7 daysWhen I setup pihole, the google home speakers I had were making dns requests something like 20k times a day. More than pretty much every other device on my network.
I removed them all after that.
- ninja@lemmy.worldEnglish7 days
I’m surprised it didn’t just have google’s DNS hardcoded to bypass your pihole.
- grue@lemmy.worldEnglish7 days
That ought to be illegal.
(No, seriously: disobeying DNS the owner set by DHCP ought to count as “exceeding authorized access” under the CFAA.)
- 7 days
Unfortunately the monkey’s paw would curl here and using DNS other than that provided by your ISP would become illegal.
(I know there’s a difference between your devices using their network to access the internet and your “purchased” (licensed software running on) your device using your network to access the internet - but the monkey doesn’t care)
- frongt@lemmy.zipEnglish7 days
RFC 2132 says DHCP option 6 provides “a list of Domain Name System name servers available to the client”. That’s a MAY use, not a MUST use. You are welcome to block DNS requests to outside servers if you prefer.
- grue@lemmy.worldEnglish7 days
RFCs are subordinate to laws. If I, the device and network owner, want my device to use the DNS I set and the device does differently, I want the rogue corp prosecuted and IDGAF what some goddamn RFC says!
- frongt@lemmy.zipEnglish7 days
I don’t think you’d be able to find a court receptive to that argument.
- grue@lemmy.worldEnglish7 days
Every court that disagrees is tyrannical and needs to be fucking abolished.
Counter point on that, that might affect the legality of DNS over HTTPS
- grue@lemmy.worldEnglish7 days
No, because the law cares about intent, not technical details. Having my property do DNS over HTTPS because that’s what I, the owner, wanted is fine; having my property do DNS over HTTPS because that’s what some non-owner entity wanted against my will as the owner is not.
- aksdb@lemmy.worldEnglish7 days
Rather: they are free to do protocol negotiation with the DNS server I supply. If it speaks DoH, go for it.
- NarrativeBear@lemmy.worldEnglish7 days
They do, but thankfully with pfSense you can do DNS overrides with firewall rules to force all network devices to use local DNS, blocking everything else.
https://dominetec.com.br/en/redirect-all-dns-requests-to-pfsense-router
- randombullet@programming.devEnglish7 days
I redirect all out going dns requests to my self hosted DNS server.
Only one I can’t block is DoH. DoT is easily blocked and my firewall picks up on it.
- pHr34kY@lemmy.worldEnglish7 days
Chromecasts do that. I had to intercept port 53 on the router to fix it.
Realistically it doesn’t need to request the DNS record every time. It’s probably retrying over and over because you blocked it, otherwise it would just cache the result for a while.
I remember some huge number of blocked requests when I set up my pihole, but eventually they calmed down as devices gave up their retrying.
- zarathustrad@lemmy.worldEnglish7 days
Same for Roku, and worse now that they were bought out. Sorry grandma, the Roku is getting cut off. Lol
Similar for my Google nest, it’s the #1 host in number of daily requests in my network, around one every 500ms
Now it’s on it’s own vlan so there’s nothing that they can report on my network, but it’s really concerning that a thermostat calls home this often. It should be enough to do it once an hour to check the outside temperature and only if it’s enabled.v
- bedwyr@piefed.caEnglish7 days
What does that mean exactly? Like it’s trying to connect to where? Why?
I took mine out when I discovered from the log that it would randomly cause massive deauth and noise on my wireless network. All my stability issues vanished since.
- 7 days
I unplugged mine when it kept coming to life after hearing “Hey <any other fucking word under the sun>”. If all it did was act as an internet radio and set timers I’d still be using it.
- Geologist@lemmy.zipEnglish7 days
I permanently muted the mic on my home max speaker, but still use it for casting music, works well.
I do have a home assistant voice speaker for the timers though
- 7 days
Bugs happen. Here’s an LG coffee maker uploading 1TB in 10 days: https://www.tomshardware.com/networking/it-pro-says-his-parents-keurig-smart-coffee-maker-sent-1tb-of-data-over-their-wi-fi-in-10-days-it-saturated-an-access-point-on-its-own-but-he-says-most-of-the-traffic-never-left-the-home-network
Later in the X thread, Nomad acknowledged that the UniFi had not reported an actual 1TB upload, so he concluded it was mostly local junk data.
So not upload. Sounds like it could be local network tracking as has been demonstrated with LG TVs, repeatedly and continuously querying local network for information. I guess maybe with a bug in there if it’s that much data. Still, unclear what happened there and whether or what degree it was a bug.
- frongt@lemmy.zipEnglish7 days
All coverage of that incident says it was mostly LAN traffic. It was a bug in the network stack.
- 8 days
It’s just downloading the methods that work specifically for the psychology it learned you have. /Truthful sarcasm
Surveillance is only a small aspect of the threat, datamining that analyzes you and profiles you then creates algorithms based on your psychology to then move your life down paths that aren’t naturally your life path… Is a major threat. Also this isn’t new… This type of social manipulation has been happening since at least 1930s with analog methods. It’s probably why CIA and government helps fund datamining social media and datacenters.
- Brkdncr@lemmy.worldEnglish8 days
What are you going on about? This is a bug and the author of the article says as much.
- 7 days
CIA sending in folks to downvote on Lemmy? Hilarious. Youre 100% correct . its ALL for mass surveillance for civil unrest from the climate wars soon to ensue. All data centers are surveillance centers.
- echo@lemmy.todayEnglish8 days
Owning anything like this is like voting for Trump… you’re responsible for your stupid decisions and don’t get to claim you were taken advantage of.
