Used to be I would spam my pie hole with junk from the fridge.
Comment on Samsung brings ads to US fridges
PerogiBoi@lemmy.ca 1 month ago
Tfw u set up Pihole so ur fridge stops spamming you with ads.
jaybone@lemmy.zip 1 month ago
napkin2020@sh.itjust.works 1 month ago
Or just block internet access completely.
RotaryKeyboard@lemmy.sdf.org 1 month ago
This is the way. Although, when I did this to my Samsung television, it eventually began to display dialog boxes complaining that it was having trouble accessing the Internet. So I had to completely delete all network settings in the TV and give up the ability to control it through Home assistant. Annoying.
Peruvian_Skies@sh.itjust.works 1 month ago
Samsung is cancer.
PerogiBoi@lemmy.ca 1 month ago
How can I watch Roblox let’s plays in my kitchen then hmmmm
WhyJiffie@sh.itjust.works 1 month ago
through HDMI. be a little creative
PerogiBoi@lemmy.ca 1 month ago
What’s that, some sort of labubu or something?
wetbeardhairs@lemmy.dbzer0.com 1 month ago
I wonder how much longer that will work. DNS over HTTPS is now a thing and totally defeats the mechanism of a pihole.
PerogiBoi@lemmy.ca 1 month ago
VPN running on a WRT router? I know very little about this stuff I just know the buzzwords for street cred.
wetbeardhairs@lemmy.dbzer0.com 1 month ago
Pihole’s act as a DNS or “Dynamic Name Server”. All internet traffic is IP based once it leaves your home because routers dont know how to forward traffic for “samsung-ad-hell.com”, so there is a dedicated kind of packet for “Where is samsung-ad-hell.com located?” and that is a DNS Lookup. The Pihole pretends to know because it maintains a list of bad urls that host websites that only support privacy exploitation and advertisements and tells them “oh you want to go to 0.0.0.0, that’s where you’ll find your stuff” as it snickers.
But DNS Lookups were always plain text. When your laptop says "Where is big-booties.com" your ISP knows you want porn. Now there is a new variant called “Secure DNS Lookup” which encrypts the url you’re asking about. The ISP knows you’re asking for a domain’s IP, but it can’t know which one and it no longer cares. Neat.
The trouble is that the Pi-Hole can no longer protect us from all the stupid fucking smart devices that want to earn a fraction of a penny per device by spying on us because THEY use the new Secure DNS Lookup.
tetris11@lemmy.ml 1 month ago
It’s not a huge issue, you need a DoH resolver now (e.g. your browser which has a secure connection to a secure DNS server) which cannot block <script> from requesting the ad, but can definitely block <script> from displaying it once the domain resolves.
Extra overhead though, agreed
borth@sh.itjust.works 1 month ago
Interesting… Well, this prompted me to search what Pi-Hole has done for this, and they seem to have a way to continue blocking even DoH, using “cloudfared”, which is another daemon that needs to run with Pi-Hole… They can’t possibly think their enshittification will continue to work.
cygnus@lemmy.ca 1 month ago
Me yelling “enhance” at my router so it blocks ads better
ayyy@sh.itjust.works 1 month ago
I can tell you didn’t read the manual because it obviously states that you have to be staring over the top of sunglasses for that configuration option to work.
MangoPenguin@lemmy.blahaj.zone 1 month ago
Maybe block the DoH endpoint and in theory the device might fall back to normal DNS, dunno if that would work.
WhyJiffie@sh.itjust.works 1 month ago
and also block outgoing connections to port 53 when it’s not the pihole device’s allowed IP
cmnybo@discuss.tchncs.de 1 month ago
DoH is tricky to block since it’s just using https on port 443. The only options are blocklists of known servers and attempting to detect it with deep packet inspection.
MangoPenguin@lemmy.blahaj.zone 1 month ago
Yeah gotta inspect the traffic and block whatever hostnames it uses.
Godnroc@lemmy.world 1 month ago
I’m speculating, but it wouldn’t change a thing. You would still need to request domain addresses from a server somewhere, but traffic between your device and server would be encrypted in transit. The DNS server would also be verifiable to prevent imitators.
So, the request would go to the PiHole and if it was not being filtered the PiHole would make the request of whatever upstream server is configured same as before.
WhyJiffie@sh.itjust.works 1 month ago
the difference is that it’s very hard to block doh connections because it looks like web/API traffic. and if you don’t block it, it will work around your pihole without you noticing. doh is not used for connecting to pihole, it does not even support it.