modified version of Chromium (https://blog.vpetkov.net/) on a Raspberry Pi 4. Additionally I stream my Steam Library using the Steam Link deb in the raspbian repos and a set of Steam Controllers via the dongle (the SC bluetooth connection kinda sucks on the RPI4)

For best perforance, use a wired ethernet connection, and a bluetooth dongle for your non-Steam controllers and bluetooth headset.

Works flawlessly and it's a delight to have a full Linux distro on my TV.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#565

Post by CamperBob2 »

m463 wrote: post #470
benttoothpaste wrote: post #166

Earlier quoted context omitted.

> I was ready to return the device as broken until I realized this. Actually you probably should return such devices as broken.

I did just that with a DJI Mavic. It was kind of hard to send back a really nice device that I had just opened up and was ready to fly. Thing is, some companies just use it as a way to fire their customers.

I tend to cut DJI a break, because customer (non-)compliance with no-fly zones is a class-1 existential threat to their business selling consumer drones. Pinging DJI servers to check for altitude restrictions at every power-up cycle is intrusive, but I honestly don't see that they have much choice.

However, they are also playing these sorts of games with other types of devices, where no such justifications exist ( https://www.eevblog.com/forum/eevblab/eevblab-83-dji-pocket-... ) That needs to be answered by returning the product as defective.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#566

Post by bootlooped »

nitrogen wrote: post #316
onion2k wrote: post #292

Earlier quoted context omitted.

That would essentially force people to buy two devices - one for receiving content to display and a second to display it. All your solution does is shift the problem on to the receiving device. It wouldn't fix anything, and at the same time it'd increase the cost and complexity for the user (by a very small amount admittedly).

Decoupling allows competition and places control in the hands of the user.

Didn't the user already exercise their control by choosing to buy a smart TV? And I don't think many people would say there is a lack of competition between TV manufacturers.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#567

Post by CamperBob2 »

rmrfstar wrote: post #28
praptak wrote: post #23

Earlier quoted context omitted.

DNS over secure channels is actually good - it limits bad behavior by ISPs. The problem of shitty devices on your private network is a different one.

At this point it is really tough to find devices that don't leak data like a sieve. I recently bought a car, and could not find one without a cellular modem and microphones. Removing the modem voids the warranty. The period where you can opt out is mostly over.

You don't need to remove the modem, just find the SIM card and pull it. It's probably in your armrest console compartment or glovebox.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#568

Post by acdha »

denkmoon wrote: post #550
acdha wrote: post #221

Earlier quoted context omitted.

Network filtering means blocking traffic at the network level. Trying to use DNS for this leaves you trusting the client - and there are decades of precedent for clients bypassing that for various reasons, such as this post shows. The solution is to start doing network filtering: if you block packets to unapproved servers, you can actually stop this. You’ll need to run your own proxy, of course, but that’s always bee…

So I need to mitm https traffic for devices I can't change the ssl trust store on?

You have two choices: trust the device or don’t let it on the network. Voluntary measures like local DNS only work to the extent that the device maker wants them to.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#569

Post by _-___________-_ »

dec0dedab0de wrote: post #518
dralley wrote: post #489

Earlier quoted context omitted.

> The DNS-over-HTTPS model favors those who run the servers (because they get exclusive access to monetizable end user name resolution data) Hold up. You are claiming that the fact that DoH prevents DNS requests from being visible in cleartext network traffic is a bad thing ? ...what? In a world where the choice is between one party (the DNS provider) having access to my DNS requests and everyone on the network inclu…

Hold up. You are claiming that the fact that DoH prevents DNS requests from being visible in cleartext network traffic is a bad thing? It is when its my network. If they cared about people sniffing they would use DNSSEC, but still use the network DNS server. DNS over HTTPS is just a way for shady companies to hide what they're doing.

DNSSEC provides authenticity, not confidentiality.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#570

Post by kiwijamo »

Abishek_Muthian wrote: post #328

Smartphones too! OnePlus hardcodes Google DNS as secondary DNS & I'm sure many others do it too[1] . Forcing DNS requests to Pi Hole is the easiest option to defeat this. [1] https://www.reddit.com/r/oneplus/comments/e0htyg/remove_goog...

Is this an Android-wide thing or really specific to OnePlus?
Post reply on HN