Hacker News Reader

Hacker News

Comment by Latteland | Hacker News Reader

Full thread

Latteland

I am interested to see the result. I might pay for a vpn that I control that blocked things.

View on HN

I'm using Blockada for that, which acts as a vpn, but just filters all requests through a big hosts file.

https://blokada.org/

This looks interesting. Is there something similar for iOS?

I doubt. Play Store doesn't allow the full version of Blokada so you need to install it from F-Droid or directly from their web site.

You can use DNSCloak[1] for this. It runs a local DNSCrypt client and acts as iOS VPN. You can run your own DoH server that blocks tracking domains, or use a public DoH server that does, or use a well-known provider that provides DoH (e.g. Cloudflare DNS, Google DNS and OpenDNS does) with your own blacklist[2]

[1]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...

[2]: https://itunes.apple.com/us/app/dnscloak-dnscrypt-doh-client...

> You can run your own DoH server that blocks tracking domains

Do you mean your own dns server which will be accessible to (anyone on) the public internet?

That's certainly an option if you want to run public DNS-over-HTTPS server, but you don't have to do that – DNSCloak do provide a way to specify a local blocklist.

DNS-over-HTTPS spec also mentioned that you can use a standard HTTP authentication if you want to run a DOH server but want to keep it private (although I've never tried this)

A do-it-yourself solution is Algo https://github.com/trailofbits/algo Algo has a feature to install ad-blocking for all dns queries.

After recommending Blokada to someone, I realized the version on the Play Store can only change your DNS. The full version is on F-Droid.

And a little something for our hosts files: https://someonewhocares.org/hosts/

Use with care, as you may break things. I've been using it as-is with no disruptions/problems.

If you don't mind DIY, Pihole + OpenVPN is a good solution: https://docs.pi-hole.net/guides/vpn/overview/

I'm partial to algo: https://github.com/trailofbits/algo

Use Wireguard with DNS enabled and then run `unbound` on your server. You control the blacklist. No ads, etc. Works on all platforms.

WireGuard is nice, but unfortunately consumes battery very fast.

The kernel module version uses less, if you have a phone that supports it. The userspace version uses much less than ordinary VPNs -- because it doesn't send traffic when you're not using it -- but it's still Android userspace networking, which uses battery, unfortunately.

I haven't noticed a difference, really. Maybe it's just the new phone period where everything works well and it'll all go to hell later...

Take a look at the brilliant Wireguard: https://www.wireguard.com/

If you use an ad blocker in browser it does the same thing.

Native ad blocking only works when an app uses an obvious third party plugin for them. The native stuff all stays

Reply on news.ycombinator.com