Hacker News Reader

I think there's a way with the more advanced routers to intercept all outgoing DNS queries and redirect them.

That still doesn't help with direct IP communication. You'd have to block all traffic except services you want to interact with. That probably means never getting a firmware update or at least uploading some telemetry when you allow a connection back to the mothership for a firmware update.

There's no winning with IoT.

> There's no winning with IoT.

There's no winning when a third party controls the lowest-level software of a thing on the internet. That includes your general purpose computers.

Unless you are the owner of the signing keys down to the bottom of the stack, your system can be remote-controlled.

It's called a network tap, or port mirroring.

Not with DOH

Reply on news.ycombinator.com