Live data from Hacker News

72% of smart TVs and 46% of game consoles hardcode DNS settings

labzilla.io

661–670 of 673 posts

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#661

Earlier quoted context omitted.

I would absolutely love to have control over HTTPS traffic on my network, specifically to enable my Squid proxy to cache HTTPS pages, but unfortunately not every device or even program supports custom CA's. I'd be the man-in-the-middle between the internet and every device I own.

You don’t need to MitM. Squid can use SNI to allow whitelisted hosts, for now at least.

Hopefully that will be fixed with widespread usage of TLS ESNI/ECH

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#662
post #482

Earlier quoted context omitted.

"That isn’t really possible, though: CDNs mean that blocking by IP just doesn’t work. The most effective method I’ve found is transparently redirecting all traffic on port 53 to a DNS server I control. DoH means that I might as well setup a transparent HTTPS proxy." This is a very good point and I am dealing with this myself on my home networks. Like any household/family we have some number of dubious/untrusted devic…

Thinking about it, if you’re willing to give up TLS 1.3, you could probably just break all https connections with encrypted SNI and then filter based on the SNI information.

Just to nitpick: TLS 1.3 still uses plaintext SNI by default. You need to explicitly put public keys in DNS to enable the encrypted SNI extension.

And in the context of pihole and such, avoiding that means editing the DNS response to remove those public keys. Which takes us full circle back to "do I control DNS for this gadget, or not".

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#663
post #494

This is precisely the reason I do not connect my TV to my home network. I use a AppleTV for streaming content. Once in a while I check the manufacturer's page, and if there's a firmware update, I factory reset my TV to remove any cached info about my usage, and then update the firmware via ethernet, and immediately remove it from the network. A while ago I noticed that my old Insignia TV refused to use the pi-hole co…

Newer TVs will retain wifi settings after a reset. (Looking at you Samsung)

I always suspected that some of the cheaper brands might upload my Wifi info to their servers. I expected Samsung to be a bit more honorable, I guess was wrong. Anyway I've been updating my new TV only via Ethernet.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#664

Earlier quoted context omitted.

Thinking about it, if you’re willing to give up TLS 1.3, you could probably just break all https connections with encrypted SNI and then filter based on the SNI information.

Just to nitpick: TLS 1.3 still uses plaintext SNI by default. You need to explicitly put public keys in DNS to enable the encrypted SNI extension. And in the context of pihole and such, avoiding that means editing the DNS response to remove those public keys. Which takes us full circle back to "do I control DNS for this gadget, or not".

Well, it’s easy to control the DNS if you can block DoH and VPNs: just have your router forward all traffic on port 53 to a resolver you control.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#665

Earlier quoted context omitted.

You're in luck. Buy a commercial TV, or a hospitality TV. For example: https://www.lg.com/us/business/commercial-tvs/lg-65ut640s0ua Other TV manufacturers make similar products.

All of the "key features" of this TV are what I want to avoid though. Maybe not as bad a consumer TV, but not that great either: Content Management/Group Management SuperSign Control Simple Network Management Protocol (SNMP) Wake-on-LAN Crestron Connected® (Network Based Control)

SNMP is a monitoring protocol and WoL is a great way to automatically control your screens. You can’t use WoL outside of the local network and SNMP is configurable and secure (if it’s at least v2). It’s not something you should be worried about.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#667
post #652

Earlier quoted context omitted.

https://www.amazon.com/Amazon-Sidewalk/b/?node=21328123011

oops. this is not even a SIM card. can this be disabled? will the devices override user preference and still continue to communicate .

If you have a device that tries to use sidewalk, you could put tinfoil around the device or desauter the bluetooth chip/900mhz radio (and hope the device works without them in there), but that's really it if these devices come out without a setting to disable sidewalk.

If you have an Echo/sidewalk-capable device already, you can opt-out of allowing other devices to use your sidewalk in the Ring or Amazon app https://support.ring.com/hc/en-us/articles/360032524592-Opti....

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#668

Earlier quoted context omitted.

The right way to fix this is one single smart device, which is the only device connected to the dumb TV. The best of these types don't have a remote. They're controlled by a phone. If the intelligence is built into the TV then it cannot be updated or replaced -- so either there will again be multiple devices, or the TV will need to be replaced on a frequent basis. A smart TV makes the problem you describe even worse

Completely disagree on the lack of remote. Hitting a button on a remote is better UI than needing to unlock a phone and hope that it's actually connected to the streaming device (not always the case). I think the new Chromecast is an admission from Google that the average person still wants a remote.

I agree with this.

And in this context; in my 30s and I don't always know where my phone is; My parents, don't always have their phones accessible or know where they are without looking. Also, it's less tactile in the dark.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#669

Earlier quoted context omitted.

Disagree. My 75 yo parents still have a dumb tv. They have different remotes for cable, sound, blue ray player ( some smart apps), fire tv, and apple tv. Their life is not easier because of this, they don't watch what they want when they want because it takes minutes to get to a different source. I know what I'm getting them for Christmas

You're getting them a chromecast? Because that's what you should.

Tried it.

It takes 2 remotes to get the sound and hdmi to the right input. They are also confused about what apps it works with, or how to get to them (on the phone), and even though they have a Google Home, it only works with a few providers for voice control.

Re: 72% of smart TVs and 46% of game consoles hardcode DNS settings

#670

Earlier quoted context omitted.

What is said TV response time? If it's bigger than 2 ms then that's a no go for me.

Because you have a 500hz HDMI output? Yeah right.

From https://en.wikipedia.org/wiki/HDMI

"Bitrate Up to 48 Gbit/s, as of HDMI 2.1"

To answer your question: -Everybody does.

Post reply on HN