rndomsrmn

no profile record

comments

·vor 5 Jahren·discuss

Websites that use CNAME to forward their main domain to some tracking company, basically give their entire domain away, I don't see how that is a good secure way to track your users..

DNSCrypt-proxy (and even pihole these days I believe) are actually capable of blocking forwarded CNAME requests. Setting up such system for network wide adblocking is not complicated at all, see: https://github.com/notracking/hosts-blocklists/wiki/Install-...

rndomsrmn

·vor 5 Jahren·discuss

https://github.com/notracking/hosts-blocklists

Use this for network wide blocking of all sorts of virtual garbage. Not only for safari, but all your locally connected devices.

rndomsrmn

·vor 5 Jahren·discuss

You can get even better coverage with the NoTracking lists (dnsmasq/unbound or dnscrypt-proxy) https://github.com/notracking/hosts-blocklists

They focus not only on tracking but also malware prevention, where possible via dns filtering.

Pi-Hole still does not properly support wildcard filtering, only via regex but that is not really efficient (requires tons of resources).

rndomsrmn

·vor 6 Jahren·discuss

You might want to consider checking for hosts listed in https://github.com/notracking/hosts-blocklists

This is an excellent merged blocklist, with public whitelist (oisd is fully closed, no insight in what is whitelisted and why, also causing more false positives..)

rndomsrmn

·vor 8 Jahren·discuss

Or https://github.com/notracking/hosts-blocklists that uses a dnsmasq feature to block full domains.