Hacker News Reader

Your network exposure is via the windows network stack first, then Firefox.

Most of the CVEs I've seen for that stack are in DNS, and Firefox's DNS-over-HTTPS implementation bypasses the OS DNS almost completely in sensible configurations.

The entire system is doing DNS queries though, like all that phoning home

Reply on news.ycombinator.com