• 0 Posts
  • 77 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle





  • Bruh, you’re being extremely optimistic that Mozilla going down won’t kill forks. Take librewolf for example. It’s like 1 dev or something. No way that dude is gonna maintain security fixes and stuff on his own. That takes an entire full-time paid dev team. Ladybird I’ve heard about for ages, however who the hell knows when/if that would be viable and maintained on its own. Could difference projects pool resources and maintain it together? Yea, sure it could. Is that guaranteed or likely to happen any time soon? Fuck no.

    Bottom line is Mozilla going bye bye would almost guarantee the deaths of all forks. To think otherwise is naive.











  • So most alternative router firmware comes with a feature that can be configured to re-route any hard coded DNS through the pihole. I.e., my Smart TV will switch to Google DNS if it can’t connect through your set DNS. The feature I mentioned will force this to always go through your configured DNS. This is completely solves that issue. I’ve thoroughly tested this and it 100% works. Also routers have a feature that can block a device from accessing the WAN at all, and only allow them to access the LAN. This is just a simple toggle in my router and extremely easy to use. I block certain devices that I don’t want to have intentet at all but that I want to access over the network (i.e. plex)

    Just to be clear, my goal with my setup is limiting tracking, telemetry, and ads.


  • I don’t understand your response. You’re essentially doing the exact same thing I am. Preventing iot devices from accessing wan. The end result in the same, except you’re blocking it from accessing other devices on lan as well. But access to wan is blocked which is the most important. If a device has a security vulnerability then by blocking wan access, you’re blocking an attacker from getting in, unless someone malicious is already on your local network, which in that case you’re fucked anyway. Apologies if i misunderstood your point.


  • A better solution is to use a pihole to block all domains that the TV pings, and only let through ones that allow you to use streaming apps (i.e. netflix API domain.)

    Another good solution is to block WAN access for specific devices and only allow them to communicate over LAN. This would be done on your Router. This method would allow local streaming using Jellyfin but wouldn’t allow streaming apps like Netflix since that requires communication with the outside Internet.