An Exercise Program for the Fat Web

#1

Post by raviojha » Thu, May 30, 2019, 11:16 AM UTC

An Exercise Program for the Fat Web
blog.codinghorror.com

Re: An Exercise Program for the Fat Web

#2

Post by Crinus » Thu, May 30, 2019, 12:11 PM UTC

Doesn't DNS over HTTPS and HSTS bypass pihole?

(isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)

Re: An Exercise Program for the Fat Web

#3

Post by bryanlarsen » Thu, May 30, 2019, 12:14 PM UTC

Switching to Firefox costs $0 and works on every network, not just your home net.

Re: An Exercise Program for the Fat Web

#4

Post by fenwick67 » Thu, May 30, 2019, 12:24 PM UTC

> Eye/o GmbH owns AdBlock and uBlock

Wow, I didn't realize the same company that owns Adblock also owns uBlock.org (but not ublock origin)

Re: An Exercise Program for the Fat Web

#5

Post by detaro » Thu, May 30, 2019, 12:26 PM UTC

Crinus wrote: post #2

Doesn't DNS over HTTPS and HSTS bypass pihole? (isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)

DNS over HTTPS against a server you can't choose would do so, yes.

Re: An Exercise Program for the Fat Web

#6

Post by fenwick67 » Thu, May 30, 2019, 12:33 PM UTC

detaro wrote: post #5

Crinus wrote: post #2

Doesn't DNS over HTTPS and HSTS bypass pihole? (isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)

DNS over HTTPS against a server you can't choose would do so, yes.

You could still shut down the initial DNS query for the dns-over-https provider and make it unreachable

Re: An Exercise Program for the Fat Web

#7

Post by thedanbob » Thu, May 30, 2019, 12:34 PM UTC

Crinus wrote: post #2

Doesn't DNS over HTTPS and HSTS bypass pihole? (isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)

So does simply using a different DNS server than the network supplies, unless you’re blocking port 53.

Re: An Exercise Program for the Fat Web

#8

Post by throwmeback » Thu, May 30, 2019, 12:50 PM UTC

bryanlarsen wrote: post #3

Switching to Firefox costs $0 and works on every network, not just your home net.

It's also hella buggy on macOS for me, which is irritating - my browser is the only thing I need to work 100% of the time. As much as I'd like to reduce Google's browser monopoly, I consciously choose to make this one exception.

Re: An Exercise Program for the Fat Web

#9

Post by kasey_junk » Thu, May 30, 2019, 12:53 PM UTC

Crinus wrote: post #2

Doesn't DNS over HTTPS and HSTS bypass pihole? (isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)

My network is setup so local dns goes to the pi-hole which uses dns over https.

Re: An Exercise Program for the Fat Web

#10

Post by Theodores » Thu, May 30, 2019, 1:06 PM UTC

I am interested in what happens when you get to a website that insists you turn off your ad blocker. What happens with Pi Hole?

Also I would prefer to just run Privoxy as I have Ubuntu running and can just use that instead of some extra gadget. What happens with Privoxy if you are getting a turn off ad blocker message?

Currently I use 'cat block' or the 'EFF' blocker, depending on what computer I am on, those give you an option to turn off your ad blocker which I find myself doing from time to time, it would be nice to have this option with Privoxy.