61–70 of 262 posts
[tinfoilhat] Given that Chrome now became Google's weapon against adblocking, how long until it starts refusing to use Pi-hole specifically? https://news.ycombinator.com/item?id=20044430 [/tinfoilhat]
It already does. This is the purpose of putting a DNS-over-HTTPS resolver into the browser, so you can't bypass it with local resolvers.
And so the arms race continues.
Earlier quoted context omitted.
Agreed, I combined this with Cloudflare's DNS service (1.1.1.1). A great combo.
What are the advantages of using Cloudflare's DNS as opposed to say Google DNS or your ISP? Tracking?
Using Google DNS, self-hosted resolver, or your ISP's DNS: NSA, your ISP, everyone and every dog at the middle of your link to the Internet can track and see your requests.
Using CloudFlare's DNS w/ DNS-over-HTTPS: only NSA (via a NSL or subpoena), Cloudflare and CloudFlare's upstream can track and see your requests. And I guess 10%-20% of the domain names already use CloudFlare, so for some domain, it's end-to-end encrypted, nobody but NSA and CloudFlare can track you. Even better, Cloudflare is experimenting with peering to upstreams (e.g. Facebook) using private encrypted connections, so the point-to-point encryption ratio would be even higher in the future.
Therefore, using CloudFlare is a net positive.
But one also needs to consider its second-order effect: is giving CloudFlare more leverage over the Internet infrastructure in the long run an acceptable choice over unencrypted DNS? I guess everyone has a different opinion.
Also beware as most ads in your phone apps come from ad intermediaries that are either dynamic or constantly change.
Pi-Hole is a cool project but please take in consideration those two when using it. We are far from the 90's in ad-tech.
With all the fervor around ad-blocking what I fail to see is how do you propose those sites that you visit, read their content to make money ? Are you willing to pay every site you visit or encourage them to put up pay walls ??
Earlier quoted context omitted.
What's wrong with the "old" way, where you visit a Mopar automotive related website and saw Mopar car part ads? Or when you visit a computer magazine and saw ads for computer parts? Or when you went to NYT and saw basic shit like paper towels and fall fashion? It became a problem when everyone and their sister started needing to know what kinds of kinks I'm into just to sell me dish detergent.
This is what we do at Office Snapshots ( https://officesnapshots.com ). We post about office design and our ads are primarily for office furniture or other services related to the industry. We also self-host the ads which are non-animated jpgs and sell them without using any ad networks. What you describe works well for us :)
I'm very interested in learning more...
A router that I can install Pi-hole and host a VPN on would be a dream.
I run both pi-hole and my own DNS server inside my network as containers on the NAS. I then have my router configured to default to the pi-hole and then the DNS server.
Advantage of my own DNS server is it exclusively resolves using DNS-over-TLS so my queries are private.
Final fallback for resolution is 1.1.1.1 but based on logs my setup hasn’t hit the fallback.
I imagine you could also use a container to host VPN.
Earlier quoted context omitted.
How would a web browser know which DNS it's using? You set your DNS preference to point to the PI-hole and it should behave like any other DNS server. I guess it could attempt to resolve some spam domain like doubleclick.net and if it was incorrect it could complain...
There is a clear and definite trend of taking DNS out of the user's control, see all the hype with DNS over HTTPS etc etc. Firefox is working on using DoH (opt-in at the beginning, but who knows) from "select" providers. Chrome has a similar switch, surely. Same with Android 9, opt-in DoH, but maybe it'll become opt-out or no-opt in the future. In the name of privacy and security of course, but with the totally unint…
Anyone doing a pi-hole version for android? We all have an old phone that could be used instead of a rpi.
With all the fervor around ad-blocking what I fail to see is how do you propose those sites that you visit, read their content to make money ? Are you willing to pay every site you visit or encourage them to put up pay walls ??
In the world we live in something like a pihole isn't an ideological position, it's a necessity to not have everything we do end up rolling into someone else's ad profile on my household.