News for hackers. Stuff that matters.
Re:Taboola and Outbrain are merging to create a clickbait giant by dspillett on Tuesday October 08, 2019 @10:12AM (#21192499)
> hardware

It doesn't have to be real hardware: you can run pihole in a VM (KVM, Hyper-V, etc) on your local machine. It'll eat a bit of RAM of course, but it doesn't need a huge amount to serve one user.

This doesn't solve the setup time of course, and trouble-shooting time if something goes wrong.

For mobile I run OpenVPN at home: all my traffic when on on my phone provider's network or public/guest wifi goes down that including DNS request going to my pihole instance. This isn't perfect of course: there is still some setup and maintenance involved, and some networks block or significantly throttle VPN traffic (throttling can be worked around by running the VPN on port TCP443 if it is done by simple port based rules but that may mean having a spare IPv4 address to hand).

Re:Taboola and Outbrain are merging to create a clickbait giant by kevin_thibedeau on Tuesday October 08, 2019 @11:05AM (#21193058)
This is a really obtuse way to run a proxy server.
Re:Taboola and Outbrain are merging to create a clickbait giant by dspillett on Tuesday October 08, 2019 @12:55PM (#21194305)
My pihole isn't running on a "client" machine, though it is running on a VM on the home router/server just to keep it entirely separate to aid maintenance. A container would do the job too. I was just pointing out that the OP wouldn't need new hardware to set up pihole.

And in my case the VPN is not just for accessing my ad-/malware- blocking DNS resolver, but also for accessing other local resources and for general paranoia (nothing goes over the mobile network or public/guest WiFi unencrypted). Useful extra feature: because payment processors think I'm at home I'm bothered less by extra identity verification steps than I would be if my source address and therefore derived location changed regularly.

DNS traffic going through the VPN stops the network intercepting and forcing it through their resolver anyway (I'm looking at you, Sky) and means that I don't have to make my DNS resolver visible to the unwashed masses.

So I'm not just being obtuse. IMO, anyway.