| View previous topic :: View next topic |
| Author |
Message |
szatox
Advocate
Joined: 27 Aug 2013
Posts: 3491
|
 Posted: Wed Feb 21, 2024 2:41 am Post subject: |
 |
|
| Quote: | | @szatox are you talking about the seemingly never ending collection of domains beginning with rr? |
I don't know. Rr hasn't caught my eye, but they might be a part of that mixing things up too. I have enabled like 5 or 6 ready-made lists which combined strip almost all adds, cookie consents and sometimes even paywalls from the internet, so I don't really need to update my custom filters anymore.
Still, I've seen some adds served from a different path within the same domain as used for content, so poisoned hosts file is not good enough anymore. Before that, blacklisting googleadservices would remove all YT adds, including video adds before movies, commercial breaks during movies, and the floating banners appearing on top of the movies too. Bad news: this method is now outdated. Good news: adblock is not.
Bonus point: there are also browser addons which block 3rd party cookies and addons that replace CDNs with local storage, which makes tracking you between websites much more difficult. Good stuff.
_________________
Make Computing Fun Again |
|
| Back to top |
|
 |
Zucca
Moderator
Joined: 14 Jun 2007
Posts: 3911
Location: Rasi, Finland
|
| Posted: Wed Apr 10, 2024 8:38 pm Post subject: |
|
|
| Hu wrote: | | I expect DNS-based blocking is countered by DNS-over-HTTPS (DoH), since that sends the query over TLS to a server "in the cloud" and gets the answer back over that channel, so your local DNS resolver is unaware that any DNS resolution happened and therefore has no opportunity to return a result different from what the domain owner intended. |
And programs could ask for DNS records "willy nilly" from anywhere and disregard what underlying OS DNS configuration would give. Just like how you would use dig, nslookup, etc to query non-system configured DNS records.
I guess I need to adjust nftables to redirect all the traffic going in to 8.8.8.8, 8.8.4.4, 1.1.1.1 etc, to my local host DNS. And also everything accessing port 53 on the internet. Then the same for DoH.
_________________
..: Zucca :..
| My gentoo installs: | init=/sbin/openrc-init
-systemd -logind -elogind seatd |
| Quote: | | I am NaN! I am a man! |
|
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
