News for hackers. Stuff that matters.
Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by ignoramous on Saturday January 14, 2023 @01:39AM (#34377865)
I happen to develop an open source, no-root, network monitor, and firewall for Android.

We let users block connections to IPs that have no corresponding DNS request. Of course, genuine reasons to connect directly to IPs exist, but not so much for installed apps.

Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by sureglymop on Saturday January 14, 2023 @03:03AM (#34378262)
What's the name of your tool/app?
Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by ignoramous on Saturday January 14, 2023 @03:10AM (#34378302)
Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by sureglymop on Sunday January 15, 2023 @06:36AM (#34388664)
Really cool! Thanks for sharing.
Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by lolinder on Saturday January 14, 2023 @05:37AM (#34379131)
Won't this stop working if DNS-over-HTTPS becomes the norm? There are good reasons to hope it does (looking at you, ISPs), but if it happens then you won't be able to differentiate.
Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by ignoramous on Saturday January 14, 2023 @10:34AM (#34381055)
To handle that scenario, we implemented a per-app network sandbox / isolation mode a few months back. An app is only allowed to connect to IPs one explicitly trusts for that particular app.

The other one is to use the web browser more (since the likes of Firefox have super effective content blockers baked in) and not install apps.

Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by twojacobtwo on Saturday January 14, 2023 @01:25PM (#34382566)
I just found your app a few weeks ago and it's exactly what I had been looking for in networking control on android. Thank you for making such a wonderful tool!

My only problem now is that android seems to only allow a single VPN 'tunnel'/connection, so I can't -so far as I know- simultaneously use your app with a dedicated VPN service like Mullvad. Is there any easy-ish way to get around that?

In my searching around, at least one person has suggested using something like insular/Island with all installed apps, then use the 'VPN' service on the non-insular side, but that to me seems to leave open all the 'system apps'.

I don't actually expect that you'd help some rando with this, but it's super cool to encounter a maker of an app that I love, so I thought I would ask on the off chance.

Re:GitHub – pi-hole/pi-hole: A black hole for Internet adver... by ignoramous on Saturday January 14, 2023 @03:08PM (#34383682)
That's a very kind thing to say. Thanks.

> I just found your app a few weeks ago...

Curious: From reddit, or hacker news?

> I can't -so far as I know- simultaneously use your app with a dedicated VPN service like Mullvad.

If your VPN app supports on-device SOCKS5 proxy, then that's one way to chain Rethink (check Settings) to it. Rethink, for example, can chain up to Orbot (Tor as a proxy over on-device SOCKS5) just fine.

> Is there any easy-ish way to get around that?

If not, wait until we release WireGuard integration. It has been complete for a good part of 5 months now, but we never built a UI for it and now in the meantime upstream impl we rely on (both gVisor/netstack and WireGuard) has changed, and we need to pick those changes up. Expect it to happen in a month or two, along with the UI bits.