72% of smart TVs and 46% of game consoles hardcode DNS settings

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by rsync on Saturday December 05, 2020 @04:30PM (#25318579)

"This only works for the subset of devices which use the local DNS. If they use any of the well-known techniques to avoid that filtering it's completely ineffective."

If you also block all port 53 after allowing your own resolver ... you may have some headaches with devices that refuse to use the DHCP provided resolvers but you know they aren't going to other resolvers.

That kind of control is what DoH breaks and I'd love to find an elegant (non-MITM proxy) solution for it ...

[ Parent | on HN ]

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by acdha on Saturday December 05, 2020 @04:33PM (#25318608)

There isn’t an effective solution for a device which ignores local network policy other than returning it so the manufacturer pays the cost of designing a bad system.

[ Parent | on HN ]

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by dotancohen on Sunday December 06, 2020 @05:07AM (#25322467)

With the side effect of your local vendor refusing to do further business with you, "the problem customer", with your "unreasonable demands" and technobable.

[ Parent | on HN ]

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by judge2020 on Saturday December 05, 2020 @07:35PM (#25319815)

DNS over HTTPS has been a thing since before IETF standardized it, the technique was just in the form of a non-standardized API running on some benign domain.

[ Parent | on HN ]

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by fiddlerwoaroof on Saturday December 05, 2020 @04:37PM (#25318642)

I use iptables on an openwrt router to redirect all traffic on port 53 to my own DNS

[ Parent | on HN ]