News for hackers. Stuff that matters.
Re:Pi-hole 5.0 by ciarannolan on Sunday May 10, 2020 @07:03PM (#23137131)
Is there an advantage in sending all of your DNS queries to a for-profit company vs. setting up your own Pi-hole?

Their privacy policy seems legit[0] but why trust them at all when Pi-hole is an option?

[0] https://nextdns.io/privacy

Re:Pi-hole 5.0 by dogma1138 on Sunday May 10, 2020 @07:28PM (#23137285)
No additional hardware required, you can use it to provide some protection to your family without having to worry about remote access to the Pi-Hole to configure things, works for your devices on the go, cheaper than running pi-hole in the cloud yourself unless.

Pricing wise it’s over 2 years worth of service for the price of an original Pi, a good SD card and a case.

The only circumstances where Pi Hole is unquestionably superior is if you are on a network that redirects all DNS requests there are still some ISPs that do that however if you are on such network you probably want to either get off it ASAP or use a VPN.

Re:Pi-hole 5.0 by thecureforzits on Sunday May 10, 2020 @08:18PM (#23137579)
FWIW, pihole is not tied to any particular hardware. For example:

https://github.com/pi-hole/docker-pi-hole

Re:Pi-hole 5.0 by zymhan on Sunday May 10, 2020 @10:39PM (#23138388)
You can also just install it on Debian. I have it in a VM.

Their install script is at https://install.pi-hole.net

Docs: https://docs.pi-hole.net/main/basic-install/

Re:Pi-hole 5.0 by dogma1138 on Sunday May 10, 2020 @10:16PM (#23138255)
I know I mentioned you can run it in the cloud/hosted, however for most home installations unless you have a dedicated VM server that is always on it does requires additional hardware.

I run pi-hole on my qnap nas at home since it’s always on anyhow.

Re:Pi-hole 5.0 by lostlogin on Sunday May 10, 2020 @09:00PM (#23137848)
And in addition you can do other stuff on the pi/device.

One should always have a spare Pi around.

Re:Pi-hole 5.0 by GekkePrutser on Monday May 11, 2020 @01:11AM (#23139092)
Yeah that docker is great! Though it lags behind a bit, it's still on 4.2.2.
Re:Pi-hole 5.0 by promofaux on Monday May 11, 2020 @03:14AM (#23139621)
v5.0 image was released minutes after the main v5.0 release. I've personally not tried :latest, but I am told that works. I prefer to use named tags
Re:Pi-hole 5.0 by GekkePrutser on Monday May 11, 2020 @04:46AM (#23140107)
I don't think it's live on latest. I just did a fresh pull again (I did it a couple hours ago too) but I don't see the new bar graphs nor the local DNS option.

Edit: Oops I didn't wipe the container. Works now!

Re:Pi-hole 5.0 by ciarannolan on Sunday May 10, 2020 @07:40PM (#23137349)
Interesting, thanks!

I've been thinking about running a Pi-hole at home and redirecting all my phone traffic through it via WireGuard.

Re:Pi-hole 5.0 by GekkePrutser on Monday May 11, 2020 @01:23AM (#23139136)
I do exactly that, though I run my VPN in the cloud (a scaleway instance which is only 3 euro per month). Using algo for the vpn: https://github.com/trailofbits/algo . I can highly recommend it! Though I had some issues with play store updates being blocked but that's resolved now. Unfortunately google play services are essentially one big spyware collection so it makes sense for it to block them.

I also had to manually provision my Android phone on IKEv2 (ipsec), Algo used to provide a strongswan config but unfortunately they dropped this in favour of wireguard. But you can still set it up manually (and on Samsung devices you don't even need strongswan). Wireguard is faster, yes, but my work blocks pretty much every port they don't know, except IKEv2/ipsec because many contractors use it to connect to their work :)

Re:Pi-hole 5.0 by dastx on Sunday May 10, 2020 @07:21PM (#23137244)
Also, unless you go through the trouble of setting up unbound, your requests would need to go to an upstream server anyway, so might as well send them to one with the best privacy policy.
Re:Pi-hole 5.0 by jzig on Sunday May 10, 2020 @07:09PM (#23137161)
max laziness and convenience ;)
Re:Pi-hole 5.0 by iou on Sunday May 10, 2020 @07:15PM (#23137200)
^^ this

though they do also have some additional security protections for typosquatting, safebrowsing, homoglyphs, threat-intelligence which is also nice. All of which could be done on a pihole though not out of the box when I last used it ~2 years ago.

Re:Pi-hole 5.0 by FraKtus on Monday May 11, 2020 @05:27AM (#23140327)
I use a smart DNS to unblock streaming web sites that are geo-locked.