Hacker News Reader

Comment by yjftsjthsd-h | Hacker News Reader

It's making trade-offs, and differently than the Mozilla defaults. Google Safebrowsing reduces privacy (not because of the content, but because it says "hi Google, I'm running Firefox at this IP address"), DNS over HTTPS happily sends all your DNS queries to Cloudflare (and since we're arguing over functionality, breaks some split-horizon DNS), Widevine is blatantly anti-user, third-party cookies are a privacy problem, referers are a privacy problem, ... oh, actually the rest of your list from there is all privacy issues.

Anyways, the people who made this would say that Mozilla's current defaults get 0/10 from them and are simply awful, and that using them means your browsing experience will be objectively worse and less private.

View on HN

Quite. My FF looks a lot like this provides. I refuse to use Widevine and explicitly disable it and DRM on principle, and I want websites to know that this is something that is perfectly legitimate to do -- unlike Chrome where they've removed the ability to turn it off without deleting the horrible library itself.

I understand that some might hate this choice. Mozilla defaults to their preferences. These defaults are pleasingly made for people like me.

I'd rather Cloudflare get my DNS queries than a broken network middlebox.

And I'd like my local pihole equivalent to get them. Most defaults fail for someone.

What is your pihole equivalent/alternative?

So pihole is just some nice tooling around dnsmasq to feed it a bunch of domains to block, but if you don't care about that you can just have have a script download a hosts file and load it into plain dnsmasq (or whatever DNS server you like; with dnsmasq use `addn-hosts=/etc/hosts.d`). Bonus: lots of routers already use dnsmasq, so you literally stick that line in the config file and populate the hosts file(s) and bam, free adblock.

Wow, thanks! I had no idea this type of thing was possible these days. I was about to ask how you'd make that hosts file but found this in my router admin panel: 'Remote Console enables SSH access into the router from a WAN connection using the modems WAN IP address.'

I do have a pihole set up and I like the web interface for it, but I look forward to playing around with this for fun.

In fairness, this is way less feature rich - no statistics, no GUI, no "temporarily disable" button, but yeah for plain DNS adblock it works:)

> Remote Console enables SSH access into the router from a WAN connection using the modems WAN IP address

That sounds like it allows SSH from the public internet; I would try SSHing to its private IP with that off. YMMV.

I just shared that because that's how I learned I could SSH into my router at all. I'll be very careful around this stuff.

Good show:) Have fun!

These days? If anything, these methods are increasingly mitigated by new functionality from your friendly global technology giant such as dns-over-https.

Reply on news.ycombinator.com