7 ms·

It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. But the ad-blocking vpn serve

It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. But the ad-blocking vpn server is 127.0.0.1, so perhaps, like it says all the blocking happens right on your phone. This is what I've been waiting for if this works. Still getting ads on instagram though.

vageli 7y ago
On Android, DNS66 does exactly this, available on F-Droid. https://f-droid.org/en/packages/org.jak_linux.dns66/ https://f-droid.org/en/packages/org.jak_linux.dns66/
- flavor8 7y ago
  Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66?
  - ignoramous 7y ago
    Blokada doesn't DoH or DoT the last time I checked, but they have added a wireguard-based paid VPN service, which is nice. Intra [0] can DoH (but no on-device custom blocklists) and Nebulo [1] can DoH and DoT (with on-device blocklists). Personally, I see better latencies with DoH. Ref: https://news.ycombinator.com/item?id=21598413 https://news.ycombinator.com/item?id=21598413 -- [0] https://getintra.org https://getintra.org + adguard-dns or nextdns [1] https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen https://play.google.com/store/apps/details?id=com.frostnerd.... + adguard-dns or nextdns or hostfiles
    - dmix 7y ago
      For those unfamiliar with the acronyms. DoH = DNS over HTTPS DoT = DNS over TLS Very useful apps!
  - vageli 7y ago
    > Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66? No, I've never heard of blokada. Thanks for the tip.
    - vezycash 7y ago
      The blokada in play store doesn't block ads. Get it from their store. Also agressive power management from phone makers close them.
      - datashaman 7y ago
        There is an aggressive stayalive option. :)
        vezycash 7y ago
        Please details. I've set certain apps to have no power restrictions. Yet they get shutdown.
        vezycash 7y ago
        Thanks. Think I found it.
- Groxx 7y ago
  As does NetGuard, both on the Play store and F-Droid: https://www.netguard.me/ https://www.netguard.me/ A paid upgrade to the Play store version lets you filter traffic like adblock, or just use the releases from Github (they allow filtering, but not most pro features)
  - opinologo 7y ago
    I use and love Netguard. It's great to see the trackers every app is connecting to but can't see a global option to block a particular domain across the board. I can only block on a case by case app.. Maybe they added this option recently?
    - Groxx 7y ago
      I've only seen across-the-board, though you can allow individual apps to bypass the filter entirely. I think it's just a filter on DNS requests, but for APKs from github: settings -> backup -> import hosts file You may also need to enable traffic filtering, I forget. that's at: settings -> advanced -> Filter traffic + Block domain names The github apks notify you about updates and link right to the download page, so they're pretty painless to use.
    - beerandt 7y ago
      It's only in the github version due to play store rules. And it's a global DNS based blacklist. I wish there was global or group based ip rules though, since there's no way to whitelist DNS per app or temporarily, without completely turning off filtering. It's kind of a pain, honestly. Some of the developers decisions seem pretty arbitrary to me. It's so close to being a must have app. I wish I had time to get familiar with the code. That said, it's still my favorite option since losing adhell3 again.
  - tomcatfish 7y ago
    Do you have any tips on how to set up NetGuard well? I use an app now called "NoRoot Firewall" that lets me filter on ip address or url and also port, with wildcards. (Ex. *.facebook.com). I cannot find a way to set up NetGuard since it appears to me that I can only decide on each request, which makes it near impossible to ever whitelist/blacklist something like AWS, which uses an ever rotating number of locations.
m463 7y ago
I have an old version of adblock for ios that can block (and even break) apple services. Just what I wanted. Apple forced the developer to "upgrade" it to use DNS based blocking and provide no lists of adservers, which pretty much let everything back through.
mosselman 7y ago
On iOS I use DNSCloak. It takes some work to setup, like downloading the blocklist from somewhere yourself, but it works. I will try lockdown to see how it compares though. It looks easier.
- newscracker 7y ago
  DNSCloak and Lockdown cannot be enabled at the same time. When I tried it quite sometime ago, it was one or the other, which is a bummer if you want to use Lockdown while also choosing specific DNS servers to use. I’m guessing this is due to a limitation imposed by iOS, but have no idea how it can be solved.
  - mosselman 7y ago
    It probably can't, seeing as both use a local VPN server to implement what they do. You could always manually enter your DNS servers in your iPhone's settings.
    - cosmie 7y ago
      > You could always manually enter your DNS servers in your iPhone's settings. Can you do this for mobile connections? From what I've been able to see, you have to set DNS settings on a per SSID basis, and that particular menu doesn't exist when connected to the cell network instead of wifi.
hombre_fatal 7y ago
Everyone should fire up https://mitmproxy.org/ https://mitmproxy.org/ from time to time just to see how much chatty your mobile apps can be, phoning home to places like analytics services on every tap and swipe. I was using a translation app on my phone that sent every keystroke to google analytics. Of course also fun in its own right to see the sorts of APIs an app uses and how often the developers like to query it.
- muttled 7y ago
  It was sending every keystroke in the app, or every keystroke in the entire phone?
  - hombre_fatal 7y ago
    Just the app. I think it's just a testament to how normal and easy tracking/info-collection has become that there's no real downside to doing it everywhere nor pressure to really stop, think, and care. That you have to go through the trouble of mitm'ing yourself to see this stuff is also the flip side of HN's native app fetishization and knee-jerk web hate.
OnACoffeeBreak 7y ago
> Still getting ads on instagram though. I haven't checked myself, but I read that it's likely because Instagram may use the same domain to serve ads as its regular content. So, if you block Instagram's domain, you will block Instagram itself.
jiveturkey 7y ago
> It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. "Can", not "does". The App Store page for it (for both Mac and iOS versions) says > Optional VPN for additional privacy LOL! Additional!!

vageli 7y ago

On Android, DNS66 does exactly this, available on F-Droid. https://f-droid.org/en/packages/org.jak_linux.dns66/ https://f-droid.org/en/packages/org.jak_linux.dns66/

flavor8 7y ago
Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66?
- ignoramous 7y ago
  Blokada doesn't DoH or DoT the last time I checked, but they have added a wireguard-based paid VPN service, which is nice. Intra [0] can DoH (but no on-device custom blocklists) and Nebulo [1] can DoH and DoT (with on-device blocklists). Personally, I see better latencies with DoH. Ref: https://news.ycombinator.com/item?id=21598413 https://news.ycombinator.com/item?id=21598413 -- [0] https://getintra.org https://getintra.org + adguard-dns or nextdns [1] https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen https://play.google.com/store/apps/details?id=com.frostnerd.... + adguard-dns or nextdns or hostfiles
  - dmix 7y ago
    For those unfamiliar with the acronyms. DoH = DNS over HTTPS DoT = DNS over TLS Very useful apps!
- vageli 7y ago
  > Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66? No, I've never heard of blokada. Thanks for the tip.
  - vezycash 7y ago
    The blokada in play store doesn't block ads. Get it from their store. Also agressive power management from phone makers close them.
    - datashaman 7y ago
      There is an aggressive stayalive option. :)
      - vezycash 7y ago
        Please details. I've set certain apps to have no power restrictions. Yet they get shutdown.
      - vezycash 7y ago
        Thanks. Think I found it.
Groxx 7y ago
As does NetGuard, both on the Play store and F-Droid: https://www.netguard.me/ https://www.netguard.me/ A paid upgrade to the Play store version lets you filter traffic like adblock, or just use the releases from Github (they allow filtering, but not most pro features)
- opinologo 7y ago
  I use and love Netguard. It's great to see the trackers every app is connecting to but can't see a global option to block a particular domain across the board. I can only block on a case by case app.. Maybe they added this option recently?
  - Groxx 7y ago
    I've only seen across-the-board, though you can allow individual apps to bypass the filter entirely. I think it's just a filter on DNS requests, but for APKs from github: settings -> backup -> import hosts file You may also need to enable traffic filtering, I forget. that's at: settings -> advanced -> Filter traffic + Block domain names The github apks notify you about updates and link right to the download page, so they're pretty painless to use.
  - beerandt 7y ago
    It's only in the github version due to play store rules. And it's a global DNS based blacklist. I wish there was global or group based ip rules though, since there's no way to whitelist DNS per app or temporarily, without completely turning off filtering. It's kind of a pain, honestly. Some of the developers decisions seem pretty arbitrary to me. It's so close to being a must have app. I wish I had time to get familiar with the code. That said, it's still my favorite option since losing adhell3 again.
- tomcatfish 7y ago
  Do you have any tips on how to set up NetGuard well? I use an app now called "NoRoot Firewall" that lets me filter on ip address or url and also port, with wildcards. (Ex. *.facebook.com). I cannot find a way to set up NetGuard since it appears to me that I can only decide on each request, which makes it near impossible to ever whitelist/blacklist something like AWS, which uses an ever rotating number of locations.

m463 7y ago

I have an old version of adblock for ios that can block (and even break) apple services. Just what I wanted. Apple forced the developer to "upgrade" it to use DNS based blocking and provide no lists of adservers, which pretty much let everything back through.

mosselman 7y ago

On iOS I use DNSCloak. It takes some work to setup, like downloading the blocklist from somewhere yourself, but it works. I will try lockdown to see how it compares though. It looks easier.

newscracker 7y ago
DNSCloak and Lockdown cannot be enabled at the same time. When I tried it quite sometime ago, it was one or the other, which is a bummer if you want to use Lockdown while also choosing specific DNS servers to use. I’m guessing this is due to a limitation imposed by iOS, but have no idea how it can be solved.
- mosselman 7y ago
  It probably can't, seeing as both use a local VPN server to implement what they do. You could always manually enter your DNS servers in your iPhone's settings.
  - cosmie 7y ago
    > You could always manually enter your DNS servers in your iPhone's settings. Can you do this for mobile connections? From what I've been able to see, you have to set DNS settings on a per SSID basis, and that particular menu doesn't exist when connected to the cell network instead of wifi.

hombre_fatal 7y ago

Everyone should fire up https://mitmproxy.org/ https://mitmproxy.org/ from time to time just to see how much chatty your mobile apps can be, phoning home to places like analytics services on every tap and swipe. I was using a translation app on my phone that sent every keystroke to google analytics. Of course also fun in its own right to see the sorts of APIs an app uses and how often the developers like to query it.

muttled 7y ago
It was sending every keystroke in the app, or every keystroke in the entire phone?
- hombre_fatal 7y ago
  Just the app. I think it's just a testament to how normal and easy tracking/info-collection has become that there's no real downside to doing it everywhere nor pressure to really stop, think, and care. That you have to go through the trouble of mitm'ing yourself to see this stuff is also the flip side of HN's native app fetishization and knee-jerk web hate.

OnACoffeeBreak 7y ago

> Still getting ads on instagram though. I haven't checked myself, but I read that it's likely because Instagram may use the same domain to serve ads as its regular content. So, if you block Instagram's domain, you will block Instagram itself.

jiveturkey 7y ago

> It's functions similar to other mobile ad-blockers in that it can route all your phones traffic over a VPN tunnel it establishes. "Can", not "does". The App Store page for it (for both Mac and iOS versions) says > Optional VPN for additional privacy LOL! Additional!!