3 ms·

I made my tv semi dumb via a dns whitelist and some firewall rules. Set up code to do dns forwarding/dropping on a raspberry pi pico for fun and its been worki

I made my tv semi dumb via a dns whitelist and some firewall rules. Set up code to do dns forwarding/dropping on a raspberry pi pico for fun and its been working great. Only allows netflix/prime/disney+ and so far no ads. https://github.com/AdrianCX/pico_hole https://github.com/AdrianCX/pico_hole

VTimofeenko 4y ago
I have been thinking about incorporating similar thing for my unbound/nsd stack through client tagging. How do you maintain the white list of domains for netflix/prime/disney+?
- adriancr 4y ago
  > I have been thinking about incorporating similar thing for my unbound/nsd stack through client tagging That's a nice idea, ping if you do get it working. > How do you maintain the white list of domains for netflix/prime/disney+? You can use any of existing whitelists for domains like this: https://raw.githubusercontent.com/JO2EY/Rules/master/Surge/RULE-SET/Streaming.list https://raw.githubusercontent.com/JO2EY/Rules/master/Surge/R... Domains for me are hardcoded, i recompile to change them (not ideal, i only did it to experiment and it's good enough so it stuck, also not much ram) If things stop working I look at logs and update. On other environments you could just present domains in a UI and have user block/allow/permanent block and hide. (that would be fine for me)
  - VTimofeenko 4y ago
    Thank you! I am currently using StevenBlack's host file for ad blocking across all DNS clients. The tagging setup is used as a split-horizon DNS; for example, my tiny tiny RSS domain gets resolved to 192.168.1.3 on my LAN and 10.1.2.3 for wireguard VPN clients. I am using NixOS and consuming my own infrastructure definition, so the config is currently not portable, but I have been thinking about splitting it out into multiple files and publishing it.
    - than3 4y ago
      I'm not seeing how this would help with these smart devices connecting automatically to mesh networks? (i.e. Amazon sidewalk 900mhz band).
      - VTimofeenko 4y ago
        It would not, but I deal with that threat differently - I don't buy such devices.
        than3 4y ago
        They won't necessarily disclose those devices have that ability upfront. Look at the Nest thermostat.
hanafudafan 4y ago
Amazon Sidewalk and dirt cheap 4/5g are appearing in many products including TVs - how do you audit yours to ensure it's not simply going over your head?
- adriancr 4y ago
  1. If i start seeing ads I will investigate. So it would be painfully obvious whatever they do. 2. When I buy I check reviews and avoid 4/5g or sidewalk. 3. If bought by mistake - return. 4. If left with no choice then: - I will buy but not accept monitoring - add automated gdpr request every month for my data and request to delete after. - see what they return and figure out how it was captured (ex: kill microphone if audio data), sue if anything illegal Technical wise, play around: - custom firmware - if tvs get powerful enough to run full linux distributions then I would be very happy. - desoldering/reusing 4/5g or sidewalk components on my other projects... (free connectivity on sensors on car/bike etc) - replace board entirely with a raspberry or similar

VTimofeenko 4y ago

I have been thinking about incorporating similar thing for my unbound/nsd stack through client tagging. How do you maintain the white list of domains for netflix/prime/disney+?

adriancr 4y ago
> I have been thinking about incorporating similar thing for my unbound/nsd stack through client tagging That's a nice idea, ping if you do get it working. > How do you maintain the white list of domains for netflix/prime/disney+? You can use any of existing whitelists for domains like this: https://raw.githubusercontent.com/JO2EY/Rules/master/Surge/RULE-SET/Streaming.list https://raw.githubusercontent.com/JO2EY/Rules/master/Surge/R... Domains for me are hardcoded, i recompile to change them (not ideal, i only did it to experiment and it's good enough so it stuck, also not much ram) If things stop working I look at logs and update. On other environments you could just present domains in a UI and have user block/allow/permanent block and hide. (that would be fine for me)
- VTimofeenko 4y ago
  Thank you! I am currently using StevenBlack's host file for ad blocking across all DNS clients. The tagging setup is used as a split-horizon DNS; for example, my tiny tiny RSS domain gets resolved to 192.168.1.3 on my LAN and 10.1.2.3 for wireguard VPN clients. I am using NixOS and consuming my own infrastructure definition, so the config is currently not portable, but I have been thinking about splitting it out into multiple files and publishing it.
  - than3 4y ago
    I'm not seeing how this would help with these smart devices connecting automatically to mesh networks? (i.e. Amazon sidewalk 900mhz band).
    - VTimofeenko 4y ago
      It would not, but I deal with that threat differently - I don't buy such devices.
      - than3 4y ago
        They won't necessarily disclose those devices have that ability upfront. Look at the Nest thermostat.

hanafudafan 4y ago

Amazon Sidewalk and dirt cheap 4/5g are appearing in many products including TVs - how do you audit yours to ensure it's not simply going over your head?

adriancr 4y ago
1. If i start seeing ads I will investigate. So it would be painfully obvious whatever they do. 2. When I buy I check reviews and avoid 4/5g or sidewalk. 3. If bought by mistake - return. 4. If left with no choice then: - I will buy but not accept monitoring - add automated gdpr request every month for my data and request to delete after. - see what they return and figure out how it was captured (ex: kill microphone if audio data), sue if anything illegal Technical wise, play around: - custom firmware - if tvs get powerful enough to run full linux distributions then I would be very happy. - desoldering/reusing 4/5g or sidewalk components on my other projects... (free connectivity on sensors on car/bike etc) - replace board entirely with a raspberry or similar