News for hackers. Stuff that matters.

A comment on iOS 11 Security [pdf]. Parent comment

Re:iOS 11 Security [pdf] by walterbell on Saturday January 13, 2018 @05:12PM (#16141715)
What's a good ad-blocking VPN?
[ Parent | on HN ]
Re:iOS 11 Security [pdf] by ce4 on Sunday January 14, 2018 @03:14AM (#16143300)
On Android it's DNS66 [2] or NetGuard [1] (only the github version has hosts based blocking) for me. Both are open source and act as a fake vpn to intercept traffic locally on your device. No Cloud service needed.

[1] https://www.netguard.me/

[2] https://f-droid.org/en/packages/org.jak_linux.dns66/

[ Parent | on HN ]
Re:iOS 11 Security [pdf] by eropple on Sunday January 14, 2018 @02:25AM (#16143220)
I find Block This! to be pretty good on my Android devices. It's not actually a VPN--it's a fake VPN that just runs a host filter and dumps ad traffic.

They have a build on the web; I compiled my own off of their source, though, so can't vouch for that.

[ Parent | on HN ]
Re:iOS 11 Security [pdf] by nyolfen on Saturday January 13, 2018 @10:20PM (#16142661)
on ios, the ($3) app 'adblock' is a local vpn with domain-based adblocking rules -- in practice it's essentially an adblock hosts file, and doesn't take nearly as much battery
[ Parent | on HN ]
Re:iOS 11 Security [pdf] by yumraj on Saturday January 13, 2018 @05:34PM (#16141784)
pi-hole, with openvpn. self-hosted. DigitalOcean has great guides, which work with any linux vps.
[ Parent | on HN ]
Re:iOS 11 Security [pdf] by haydenmk2 on Saturday January 13, 2018 @07:51PM (#16142274)
this kills the battery though
[ Parent | on HN ]
Re:iOS 11 Security [pdf] by yumraj on Saturday January 13, 2018 @08:49PM (#16142401)
Does it? I've been using it on and off, on Android. I have set it to disconnect when screen is off. The impact on battery does not seem to be drastic, though it is difficult to do real side by side comparison. Another option is to only use it on demand, while browsing.

Is there any other option?

[ Parent | on HN ]
Re:iOS 11 Security [pdf] by walterbell on Saturday January 13, 2018 @07:59PM (#16142295)
I wonder why. Storage disk encryption does not, neither does SSL. Why are VPNs using much more power on mobile?
[ Parent | on HN ]
Re:iOS 11 Security [pdf] by joecool1029 on Saturday January 13, 2018 @09:57PM (#16142587)
>Why are VPNs using much more power on mobile?

It can leave connection open which prevents many cellular radio technologies from falling into lower power state.

Really depends on how optimized the cell modem is and how often keepalive packets are being sent by the VPN. Honestly, I haven't seen too much of a battery hit on ipsec VPN on the iphone SE. However, my older android phones used to get shredded on OpenVPN.

EDIT: If anyone's asking, I use the algo.sh script to deploy ipsec vpn on digitalocean (has option to enable adblocking too) https://github.com/trailofbits/algo.

[ Parent | on HN ]
Re:iOS 11 Security [pdf] by ce4 on Sunday January 14, 2018 @03:31AM (#16143337)
Wireguard should alleviate exactly that.

It's designed to not use persistent connections, keepalives may have to be enabled in case of nat traversals though (to enable incoming packets).

https://www.wireguard.com/quickstart/

[ Parent | on HN ]