Hacker News Reader

Hacker News

Comment by cheschire | Hacker News Reader

Full thread

cheschire

https://docs.pi-hole.net/docker/

View on HN

Pi-Hole only works when the tracking / ad scripts are hosted from different domains than the actual content.

Don't worry, when you blackhole the entire tiktok domain, you'll still be able to use grindr.

Or did you still want to be able to view tiktok?

Sorry. Can't help you there. Or can I? https://www.torproject.org/download/ or https://chromewebstore.google.com/detail/proton-vpn-fast-sec...

TikTok will de-anonymize you and connect you back to the ad networks in days, speaking as someone who tried really, really hard to not get it to do that.

They probably have the most sophisticated fingerprinting ever created.

Yep! And luckily Tor Browser works pretty hard at defending against that. It even goes so far as to box the rendered page resolution so it cannot be connected to the same resolution as your main browser.

But you can take first steps by using a simple dns proxy to make things more difficult.

Honestly that probably makes it easier to fingerprint you. How many people do you think actually use Tor? Instead of needing to identify you from millions of users, now they just need to identify you from the five or so Tor users

I don't mean that, I mean behavior. The algorithm that is TikTok is running a test fingerprinting you with every video shown. It's like stylometry on steroids.

> Don't worry, when you blackhole the entire tiktok domain, you'll still be able to use grindr.

Grindr can still sell your data.

It was a response to same-origin tracking. I didn’t claim grindr would not sell your data.

People deserve privacy even if they aren't tech savvy enough to use pi-hole, even when they aren't on a network they control, even if they don't know their privacy is under attack.

Highly recommend people check out this simple alternative. It's like a better, modern dnsmasq.

https://github.com/AdguardTeam/dnsproxy

Setting up a whole-home adblocking solution takes a few minutes with pi hole, and it's got a very functional web interface for actions such as unblocking specific sites for specific systems on your network.

That dns proxy looks intriguing but looks like quite a bit different from the simplicity of pi hole.

dnsproxy is a single binary that does everything, very simple.

My nontechnical wife isn't going to care it's a single binary when I remove the PiHole web interface that she's used to using on the odd occasion she needs to disable blocked for a bit (for example).

Reply on news.ycombinator.com