News for hackers. Stuff that matters.
Re:Malaysia started mandating ISPs to redirect DNS queries t... by buro9 on Saturday September 07, 2024 @02:34AM (#41471935)
DoH helps us against governments, but doesn't help us against advertisers, i.e. what stops Google or an app maker talking to their own DNS endpoint via DoH and avoiding local measures to block malware and tracking.

DoH is a double edged thing, advertisers are a more present and pervasive threat to most than their own government

Re:Malaysia started mandating ISPs to redirect DNS queries t... by chmod775 on Saturday September 07, 2024 @02:43AM (#41471985)
You could argue against seatbelts the same way: seatbelts can cause abrasion of the skin during everyday driving, which is a more present and pervasive threat to most than car crashes.

In both instances it turns out that the difference in magnitude of those threats makes the direct comparison misleading.

Re:Malaysia started mandating ISPs to redirect DNS queries t... by FireInsight on Saturday September 07, 2024 @09:28AM (#41473834)
I've never heard of seatbelt skin abrasion, but car crashes are an exceptionally commom danger.
Re:Malaysia started mandating ISPs to redirect DNS queries t... by logicchains on Saturday September 07, 2024 @02:39AM (#41471960)
If by most people you mean most people globally, governments are absolutely a bigger threat; only a minority of the world's population live in countries with benevolent governments who don't censor the internet to hide the government's misdeeds.
Re:Malaysia started mandating ISPs to redirect DNS queries t... by whatwhaaaaat on Saturday September 07, 2024 @01:26PM (#41475070)
don’t forget the us federal government paid twitter and Facebook to remove speech it didn’t like (speech that turned out to be true).
Re:Malaysia started mandating ISPs to redirect DNS queries t... by megous on Saturday September 07, 2024 @05:14AM (#41472651)
Community based FOSS OSes/distros stop all this and avoiding the corporate SW/services.
Re:Malaysia started mandating ISPs to redirect DNS queries t... by HeatrayEnjoyer on Saturday September 07, 2024 @06:14AM (#41472904)
How do I install a Foss OS to my TV or my kid's tablet? And without breaking DRM attestation?
Re:Malaysia started mandating ISPs to redirect DNS queries t... by BlueTemplar on Saturday September 07, 2024 @07:06AM (#41473175)
If you use services requiring DRM, you are one of the bad actors, why should we care about what you think ?
Re:Malaysia started mandating ISPs to redirect DNS queries t... by HeatrayEnjoyer on Monday September 16, 2024 @09:21AM (#41555789)
Everyone using Netflix is a bad actor?
Re:Malaysia started mandating ISPs to redirect DNS queries t... by BlueTemplar on Tuesday September 17, 2024 @02:55AM (#41565023)
Yes, they're definitely assholes.

For instance : https://boingboing.net/2012/02/23/microsoft-google-and-netfl...

(But «bad actor» was perhaps a bad choice of words, since someone buying devices or using media with DRM is of course not as evil as someone pushing them. But they are engaging in bad behaviour nonetheless.)

Re:Malaysia started mandating ISPs to redirect DNS queries t... by megous on Saturday September 07, 2024 @09:44AM (#41473911)
Pinetab2 as a tablet, or some x86_64 tablet of which there are many.

For TV, use it as a dumb display for some FOSS TV box, running something like libreelec.

As for DRM attestation, that's not the responsibility of anyone but the DRM vendor, so ask them.

Re:Malaysia started mandating ISPs to redirect DNS queries t... by dspillett on Saturday September 07, 2024 @06:08AM (#41472889)
> DoH helps us against governments

And bad ISPs⁰.

And a small subset of MitM attacks.

> advertisers are a more present and pervasive threat to most than their own government

That is true for me¹ but I'd not agree with "most" globally. And while stalky corporates and the people who will get hold of my data subsequently due to lax security are my main concern, there are other ways to mitigate them. Less convenient ways, sure, and I loose a security-in-depth step of ashtray using them anyway, but I consider that inconvenience for me² to be less of an issue than the more serious problems DoH might mitigate for others.

----

[0] some people don't have a simple "just go elsewhere" option

[1] relatively speaking: I don't consider my government that trustworthy, and will do so even less in future if the Tories get back in without major changes in their moral core, and I'm sure many Americans feel similarly if they consider the implications of Project2025.

[2] both as an end user wanting to avoid commercial stalking and as someone who sometimes handles infrastructure for a B2B company that uses DNS based measures as part of the security theater we must present to clients when bidding for their patronage

Re:Malaysia started mandating ISPs to redirect DNS queries t... by tzs on Saturday September 07, 2024 @10:50AM (#41474223)
An ISP could effectively bypass DoH. Block outgoing requests to IP addresses that the ISP has not whitelisted, and automatically whitelist IP addresses that were obtained from non-DoH DNS requests.