5 ms·

Pi-hole has been excellent. I was able to discover that my Samsung TV was reporting minute by minute updates on what I was watching to a local Australian compan

Pi-hole has been excellent. I was able to discover that my Samsung TV was reporting minute by minute updates on what I was watching to a local Australian company. Unplugged it faster than I could swear.

brachi 6y ago
Reading these kind of anecdotes makes me wonder why is this legal or at least opt-in.
- kube-system 6y ago
  My TV made me accept a terms of service agreement on first boot.
  - solstice 6y ago
    That (on its own) doesn't mean that it's legal, I'd imagine. At least in the EU, doesn't GDPR prohibit such non-choices?
    - GekkePrutser 6y ago
      It does now but it's possible it was bought before that time.
    - deleted 6y ago
      [deleted]
mulmen 6y ago
How does the Pi-hole achieve this? Does it have a blacklist (I assume) or can it use a whitelist? The services my TV needs to reach are easily enumerable, I pay all of them subscriptions. There is no other valid connection for it to make. Maybe firmware/app updates but I'd kinda prefer to do that myself at this point.
- Smoosh 6y ago
  Yes, both blacklist and whitelist.
ptmcc 6y ago
Same with my Sony Android TV. That thing trying to phone god knows what home made up almost a third of all DNS requests on my home network, even with 2 adults working from home. Since you can't buy dumb TVs anymore, you best leave the "smart" ones offline.
- close04 6y ago
  Worth mentioning that this is just the domain resolution, not necessarily the real volume of connections. The reason they try every second sometimes (I have devices that do exactly this, ~86000 attempts every day) is because they keep failing. Assuming they resolve once they stop flooding the Pi-hole and will bundle their connections in fewer, larger chunks. Couldn't say what's in those chunks since they're encrypted but I can make a fair guess. But the bottom line is that the number of attempts to resolve the DNS doesn't say anything about how egregious the activity is. You could have a device try every second because it wants to send an "I'm alive" message home, or you could have a device attempt DNS resolution once per day and send all the traffic it captured from your network. Don't use that number as an indication of how evil the device is, I'm sure the most egregious malware or crappy IoT will be careful not to flood DNS requests.
  - ptmcc 6y ago
    Fair point, but I'd still prefer my TV doesn't phone home at all, especially to pi-hole blocked domains.
BLKNSLVR 6y ago
My smart TV remains disconnected from any network. But I use an Android TV box, so I may only be substituting one company's surveillance for another's. Android TV is a massive improvement upon any Smart TV's UX though, so I'm winning on that count.
ljhsiung 6y ago
Ever thought about just buying a TV that has no network connectivity capability at all i.e. "dumb" TVs? Though rare to find a 4k/OLED TV that's "dumb", I managed to grab one. If I do want certain smart features e.g. chromecast I can always just buy it individually for like $30.
- jedberg 6y ago
  I just don't configure wifi on the TV. I can't use the smart features but I don't need to, I have other devices for that.
vestrigi 6y ago
Modern TVs actually reached such low prices because almost all of them are paying for production post purchase with user data. So that's generally a great idea to lock it up with pi-hole or to not even connect it at all and use an external streaming box. I think this already made the round on HN https://phys.org/news/2019-02-tvs-cheap-smart-tv-extra.html https://phys.org/news/2019-02-tvs-cheap-smart-tv-extra.html
lostlogin 6y ago
I'm sure you know this, but with a reasonable router you can redirect non pihole port 53 traffic back to the pihole. A relatively cheap Edgerouter lite does this for me.

brachi 6y ago

Reading these kind of anecdotes makes me wonder why is this legal or at least opt-in.

kube-system 6y ago
My TV made me accept a terms of service agreement on first boot.
- solstice 6y ago
  That (on its own) doesn't mean that it's legal, I'd imagine. At least in the EU, doesn't GDPR prohibit such non-choices?
  - GekkePrutser 6y ago
    It does now but it's possible it was bought before that time.
  - deleted 6y ago
    [deleted]

mulmen 6y ago

How does the Pi-hole achieve this? Does it have a blacklist (I assume) or can it use a whitelist? The services my TV needs to reach are easily enumerable, I pay all of them subscriptions. There is no other valid connection for it to make. Maybe firmware/app updates but I'd kinda prefer to do that myself at this point.

Smoosh 6y ago
Yes, both blacklist and whitelist.

ptmcc 6y ago

Same with my Sony Android TV. That thing trying to phone god knows what home made up almost a third of all DNS requests on my home network, even with 2 adults working from home. Since you can't buy dumb TVs anymore, you best leave the "smart" ones offline.

close04 6y ago
Worth mentioning that this is just the domain resolution, not necessarily the real volume of connections. The reason they try every second sometimes (I have devices that do exactly this, ~86000 attempts every day) is because they keep failing. Assuming they resolve once they stop flooding the Pi-hole and will bundle their connections in fewer, larger chunks. Couldn't say what's in those chunks since they're encrypted but I can make a fair guess. But the bottom line is that the number of attempts to resolve the DNS doesn't say anything about how egregious the activity is. You could have a device try every second because it wants to send an "I'm alive" message home, or you could have a device attempt DNS resolution once per day and send all the traffic it captured from your network. Don't use that number as an indication of how evil the device is, I'm sure the most egregious malware or crappy IoT will be careful not to flood DNS requests.
- ptmcc 6y ago
  Fair point, but I'd still prefer my TV doesn't phone home at all, especially to pi-hole blocked domains.

BLKNSLVR 6y ago

My smart TV remains disconnected from any network. But I use an Android TV box, so I may only be substituting one company's surveillance for another's. Android TV is a massive improvement upon any Smart TV's UX though, so I'm winning on that count.

ljhsiung 6y ago

Ever thought about just buying a TV that has no network connectivity capability at all i.e. "dumb" TVs? Though rare to find a 4k/OLED TV that's "dumb", I managed to grab one. If I do want certain smart features e.g. chromecast I can always just buy it individually for like $30.

jedberg 6y ago
I just don't configure wifi on the TV. I can't use the smart features but I don't need to, I have other devices for that.

vestrigi 6y ago

Modern TVs actually reached such low prices because almost all of them are paying for production post purchase with user data. So that's generally a great idea to lock it up with pi-hole or to not even connect it at all and use an external streaming box. I think this already made the round on HN https://phys.org/news/2019-02-tvs-cheap-smart-tv-extra.html https://phys.org/news/2019-02-tvs-cheap-smart-tv-extra.html

lostlogin 6y ago

I'm sure you know this, but with a reasonable router you can redirect non pihole port 53 traffic back to the pihole. A relatively cheap Edgerouter lite does this for me.