Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Smart-TV blocklist for Pi-Hole

perflyst.github.io

Post reply on HN
Print view View original

11–20 of 246 posts

Re: Smart-TV blocklist for Pi-Hole

#12

Post by KerrAvon »

somat wrote: post #10

What sucks is that none of this will work once the manufacturers figure out DoH.

Are the number of people who do this numerous enough for them to make the effort?

(edited to add) I feel like the real problem will be when they start adding wireless connectivity that you can't disable. I can keep my LG off the network today by refusing to configure networking for it. I can't do that if it doesn't use/require my network...

Re: Smart-TV blocklist for Pi-Hole

#13

Post by k4ch0w »

somat wrote: post #10

What sucks is that none of this will work once the manufacturers figure out DoH.

They would need to have a fallback in case people block DoH.

I think this is way further out than people may realize. I've done pentesting in a lot of different office networks and 53/UDP is open for all, but not 443/TCP unless you're a known device.

Re: Smart-TV blocklist for Pi-Hole

#15

Post by the_snooze »

confident_inept wrote: post #2

Praise be the folks that curate these lists. Even without a pi-hole you can plug these into any firewall for your brand(s). More annoying is the 15 second "home menu" that pops up on my OLED every time it is turned on. I almost always forget to manually dismiss it before I set the remote down and there's no option I can find to disable it. I would pay a premium for a TV with no internet connection.

>I would pay a premium for a TV with no internet connection.

I bought a Samsung QLED TV recently, and it works fine without an internet connection. I did give it an ethernet connection to grab firmware updates, and it downloaded a bunch of ads and crap to clutter the home screen. Luckily, unplugging the ethernet cord and factory-resetting the device got rid of the garbage and kept the updated firmware.

Re: Smart-TV blocklist for Pi-Hole

#16

Post by 1over137 »

k4ch0w wrote: post #13
somat wrote: post #10

What sucks is that none of this will work once the manufacturers figure out DoH.

They would need to have a fallback in case people block DoH. I think this is way further out than people may realize. I've done pentesting in a lot of different office networks and 53/UDP is open for all, but not 443/TCP unless you're a known device.

>They would need to have a fallback in case people block DoH.

How do you block DoH?

Re: Smart-TV blocklist for Pi-Hole

#17

Post by danielheath »

1over137 wrote: post #16
k4ch0w wrote: post #13

Earlier quoted context omitted.

They would need to have a fallback in case people block DoH. I think this is way further out than people may realize. I've done pentesting in a lot of different office networks and 53/UDP is open for all, but not 443/TCP unless you're a known device.

>They would need to have a fallback in case people block DoH. How do you block DoH?

Block port 443 and configure machines to use an http proxy with a cert installed?

Re: Smart-TV blocklist for Pi-Hole

#18

Post by Shared404 »

alkonaut wrote: post #3

I just manually unchecked the cookie permissions for a couple of hundred different ad companies on my Samsung TV. Using my remote. Of course there was a button to accept all of them, but not reject them. How one of the worlds largest companies sells stuff that so blatantly violates the GDPR while web developers at tiny companies sweat over whether we can save an IP for five minutes is beyond me.

> How one of the worlds largest companies sells stuff that so blatantly violates the GDPR while web developers at tiny companies sweat over whether we can save an IP for five minutes is beyond me.

Money solves a lot of problems, and people at tiny companies seem more likely to actually care.

Re: Smart-TV blocklist for Pi-Hole

#19

Post by LeoPanthera »

accrual wrote: post #11

OpenBSD users can get a great Pi-hole-like script here [0]. I believe it's 100% base utilities, so no packages required. [0] https://www.geoghegan.ca/unbound-adblock.html

If your router is pfSense, you can use pfBlockerNG, installable from the default repo.

If your router is OPNsense, you can manually configure a DNS blocklist. https://docs.opnsense.org/manual/unbound.html#blocklists Don't forget to enable a blocklist refresh entry in cron.

Post reply on HN