3 ms·

How does one do this?

by s_Hogg 7y ago

pjc50 7y ago
Specifically, how do you do it on a normal Android device? Is it even possible to do this on an iOS device that's on 4G or someone else's wifi? Do iOS devices have the same "leak"?
- Nextgrid 7y ago
  You either need to control the mobile side of things and never connect to unrestricted Wi-Fi or use Apple Configurator to create a profile for an always-on VPN to a place you control where you can apply the restrictions.
- MagnumOpus 7y ago
  > Is it even possible to do this on an iOS device that's on 4G No. > Is it even possible to do this on an iOS device that's on [...] someone else's wifi Yes, since you can do it on your device, and do not have to do it on the router. Drawback is you have to do it for each Wifi network anew. > Do iOS devices have the same "leak" Yes, there is nothing that prevents apps from phoning home (or phoning every one of a dozen data collection "partners")
  - newscracker 7y ago
    >> Is it even possible to do this on an iOS device that's on 4G > No. If it is a DNS server change on 4G/LTE, it can be done by using FOSS apps like DNSCloak on iOS. [1] [1]: http://github.com/s-s/dnscloak http://github.com/s-s/dnscloak
aembleton 7y ago
If you are running Android >=9 then you can block the trackers by changing your DNS settings to use one from https://nextdns.io/ https://nextdns.io/ Instructions on changing DNS settings https://joyofandroid.com/how-to-change-dns-on-android/ https://joyofandroid.com/how-to-change-dns-on-android/
smichel17 7y ago
I'm blocking Facebook DNS requests using DNS66. I'd also be interested in how to block their entire ASN, though.
- yosamino 7y ago
  I am unable to verify this right now for the obvious reason, but facebook operates on ASN gAS32934[0] So you can ask https://www.radb.net/ https://www.radb.net/ for the IP addresses that are associated with this AS and, after a quick manual sanity check, insert it into the firewall of your choice. For example: whois -h whois.radb.net '!gAS32934'| tr ' ' "\n" | sed 's/^/saddr /'| sed 's/$/ DROP;/' [0] https://www.facebook.com/peering/ https://www.facebook.com/peering/

How does one do this?

by s_Hogg 7y ago

How does one do this?

Specifically, how do you do it on a normal Android device? Is it even possible to do this on an iOS device that's on 4G or someone else's wifi? Do iOS devices have the same "leak"?

Nextgrid 7y ago
You either need to control the mobile side of things and never connect to unrestricted Wi-Fi or use Apple Configurator to create a profile for an always-on VPN to a place you control where you can apply the restrictions.
MagnumOpus 7y ago
> Is it even possible to do this on an iOS device that's on 4G No. > Is it even possible to do this on an iOS device that's on [...] someone else's wifi Yes, since you can do it on your device, and do not have to do it on the router. Drawback is you have to do it for each Wifi network anew. > Do iOS devices have the same "leak" Yes, there is nothing that prevents apps from phoning home (or phoning every one of a dozen data collection "partners")
- newscracker 7y ago
  >> Is it even possible to do this on an iOS device that's on 4G > No. If it is a DNS server change on 4G/LTE, it can be done by using FOSS apps like DNSCloak on iOS. [1] [1]: http://github.com/s-s/dnscloak http://github.com/s-s/dnscloak

aembleton 7y ago

If you are running Android >=9 then you can block the trackers by changing your DNS settings to use one from https://nextdns.io/ https://nextdns.io/ Instructions on changing DNS settings https://joyofandroid.com/how-to-change-dns-on-android/ https://joyofandroid.com/how-to-change-dns-on-android/

smichel17 7y ago

I'm blocking Facebook DNS requests using DNS66. I'd also be interested in how to block their entire ASN, though.

yosamino 7y ago
I am unable to verify this right now for the obvious reason, but facebook operates on ASN gAS32934[0] So you can ask https://www.radb.net/ https://www.radb.net/ for the IP addresses that are associated with this AS and, after a quick manual sanity check, insert it into the firewall of your choice. For example: whois -h whois.radb.net '!gAS32934'| tr ' ' "\n" | sed 's/^/saddr /'| sed 's/$/ DROP;/' [0] https://www.facebook.com/peering/ https://www.facebook.com/peering/