When I setup pihole, the google home speakers I had were making dns requests something like 20k times a day. More than pretty much every other device on my network.
I removed them all after that.
Same for Roku, and worse now that they were bought out. Sorry grandma, the Roku is getting cut off. Lol
I’m surprised it didn’t just have google’s DNS hardcoded to bypass your pihole.
That ought to be illegal.
(No, seriously: disobeying DNS the owner set by DHCP ought to count as “exceeding authorized access” under the CFAA.)
Counter point on that, that might affect the legality of DNS over HTTPS
No, because the law cares about intent, not technical details. Having my property do DNS over HTTPS because that’s what I, the owner, wanted is fine; having my property do DNS over HTTPS because that’s what some non-owner entity wanted against my will as the owner is not.
Rather: they are free to do protocol negotiation with the DNS server I supply. If it speaks DoH, go for it.
They do, but thankfully with pfSense you can do DNS overrides with firewall rules to force all network devices to use local DNS, blocking everything else.
https://dominetec.com.br/en/redirect-all-dns-requests-to-pfsense-router
next move is theirs… knight to queen’s dns-over-https
There are several DoH IP lists on github. Find one that is staying updated and use it as an alias to block them all
Neat! Trying this in a few minutes. Be lovely having everything go through my local Pihole VM.
Chromecasts do that. I had to intercept port 53 on the router to fix it.
DNS over ssl.
I redirect all out going dns requests to my self hosted DNS server.
Only one I can’t block is DoH. DoT is easily blocked and my firewall picks up on it.
Yup, me too. It’s why I made this:
Similar for my Google nest, it’s the #1 host in number of daily requests in my network, around one every 500ms
Now it’s on it’s own vlan so there’s nothing that they can report on my network, but it’s really concerning that a thermostat calls home this often. It should be enough to do it once an hour to check the outside temperature and only if it’s enabled.v
Anyone expecting any different is an idiot frankly.
I took mine out when I discovered from the log that it would randomly cause massive deauth and noise on my wireless network. All my stability issues vanished since.
I unplugged mine when it kept coming to life after hearing “Hey <any other fucking word under the sun>”. If all it did was act as an internet radio and set timers I’d still be using it.
So Google uses something called “federated learning” which is not as fun as it sounds. It’s where they load a small model onto your device, train it on all your data, then send the resulting training data back to headquarters.
So it’s totally cool! Because your actual PII never leaves your device! Just everything about you statistically that might be useful to advertisers or governments! Really, whoever can pay!
They do this outrageous download numbers just to hide the amount they upload at the same type.
You wouldn’t download a home
