Live data from Hacker News

Remove almost all online garbage using Dnsmasq

github.com

41–50 of 63 posts

Re: Remove almost all online garbage using Dnsmasq

#41
post #23

The problem with things like this is it's hard to disable on a case-by-case basis. I enabled something similar in a VPN and found that certain redirecting tracking links from emails were blocked. Ok great, they don't know that I clicked on the link, but also I don't know what the link led to, since it was blocked , and it was something I actually wanted to go to.

[deleted]

Re: Remove almost all online garbage using Dnsmasq

#42
post #23

The problem with things like this is it's hard to disable on a case-by-case basis. I enabled something similar in a VPN and found that certain redirecting tracking links from emails were blocked. Ok great, they don't know that I clicked on the link, but also I don't know what the link led to, since it was blocked , and it was something I actually wanted to go to.

Which is why uBlock and/or uMatrix is the more usable option.

Desktop and Android users can do this, but iPhone users are still pretty much limited to DNS-based blockers.

Re: Remove almost all online garbage using Dnsmasq

#44

What would be the pro's and con's of using this vs. uBlock Origin and Privacy Badger, assuming somebody like me browsing on the desktop with Firefox?

It can filter out DNS requests in the whole network for ads/tracker domains if used as the DNS resolver on your network, which would also include other devices (e.g. phones). Most smartphone apps perform a lot of tracker requests, which makes this approach very effective IMHO. What the network approach doesn't help with is when the ads are served from the same domain as the content. An extension like uBlock Origin so…

> phones

Basically everything except computers. Smart TVs are another one.

Re: Remove almost all online garbage using Dnsmasq

#46
post #37

Earlier quoted context omitted.

Please don't get hung up on terminology - for the sake of conversation assume the name for the way the black box app gets information from the outside world is termed a "socket". It's a name, it doesn't really matter. What matters is you are taking information from the outside and giving it to the black box. So say you give the black box in your sandbox a socket (from the above definition). Say it is a news app. This…

Ah, I misunderstood your mention of black boxes. This is not for black boxes. It only makes sense for open source. I agree it wont work for a black box that you cant audit. If the browser is side-channeling by asking for scheme://some.thing/enc_data_sent_here -> enc_data_recieved when the middleware hands the GET back, then atleast the user can decide if they want to honor that GET request and figure out why the brow…

> https://hn.algolia.com/?dateRange=all&query=jakeogh%20%22dis...

> This page will only work with JavaScript enabled

Really!? Why the hell would you link to that?

Re: Remove almost all online garbage using Dnsmasq

#47
post #37

Earlier quoted context omitted.

Ah, I misunderstood your mention of black boxes. This is not for black boxes. It only makes sense for open source. I agree it wont work for a black box that you cant audit. If the browser is side-channeling by asking for scheme://some.thing/enc_data_sent_here -> enc_data_recieved when the middleware hands the GET back, then atleast the user can decide if they want to honor that GET request and figure out why the brow…

> https://hn.algolia.com/?dateRange=all&query=jakeogh%20%22dis... > This page will only work with JavaScript enabled Really!? Why the hell would you link to that?

I know, it's rough! I had to start FF to generate it. For some reason it wont work with webkit(surf ctrl-shift-s to JS).

Re: Remove almost all online garbage using Dnsmasq

#48
post #35

General policies * Should not break useful websites or apps * Blocks tracking servers * Blocks advertising servers * Blocks analytics servers * Blocks fake websites * Blocks malware servers * Blocks webminers A. "useful websites or apps" B. "tracking servers" "advertising servers" "analytics servers" "fake websites" "malware servers" "webminers" If B is larger than A, then a whitelist for A is easier to maintain than…

Still, the stuff listed B is not generally a problem with applications other than the web browser. If I use email, NNTP, curl, ifMUD, etc, then it isn't going to access servers that I do not specify with each request. Such software is simpler than the web browser; the web browser is a mess.

Re: Remove almost all online garbage using Dnsmasq

#49
post #35

General policies * Should not break useful websites or apps * Blocks tracking servers * Blocks advertising servers * Blocks analytics servers * Blocks fake websites * Blocks malware servers * Blocks webminers A. "useful websites or apps" B. "tracking servers" "advertising servers" "analytics servers" "fake websites" "malware servers" "webminers" If B is larger than A, then a whitelist for A is easier to maintain than…

Still, the stuff listed B is not generally a problem with applications other than the web browser. If I use email, NNTP, curl, ifMUD, etc, then it isn't going to access servers that I do not specify with each request. Such software is simpler than the web browser; the web browser is a mess.

"... the web browser is a mess."

s/web/graphical &/

Re: Remove almost all online garbage using Dnsmasq

#50

Earlier quoted context omitted.

Which is why uBlock and/or uMatrix is the more usable option.

Desktop and Android users can do this, but iPhone users are still pretty much limited to DNS-based blockers.

I mean, they can install Firefox. (With uBlock)
Post reply on HN