5 ms·

It does not. I'd guess it hardly makes a dent in their tracking. The only sure way to block completely is to use a custom router on your network - an outgoing

by 411mrc 9y ago

It does not. I'd guess it hardly makes a dent in their tracking. The only sure way to block completely is to use a custom router on your network - an outgoing firewall. Via a custom dns server on my router, all requests from any device, browser, app, etc for the facebook or any ad or tracking domains never leave my network. This is powerful. Windows 10 intrusive spying can be blocked as well. Basically anything that I can't figure out what it is is blocked, and it's a lot. If I ever acquire malware that phones home, it should detect as well. The great thing is when you block all that, your internet is much faster.

dmoose 9y ago
Would you comment on what router and software you are using, how difficult it is to maintain, and any surprises you have had using it (things you depend on breaking).
- 411mrc 9y ago
  It's Ubuntu. Protectli is the equipment, easily obtainable on Amazon. If I had to do over I would use PCEngines however since they use core boot. Edit: you will also need a wireless access point to plug into a lan port. Ubiquity unify is great and is much better coverage than the consumer grade router this replaced. An excellent guide: https://killtacknine.com/building-an-ubuntu-16-04-router-part-1-network-interfaces/ https://killtacknine.com/building-an-ubuntu-16-04-router-par... Up for months, incredible speed, no maintenance, except to add new domains to block when they prove to be spyware. Twitter may be next on the list since it is of declining use to me. I'll add that I'm by no means a linux whiz, but learned a lot by doing this project. Biggest issue is explaining to guests why they can't access facebook. Another bene is you no longer have the planned obsolescence of consumer grade equipment. I fully expect this thing to last a decade, and "firmware" is automatically updated via linux.
- tombrossman 9y ago
  If you want something high-performance that you can have running quickly, you can do this with a Turris Omnia router + Pi-hole (DNS ad-blocker). The Omnia is about $300. I've done a blog post explaining how to get everything set up here, and it's CC0 public domain licensed so you can copy or adapt it however you like: https://www.tombrossman.com/blog/2017/how-to-install-pi-hole-on-your-turris-omnia-router/ https://www.tombrossman.com/blog/2017/how-to-install-pi-hole... No surprises, the Omnia updates itself and reboots automatically (you get an email warning of you want to intervene) and everything 'just works'.
Renaud 9y ago
You can already go a long way without as much technical commitment with a PiHole setup that simply poison DNS queries. It can't compete with the total control you get with crafting specific firewall rules but it has most of the same effect while being a lot simpler to manage.

by 411mrc 9y ago

dmoose 9y ago

Would you comment on what router and software you are using, how difficult it is to maintain, and any surprises you have had using it (things you depend on breaking).

411mrc 9y ago
It's Ubuntu. Protectli is the equipment, easily obtainable on Amazon. If I had to do over I would use PCEngines however since they use core boot. Edit: you will also need a wireless access point to plug into a lan port. Ubiquity unify is great and is much better coverage than the consumer grade router this replaced. An excellent guide: https://killtacknine.com/building-an-ubuntu-16-04-router-part-1-network-interfaces/ https://killtacknine.com/building-an-ubuntu-16-04-router-par... Up for months, incredible speed, no maintenance, except to add new domains to block when they prove to be spyware. Twitter may be next on the list since it is of declining use to me. I'll add that I'm by no means a linux whiz, but learned a lot by doing this project. Biggest issue is explaining to guests why they can't access facebook. Another bene is you no longer have the planned obsolescence of consumer grade equipment. I fully expect this thing to last a decade, and "firmware" is automatically updated via linux.
tombrossman 9y ago
If you want something high-performance that you can have running quickly, you can do this with a Turris Omnia router + Pi-hole (DNS ad-blocker). The Omnia is about $300. I've done a blog post explaining how to get everything set up here, and it's CC0 public domain licensed so you can copy or adapt it however you like: https://www.tombrossman.com/blog/2017/how-to-install-pi-hole-on-your-turris-omnia-router/ https://www.tombrossman.com/blog/2017/how-to-install-pi-hole... No surprises, the Omnia updates itself and reboots automatically (you get an email warning of you want to intervene) and everything 'just works'.

Renaud 9y ago

You can already go a long way without as much technical commitment with a PiHole setup that simply poison DNS queries. It can't compete with the total control you get with crafting specific firewall rules but it has most of the same effect while being a lot simpler to manage.