Privacy Badger Is Changing to Protect You Better

Re:Privacy Badger Is Changing to Protect You Better by heresie-dabord on Thursday October 08, 2020 @09:35AM (#24718964)

Given the pervasive commercial surveillance system, a user needs to have several protective layers just to browse the WWW:

a browser with security extensions (although a good browser should be built with security as a design principle, not as an "add-on")

ESNI and DoH (even though Cloudflare can see the aggregate)

DNS caching and blocking in the subnet

iptables/nftables blocking of undesirable IP address ranges by the router

edit: It's safer to leave the dysfunctional WWW alone and use only RSS.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by tremon on Thursday October 08, 2020 @10:58AM (#24719666)

Disagree on DoH though, because it defeats DNS caching and blocking in the subnet. Plus, many people trust their own provider more than yet another US corporation.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by tptacek on Thursday October 08, 2020 @11:08AM (#24719779)

It defeats DNS caching and blocking in the "subnet" because for most US users the DNS provider is an adversary, and trusting it would be a mistake.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by sildur on Thursday October 08, 2020 @01:33PM (#24721540)

But there is an entire world outside the US. I trust my local ISP way more than a US corporation.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by tptacek on Thursday October 08, 2020 @01:45PM (#24721674)

That's fascinating, but now you know why people in the US are quick to embrace DoH in its default configurations. And, of course, nothing ties DoH to major US corporations. You can DoH to a NUC in your cousin's bedroom closet.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by SAI_Peregrinus on Thursday October 08, 2020 @03:13PM (#24722667)

I run DoH on a raspberry Pi with piHole. And then DoH from it to Quad9's servers. DNS blocking, with DoH.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by tptacek on Thursday October 08, 2020 @03:18PM (#24722735)

You can also just run Pi-Hole directly on something like Fly.io, and DoH to it from your local machine. :P

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by musicale on Friday October 09, 2020 @01:06AM (#24727022)

Interesting - I assume their free tier is enough to run this.

However, local caching on the Pi might yield faster lookup time.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by judge2020 on Thursday October 08, 2020 @12:00PM (#24720376)

They're all only useful in certain circumstances.

[ Parent | on HN ]

Re:Privacy Badger Is Changing to Protect You Better by Pet_Ant on Thursday October 08, 2020 @10:43AM (#24719504)

> It's safer to leave the dysfunctional WWW alone and use only RSS.

Is their any evidence that Google killed Google Reader because it interfered with their Ad/user-tracking metrics business?

[ Parent | on HN ]