News for hackers. Stuff that matters.

A comment on It’s Still Stupidly, Difficult to Buy a ‘Dumb’ TV. Parent comment

Re:It’s Still Stupidly, Difficult to Buy a ‘Dumb’ TV by mschuster91 on Friday April 15, 2022 @10:58AM (#31040974)
Simple: most router firewalls only block traffic that has source:<IP of device> and destination:<anything in the Internet>, but traffic from source:<IP of device> to destination:<IP of router, IP range of home network> will be allowed.

That is enough for the device to emit a DNS query like "pbs.12345.metricservice.example.com" to notfiy some tracking service that the device with serial 12345 just switched to a channel labeled "PBS". The router will resolve that name record at the DNS server for metricservice.example.com, which gets the request and logs it away.

[ Parent | on HN ]
Re:It’s Still Stupidly, Difficult to Buy a ‘Dumb’ TV by chrisjc on Friday April 15, 2022 @11:56AM (#31041678)
Are you suggesting that devices connected to a network that has blocked their MAC can still make DNS requests?
[ Parent | on HN ]
Re:It’s Still Stupidly, Difficult to Buy a ‘Dumb’ TV by mschuster91 on Friday April 15, 2022 @09:08PM (#31048043)
How many consumer routers go that length? For most of these, as long as they are on the network, they can communicate over DNS, using the router as "middleman".
[ Parent | on HN ]