Re:Smart TVs sending sensitive user data to Netflix and Face...
by oger on Thursday September 19, 2019 @01:28AM
(#21013542)
A Pi-Hole is good to have in every household. Takes minutes to set up and makes sure that queries to unwanted domains end up in the land of /dev/null
Re:Smart TVs sending sensitive user data to Netflix and Face...
by sjwright on Thursday September 19, 2019 @04:02AM
(#21014263)
A pi-hole only works against adversaries that rely upon DNS, or haven't been coded to connect directly to "trusted" public DNS servers.
(I'm almost astonished that advertising networks haven't switched to using raw IP addresses everywhere.)
Re:Smart TVs sending sensitive user data to Netflix and Face...
by TremendousJudge on Thursday September 19, 2019 @11:43AM
(#21017266)
You could probably very easily make a list of the "evil" IP addresses if that happened
Re:Smart TVs sending sensitive user data to Netflix and Face...
by tlavoie on Friday September 20, 2019 @01:45PM
(#21029334)
You can combine approaches of course. My main in-home DNS, per the DHCP settings on the wi-fi, is a Pi-Hole. Secondary DNS is the pfSense firewall, so nothing's dead in the water if the Raspberry Pi falls over for some reason.
The firewall has the same DNS block-lists as the Pi-Hole, but also has subscription lists of IPs to avoid. Most of those are spammers or malware, but can include whatever other category of malfeasance you desire.
E.g. Some TVs will honor wifi off setting. Or alternatively setting the TV to use the Ethernet port.
Or if it needs something on the other end, set up old underclocked Raspberry Pi as a basic router/DHCP server that connects to nothing; power it with TV's USB port.
If you've got a fancy router, connect it to your network with a fixed IP and firewall deny all packets from/to its IP.
If you've got a fancy AP, set up an alternative SSID that connects to an unused VLAN or otherwise routes to nowhere.