It was hyperbole to make a point. If you don’t care enough about your privacy to pick a different game or learn a different set of creativity tools, maybe you don’t really care about privacy.
if you set up a pi-hole you aren’t sending any data to Microsoft because you are using Linux though… unless you are talking about server in which there are devices running Windows…
You can totally set it up so that pi-hole is your dhcp/dns server and it will catch any device on your network, even phones and windows machines. I block 60% of the shit coming out of my network.
Some shit bag devices (Chromecast were the first I knew about) started hardcoding DNS server addresses and/or using DoH. There are ways to capture those too, I believe.
I think the forum post I linked in this thread covers that. But honestly fuck those devices. Phantasy Star Online does this with the executable, and editing the server string fucks up the offsets if it isn’t the exact same length as Sega’s original server. Pain in the ass.
Last I checked mine was at almost 80%. For a while there I was getting a shitton of traffic from outside that was getting blocked, which lead to a 99% reject rate, though.
Not sure what’s going on with my new room mate’s internet, but yeah that was a wild month of trying to get that all under control
At a firewall level, no. Any process that will get you OS info would also allow you to get the IP.
Edit: Unless you’re doing it before a DHCP lease assignment, but I’m pretty sure you can’t use the MAC to gain any system info without software being installed on the computer.
But if the purpose is to block windows from ever communicating on the network, what you could do is assign an IP for a subnet that can’t talk out, get the OS, then assign a new IP on your main network for non-windows devices.
I’m not sure. Maybe. It would depend if all clients connected automatically use the default profile or if they have to be added to the clients list (in which case you would need IP). I haven’t looked into that actually.
Set up a pi-hole, cast all requests going to those domains down into tartarus. Then we can go after the data centers.
Run Linux on your desktop. Unless you NEED Adobe or Fortnite, in which case, you deserve to be spied on.
Nobody deserves to be spied on. Get a grip.
It was hyperbole to make a point. If you don’t care enough about your privacy to pick a different game or learn a different set of creativity tools, maybe you don’t really care about privacy.
if you set up a pi-hole you aren’t sending any data to Microsoft because you are using Linux though… unless you are talking about server in which there are devices running Windows…
You can totally set it up so that pi-hole is your dhcp/dns server and it will catch any device on your network, even phones and windows machines. I block 60% of the shit coming out of my network.
Some shit bag devices (Chromecast were the first I knew about) started hardcoding DNS server addresses and/or using DoH. There are ways to capture those too, I believe.
I think the forum post I linked in this thread covers that. But honestly fuck those devices. Phantasy Star Online does this with the executable, and editing the server string fucks up the offsets if it isn’t the exact same length as Sega’s original server. Pain in the ass.
Last I checked mine was at almost 80%. For a while there I was getting a shitton of traffic from outside that was getting blocked, which lead to a 99% reject rate, though.
Not sure what’s going on with my new room mate’s internet, but yeah that was a wild month of trying to get that all under control
What if they use doh/dot or hardcoded ips?
https://discourse.pi-hole.net/t/doh-dot-bypass-pi-hole/80956
Could you block any outgoing from any windows machine without knowing it’s IP? That could be fun.
At a firewall level, no. Any process that will get you OS info would also allow you to get the IP.
Edit: Unless you’re doing it before a DHCP lease assignment, but I’m pretty sure you can’t use the MAC to gain any system info without software being installed on the computer.
But if the purpose is to block windows from ever communicating on the network, what you could do is assign an IP for a subnet that can’t talk out, get the OS, then assign a new IP on your main network for non-windows devices.
I’m not sure. Maybe. It would depend if all clients connected automatically use the default profile or if they have to be added to the clients list (in which case you would need IP). I haven’t looked into that actually.