5 ms·
DoH helps us against governments, but doesn't help us against advertisers, i.e. what stops Google or an app maker talking to their own DNS endpoint via DoH and
by buro9 2y ago
DoH helps us against governments, but doesn't help us against advertisers, i.e. what stops Google or an app maker talking to their own DNS endpoint via DoH and avoiding local measures to block malware and tracking.
DoH is a double edged thing, advertisers are a more present and pervasive threat to most than their own government
- logicchains 2y agoIf by most people you mean most people globally, governments are absolutely a bigger threat; only a minority of the world's population live in countries with benevolent governments who don't censor the internet to hide the government's misdeeds.
- whatwhaaaaat 2y agodon’t forget the us federal government paid twitter and Facebook to remove speech it didn’t like (speech that turned out to be true).
- chmod775 2y agoYou could argue against seatbelts the same way: seatbelts can cause abrasion of the skin during everyday driving, which is a more present and pervasive threat to most than car crashes. In both instances it turns out that the difference in magnitude of those threats makes the direct comparison misleading.
- FireInsight 2y agoI've never heard of seatbelt skin abrasion, but car crashes are an exceptionally commom danger.
- megous 2y agoCommunity based FOSS OSes/distros stop all this and avoiding the corporate SW/services.
- HeatrayEnjoyer 2y agoHow do I install a Foss OS to my TV or my kid's tablet? And without breaking DRM attestation?
- BlueTemplar 2y agoIf you use services requiring DRM, you are one of the bad actors, why should we care about what you think ?
- HeatrayEnjoyer 2y agoEveryone using Netflix is a bad actor?
- BlueTemplar 2y agoYes, they're definitely assholes. For instance : https://boingboing.net/2012/02/23/microsoft-google-and-netflix.html https://boingboing.net/2012/02/23/microsoft-google-and-netfl... (But «bad actor» was perhaps a bad choice of words, since someone buying devices or using media with DRM is of course not as evil as someone pushing them. But they are engaging in bad behaviour nonetheless.)
- megous 2y agoPinetab2 as a tablet, or some x86_64 tablet of which there are many. For TV, use it as a dumb display for some FOSS TV box, running something like libreelec. As for DRM attestation, that's not the responsibility of anyone but the DRM vendor, so ask them.
- dspillett 2y ago> DoH helps us against governments And bad ISPs⁰. And a small subset of MitM attacks. > advertisers are a more present and pervasive threat to most than their own government That is true for me¹ but I'd not agree with "most" globally. And while stalky corporates and the people who will get hold of my data subsequently due to lax security are my main concern, there are other ways to mitigate them. Less convenient ways, sure, and I loose a security-in-depth step of ashtray using them anyway, but I consider that inconvenience for me² to be less of an issue than the more serious problems DoH might mitigate for others. ---- [0] some people don't have a simple "just go elsewhere" option [1] relatively speaking: I don't consider my government that trustworthy, and will do so even less in future if the Tories get back in without major changes in their moral core, and I'm sure many Americans feel similarly if they consider the implications of Project2025. [2] both as an end user wanting to avoid commercial stalking and as someone who sometimes handles infrastructure for a B2B company that uses DNS based measures as part of the security theater we must present to clients when bidding for their patronage
- tzs 2y agoAn ISP could effectively bypass DoH. Block outgoing requests to IP addresses that the ISP has not whitelisted, and automatically whitelist IP addresses that were obtained from non-DoH DNS requests.