Walmart router, others on Amazon, eBay have hidden backdoors to control devices

Re:Walmart router, others on Amazon, eBay have hidden backdo... by paranoidrobot on Monday November 23, 2020 @06:09PM (#25193013)

PiHole is for DNS blocking.

So if say your TV calls out to backdoor.example.com - then PiHole can block it.

If instead it calls out to 1.2.3.4 (i.e no DNS lookup) - then PiHole won't block it for you, you'd have to instead set up controls on the firewall/router/etc to filter traffic.

[ Parent | on HN ]

Re:Walmart router, others on Amazon, eBay have hidden backdo... by rasz on Tuesday November 24, 2020 @01:50AM (#25195989)

recycling my comment from Mozilla DoH story:

Wanted: Firewall blocking all traffic directed at IP addresses not obtained from OS DNS resolver.

aka dynamic application level FQDN Egress Filtering. Mayor Cloud providers (aws, azure) and bigger firewalls (fortinet, cisco, paloalto) already offer ~half of what I want.

I want a little deamon that listens for DNS queries/replies and modifies firewall rules accordingly.

[ Parent | on HN ]

Re:Walmart router, others on Amazon, eBay have hidden backdo... by pixl97 on Monday November 23, 2020 @08:26PM (#25194177)

Just wait till all the smart devices come with a preloaded DoT/DoH list.

[ Parent | on HN ]

Re:Walmart router, others on Amazon, eBay have hidden backdo... by shagie on Monday November 23, 2020 @10:21PM (#25194930)

That would be this thread - https://mailarchive.ietf.org/arch/msg/dnsop/WCVv57IizUSjNb2R... and this post https://news.ycombinator.com/item?id=19170671

[ Parent | on HN ]