You wouldn’t download a home
So Google uses something called “federated learning” which is not as fun as it sounds. It’s where they load a small model onto your device, train it on all your data, then send the resulting training data back to headquarters.
So it’s totally cool! Because your actual PII never leaves your device! Just everything about you statistically that might be useful to advertisers or governments! Really, whoever can pay!
Why does anyone willingly use these spying devices on themselves?
Tbf there isn’t much in the voice activated smart speaker space. If I could just program some speech to text abstraction and link it to automations I would. None of the solutions really seem mature enough.
I genuinely don’t understand the point. I’ve gone my whole life without smart speakers and voice commands. Seems like laziness at the cost of privacy.
Because I haven’t built replacements for the HomePods yet.
the average person consumes mindlessly as lomg as their base needs are met
Proving once again that the average person is stupid
When I setup pihole, the google home speakers I had were making dns requests something like 20k times a day. More than pretty much every other device on my network.
I removed them all after that.
Yup, me too. It’s why I made this:
Same for Roku, and worse now that they were bought out. Sorry grandma, the Roku is getting cut off. Lol
I’m surprised it didn’t just have google’s DNS hardcoded to bypass your pihole.
That ought to be illegal.
(No, seriously: disobeying DNS the owner set by DHCP ought to count as “exceeding authorized access” under the CFAA.)
Unfortunately the monkey’s paw would curl here and using DNS other than that provided by your ISP would become illegal.
(I know there’s a difference between your devices using their network to access the internet and your “purchased” (licensed software running on) your device using your network to access the internet - but the monkey doesn’t care)
Counter point on that, that might affect the legality of DNS over HTTPS
No, because the law cares about intent, not technical details. Having my property do DNS over HTTPS because that’s what I, the owner, wanted is fine; having my property do DNS over HTTPS because that’s what some non-owner entity wanted against my will as the owner is not.
Rather: they are free to do protocol negotiation with the DNS server I supply. If it speaks DoH, go for it.
They do, but thankfully with pfSense you can do DNS overrides with firewall rules to force all network devices to use local DNS, blocking everything else.
https://dominetec.com.br/en/redirect-all-dns-requests-to-pfsense-router
Neat! Trying this in a few minutes. Be lovely having everything go through my local Pihole VM.
next move is theirs… knight to queen’s dns-over-https
There are several DoH IP lists on github. Find one that is staying updated and use it as an alias to block them all
Chromecasts do that. I had to intercept port 53 on the router to fix it.
DNS over ssl.
I redirect all out going dns requests to my self hosted DNS server.
Only one I can’t block is DoH. DoT is easily blocked and my firewall picks up on it.
Could you block DoH entirely on the network level and cause it to fallback? I guess you’d have to have a list of common DoH IP addresses to block.
You have the destination IP to work with, thats it. Otherwise it just looks like any other HTTPS traffic.
I guess if you uplpaded your own root CA cert tgen you could man-in-the-middle for deeper packet inspection.
Or, i guess, try using eMudhra’s compromised private keys and hope the clients havent been updated yetRight, I guess as more DoH servers become available, it’ll be harder to track, but you could intercept and blackhole any HTTPS traffic to
one.one.one.oneand other popular servers to have them fallback.Yeh, exactly. “You have the ip to work with”
one.one.one.oneisnt an http/ request, its a dns lookup.
If it was an http/s request to1.1.1.1then it could be blocked. Also, super cheap/easy to proxy
Anyone expecting any different is an idiot frankly.
Similar for my Google nest, it’s the #1 host in number of daily requests in my network, around one every 500ms
Now it’s on it’s own vlan so there’s nothing that they can report on my network, but it’s really concerning that a thermostat calls home this often. It should be enough to do it once an hour to check the outside temperature and only if it’s enabled.v
They do this outrageous download numbers just to hide the amount they upload at the same type.
I took mine out when I discovered from the log that it would randomly cause massive deauth and noise on my wireless network. All my stability issues vanished since.
I unplugged mine when it kept coming to life after hearing “Hey <any other fucking word under the sun>”. If all it did was act as an internet radio and set timers I’d still be using it.
They all do… 0 surprise.
