I get a "This connection is not private warning" when trying to read this.
Pi-hole 5.0
51–60 of 254 posts
Re: Pi-hole 5.0
#52Alternatively for MAX_lazyness and convenience I've been using https://nextdns.io , does all the same stuff and is the alternative to cloudflare in Firefox for DNS-over-Https (DOH)
Is there an advantage in sending all of your DNS queries to a for-profit company vs. setting up your own Pi-hole? Their privacy policy seems legit[0] but why trust them at all when Pi-hole is an option? [0] https://nextdns.io/privacy
No additional hardware required, you can use it to provide some protection to your family without having to worry about remote access to the Pi-Hole to configure things, works for your devices on the go, cheaper than running pi-hole in the cloud yourself unless.
Pricing wise it’s over 2 years worth of service for the price of an original Pi, a good SD card and a case.
The only circumstances where Pi Hole is unquestionably superior is if you are on a network that redirects all DNS requests there are still some ISPs that do that however if you are on such network you probably want to either get off it ASAP or use a VPN.
Re: Pi-hole 5.0
#53Earlier quoted context omitted.
>I’m especially excited to see CNAME inspection. I was tired of trying to figure out what domains like “xuenl4v1szy8g.cloudfront.net” were doing. Is there a good explainer for CNAME inspection? I'm not finding anything good with my Google Fu.
Some ad agencies starting asking hosters to add a CNAME record to one of their domains. Let's say I have your own blog running on dastx.me, and I wanted some ads from adgiant.com. As an adblocker you've added `* .adgiant.com` to your blacklist and I'm an asshole and try to circumvent such adblocking measure. Them young millennials and their tech. Stealing me out of my money! So I go to adgiant.com and ask them if the…
> This CNAME method is also a huge security issue, but I'm not gonna go into that.
A security issue for the website with the CNAME, or a security risk for Pi-hole implementing this feature?
Re: Pi-hole 5.0
#54Re: Pi-hole 5.0
#55Earlier quoted context omitted.
>I’m especially excited to see CNAME inspection. I was tired of trying to figure out what domains like “xuenl4v1szy8g.cloudfront.net” were doing. Is there a good explainer for CNAME inspection? I'm not finding anything good with my Google Fu.
Some ad agencies starting asking hosters to add a CNAME record to one of their domains. Let's say I have your own blog running on dastx.me, and I wanted some ads from adgiant.com. As an adblocker you've added `* .adgiant.com` to your blacklist and I'm an asshole and try to circumvent such adblocking measure. Them young millennials and their tech. Stealing me out of my money! So I go to adgiant.com and ask them if the…
> This CNAME method is also a huge security issue, but I'm not gonna go into that.
I will. The CNAME method could potentially allow a malicious actor to harvest user cookies, gain access to their accounts, and utterly destroy them.
Re: Pi-hole 5.0
#56Pi-hole is very easy to set up, and it works so well you can basically forget about it from that point on. Blocking ads is nice, but it’s also a huge boon for privacy. I run uBlock origin on all my browsers, but Pi-hole still blocks 30-50% of requests on my network. It’s also really nice to be able to glance at the logs and get an idea of what’s going on on your network, or if there’s any unusual activity. I’m especi…
>I’m especially excited to see CNAME inspection. I was tired of trying to figure out what domains like “xuenl4v1szy8g.cloudfront.net” were doing. Is there a good explainer for CNAME inspection? I'm not finding anything good with my Google Fu.
One of a trick a website operator can use to evade hostname-based adblockers is by putting the ad-serving domain as a cname entry in one of their subdomain. Since the ad now served from a subdomain of their website, it won't get blocked unless the dns adblocker did deep inspection on nested cname entries.
Re: Pi-hole 5.0
#57Pi-hole is very easy to set up, and it works so well you can basically forget about it from that point on. Blocking ads is nice, but it’s also a huge boon for privacy. I run uBlock origin on all my browsers, but Pi-hole still blocks 30-50% of requests on my network. It’s also really nice to be able to glance at the logs and get an idea of what’s going on on your network, or if there’s any unusual activity. I’m especi…
If you run Windows, it blocks a lot of stuff that isn't browser related. That's why ublock does not get it down to 0 percent.
Right, I didn’t mean to make it sound like uBO was letting stuff through the cracks (it’s actually far more thorough than dns filtering). But the amount of tracking requests that come from outside of the browser and from other devices is no joke.
Re: Pi-hole 5.0
#58Earlier quoted context omitted.
Protect it how exactly? You can create firewall rules on DigitalOcean and limit the IP addresses from which the DNS server is accessible.
that works only if you have a static ip home (which you usually don't have) or on your smartphone (which you don't have) > https://www.calyptix.com/top-threats/3-common-dns-attacks-an...
I have a ‘dynamic’ IP address at home that hasn’t changed for a few years. I have a slew of firewall rules based on it that are reliable in practice.
Re: Pi-hole 5.0
#59Earlier quoted context omitted.
Is there an advantage in sending all of your DNS queries to a for-profit company vs. setting up your own Pi-hole? Their privacy policy seems legit[0] but why trust them at all when Pi-hole is an option? [0] https://nextdns.io/privacy
No additional hardware required, you can use it to provide some protection to your family without having to worry about remote access to the Pi-Hole to configure things, works for your devices on the go, cheaper than running pi-hole in the cloud yourself unless. Pricing wise it’s over 2 years worth of service for the price of an original Pi, a good SD card and a case. The only circumstances where Pi Hole is unquestio…
Interesting, thanks!
I've been thinking about running a Pi-hole at home and redirecting all my phone traffic through it via WireGuard.
Re: Pi-hole 5.0
#60I get a "This connection is not private warning" when trying to read this.
Me too. Ironic.
Not sure what that page holds but you can find out all about Pi-hole here: