2 ms·
The Pi-Hole is literally DNS filtering - aka HOSTs file in hardware. Relying upon a security practice from almost 25 years ago is not really a good idea IMHO.
by lightedman 7y ago
The Pi-Hole is literally DNS filtering - aka HOSTs file in hardware.
Relying upon a security practice from almost 25 years ago is not really a good idea IMHO.
- josteink 7y agoIt’s better than nothing and also works on mobile devices with poor ad-blocking support, like the iPad and iPhone.
- lightedman 7y agoIt's actually not better than nothing. It's worse than nothing, because it gives a false sense of security. Bypassing DNS blocking is easy. You can access my normal site, block ads by DNS, but I can just serve everything up over plain IP address without the domain name being required, now you're loaded with ads/trackers/scripts anyways and your security just got bypassed. This trick is literally as old as HOSTs. It has been proven time and time again that DNS-based blocking only works when everything uses domain names as pointers to resources, instead of using IP addresses to do the same. It feels like APK has suddenly arrived on HN. Not a surprise since we just had him banned off Slashdot.