News for hackers. Stuff that matters.

A comment on Show HN: Encourage children to use the net more 4 learning with Pihole 5beta. Parent comment

Re:Show HN: Encourage children to use the net more 4 learnin... by tbyehl on Friday March 13, 2020 @04:39AM (#22565713)
A decent router can prevent that from being effective.
[ Parent | on HN ]
Re:Show HN: Encourage children to use the net more 4 learnin... by nicolaslem on Friday March 13, 2020 @04:43AM (#22565727)
Until DNS over HTTPS gets widespread adoption.
[ Parent | on HN ]
Re:Show HN: Encourage children to use the net more 4 learnin... by Iwillgetby on Friday March 13, 2020 @06:53AM (#22566273)
Glad you brought this up. My day job involves finding malicious network traffic. DOH is really easy to detect because in suricata or bro/zeek you simply match new outbound connections with DNS responses. If you don't get a matching pair then you need to investigate why you have outbound traffic that is bypassing your DNS server. Note this is alpha stage code. I run this at home on all of my outbound traffic.

https://www.reddit.com/r/pihole/comments/embh63/i_made_a_thi...

Original.. https://github.com/morsgiathatch/suricata_edits/tree/master/...

Fork.. https://github.com/1stOctet/suricata_edits/tree/master/DOCKE...

[ Parent | on HN ]
Re:Show HN: Encourage children to use the net more 4 learnin... by ryukafalz on Friday March 13, 2020 @09:40AM (#22567146)
Wouldn’t a local DNS cache look the same? If you’re on a machine running systemd-resolved for example.
[ Parent | on HN ]
Re:Show HN: Encourage children to use the net more 4 learnin... by tbyehl on Saturday March 14, 2020 @11:43AM (#22576056)
DoH is the devil.
[ Parent | on HN ]