

In fact what you're describing is one of the most annoying parts of it. People here are gushing amazing over pihole but I don't find it that amazing in the least. Or, of course, if a (global) website is just advertising another (global) website. For example, a podcast can certainly advertise its own tour, since-given that you’re listening to the podcast-you likely want to see the podcaster speak in person, even if you can’t make it there. The entirely-static ads model does work when the consumption of the media is entwined with the consumption of the advertised brands, though.

The flip-side of this is that I’ve noticed that YouTube shows me PSAs from my own municipal government (“there’s an election soon” ads, “we’re building a new piece of civil infrastructure” ads, etc.) I actually kind of like that I don’t have cable, so it’s not like I would see them anywhere else. Norway, should I still see ads for an American brand of paper towel that doesn’t exist here or should I see ads for Norway paper towel brands? One big problem with entirely static ads is that websites are global but the ads running on them are for brands that are likely local (at least to a specific country.) If I visit the NYT website in e.g. Therefore, using CloudFlare is a net positive.īut one also needs to consider its second-order effect: is giving CloudFlare more leverage over the Internet infrastructure in the long run an acceptable choice over unencrypted DNS? I guess everyone has a different opinion. Facebook) using private encrypted connections, so the point-to-point encryption ratio would be even higher in the future. Even better, Cloudflare is experimenting with peering to upstreams (e.g. And I guess 10%-20% of the domain names already use CloudFlare, so for some domain, it's end-to-end encrypted, nobody but NSA and CloudFlare can track you. Using CloudFlare's DNS w/ DNS-over-HTTPS: only NSA (via a NSL or subpoena), Cloudflare and CloudFlare's upstream can track and see your requests. Using Google DNS, self-hosted resolver, or your ISP's DNS: NSA, your ISP, everyone and every dog at the middle of your link to the Internet can track and see your requests. There is a potential solution (djb's DNSCurve), but it will not be deployed. I just wanted things to be up so that I wasn't slain.ĭue to the architecture of DNS, DNS is not end-to-end encrypted. I'm sure I COULD figure it out, but I have other projects that are higher priority :)Įdit: I should also note when I was trying to figure this out I had a very angry spouse standing behind me burning holes into the back of my head because the network was down, so I didn't make a priority of really looking through logs and trying to properly diagnose things. I don't know enough about BSD's package manager or where pfsense puts package conf files to try to track this down and stop clean it out.
#Blackhole devnull facebook com facebook install
I wanted to try it again and NOT do what I had done previously, but I think a conf file is still floating around because the second I install pfBlockerNG(maybe -dev too? I actually can't remember now), my entire network instantly goes down and won't come back until I remove the pkg again. I had to physically connect to it and uninstall the pkg to get it to work again. Somehow when I first configured it, I configured something incorrectly - and it literally stopped all connections to or from the router entirely. Sure installation is easy, but long term maintenance (the OS, the app, constantly whitelisting or troubleshooting when a new service or app breaks for someone in the house). It just seems like a lot of effort for fairly imperfect results. Your wife downloads a game on her phone, and you get that look like "ok, why isn't this working. You end up whitelisting so much for those devices, you might as well whitelist the whole device just so the apps can work. People also downplay that this can be a pain in a home with a handful a streaming devices, each with a handful of apps. I think PiHole has it's place on a network - obviously, but people have been promoting this thing like you can just get rid of your adblocker on your browser now.

The complexity of rulesets by addons like ublock origin or PrivacyBadger seem to far surpass what PiHole is capable of. How does it handle ads that come from the same domain as legitimate content (which is increasingly common)? So how does it handle ads served through websockets? It acts as a DNS server for your local network and blocks what's essentially a host file.
#Blackhole devnull facebook com facebook android
I mean, to block trackers from Windows computers, or Roku devices or android apps.īut as an adblocker - I feel like I'm missing something. I see it as an advantage for all the devices on your network.
