5 ms·
They appear to not be trustworthy to be on our networks - so we should: 1. Not join them to our networks 2. Stop buying 'Smart TV's' 3. Get panels and a smart
by bitlevel 6y ago
They appear to not be trustworthy to be on our networks - so we should:
1. Not join them to our networks
2. Stop buying 'Smart TV's'
3. Get panels and a smart box that you can control
I'm lucky enough to be able to direct ALL DNS through my router first. Nothing gets out without my say so. Not everyone has that capability, sadly, with home routers.
The solution provided by the OP is a solid one - another would be to purchase a decent router (such as a Mikrotik) and learn how to use it - much more powerful device for the same price, or sometimes lower, as a regular 'home' router.
- Dahoon 6y ago>I'm lucky enough to be able to direct ALL DNS through my router first Even DNS over HTTPS? Do you do packet inspection? Just blocking ports doesn't do much any more. I run an IDS/IPS and it blocks lots of DoH to Google. Apple devices are even worse.
- sbarre 6y agoWould you mind sharing a bit more detail on your setup?
- ianai 6y agoI’m interested too.
- low_key 6y agoI'm not sure what the commenter's setup is, but I have one that (at least mostly) achieves the same thing. It is a combination of a few things: 1. Redirect all outbound DNS traffic to your own local DNS server (as described in the link in this post) 2. Return NXDOMAIN for well-known DoH domains [1] (as well as "use-application-dns.net" for well-behaving software like Firefox [2]) 3. Block traffic to well-known DoH providers by destination IP address [1] [1] https://github.com/bambenek/block-doh https://github.com/bambenek/block-doh [2] https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https https://support.mozilla.org/en-US/kb/configuring-networks-di...
- bitlevel 6y agoYep, pretty much the above - I have a combination of rules that control all traffic. Only the router is allowed to use port 53 outbound - all other traffic is redirected using NAT to the router's DNS server. I mentioned Mikrotik previously - I use them myself.
- bitlevel 6y agoNot DNS over HTTPS currently, although investigating a way to MitM the connections with a proxy.
- mikeryan 6y agoIt’s going to be really difficult to not get a smart tv pretty soon. You can, of course not hook it up to the internet. But pretty much all of the current TVs (particularly the good ones with nice displays) are going to be “Smart”. One reason for the recent huge price drops on TVs is the ability to subsidize the price by selling viewing data. It’s the new normal in the CE world.
- Spivak 6y agoYeah the only thing that can stop this trend at this point is regulation unfortunately. Unless you make it a rule that TV manufacturers can’t do this putting them all on a level playing field the ones that do will always be ahead on price.
- twblalock 6y agoThis is all a result of consumer preference -- dumb TVs were once the majority of the market. Smart TVs have taken over because people prefer them. Regulation should not be used to override clearly demonstrated consumer preferences or to force companies to produce products that few people want.
- kzrdude 6y agoRegulation should intervene when smart tvs come with non-obvious downsides like data collection. Consumers don't get informed and have no possibility of making an informed choice here.
- twblalock 6y agoPeople know about data collection. They don't care. The first thing we need to do to have productive conversations about privacy with non-technical people is to stop pretending they are ignorant or unable to understand trade-offs. People know that their online activity is tracked. They know that their Alexa devices record their conversations. All of this has been on the news enough times that you'd need to be living in a cave to be unaware of it. People know this, and they have chosen to purchase these devices anyway. Maybe it's not because they are stupid and need the state to protect them -- maybe they are capable of evaluating trade-offs and their choices ought not to be second-guessed by people who think they know better.
- scarface74 6y agoSo which “smart box” would that be? Roku? Where the CEO outright said that they aren’t in the hardware business and they are trying to monetize via ads? Google? Need I say more Amazon Fire devices? See above with Google AppleTV? Sure I have a couple. They aren’t trying to monetize with advertising. But the HN crowd is anti-Apple.
- LeoPanthera 6y agoHN not liking something doesn't make it a bad choice. Kodi running on a Pi or some other low power computer is probably HN-friendly, although the usability isn't even close to as good as the Apple TV.
- myrandomcomment 6y agoNo Netflix or Amazon on Kodi. While I have a NAS with my media on it that Kodi worked fine on the need to open a browser and need for a keyboard and mouse became to much of a pain. I switched everything to AppleTV which had the issue of not being able to mount the NAS. Lucky there is a Kodi "port" to the AppleTV in the App Store called Mr.MC for like $8 that is pretty much Kodi with built in support for NFS, SMB, etc. AppleTV is the perfect box for this to be honest.
- DoingIsLearning 6y agoIn terms of usability OSMC is in my opinion a lot better than all the smart tv UI's I've seen (and you can definitely run it from even older pi hardware) You can also chromecast and airplay pretty smoothly as well.