- Does configuring a custom DNS server (like Cloudflare one) on your local computers solve it?
- On the reddit linked at the bottom of the article, someone mentions you can easily use this tool https://www.mengelke.de/Projekte/FritzBox-JSTool to edit the configuration file and change the domain. If that's true, why is the article claiming it's impossible to change?
we're only talking about the cost of a commodity modem, so buy a new modem, disconnect old is a potential solution
Switching to something else is not as easy as buying a new modem for most normal people.
No. If anything, that'd make it worse. The issue reported in TFA is that Fritz!Boxes by default resolve the domain `fritz.box` to themselves for their admin interface, even if that domain has been registered on the public internet by someone else. If you configure cloudflare, you'll prevent that, which will _always_ get you the potentially attacker controlled DNS results.
If you have a local machine called "myshare" and you mistype "myhsare", it may resolve to the attacker's machine.
(PS. I am the author. The article is my understanding of the situation but if I'm wrong on some parts please correct me.)
Setup a local DHCP server, and don't set the fritz.box search domain.
Ensure that DNS-over-HTTP (DoH) is enabled where it can be.
Set upstream DNS servers that block malware, such as 1.1.1.2 or NextDNS
Delete "fritz.box" from the domain search list in DNS settings.
Educate your parents to be cautious about directly typing domain names or searching from the OmniBox.
https://blog.cloudflare.com/introducing-1-1-1-1-for-families...
There is a class of internet users that doesn't use a search engine, and instead types things like "usedcarsdetroit.com" in the URL bar until they find something they want.
And there is the class that starts with a single word search like "cars", which can't go straight to Google. It instead has to see if "cars.fritz.box" exists, because perhaps there's a server called "cars" on your network.
And god forbid that your parent types "bankofmerica.com" instead of using a bookmark or their smart phone app.
First it was not clicking links. Now it's not typing addresses?
Jesus Bloody Christ my dude, maybe it really was a mistake to make sand think.