98 Matching Annotations
  1. Last 7 days
    1. How I block all online ads
      • The author describes a comprehensive setup to block virtually all online advertising across devices and services.
      • They focus on network-level filtering instead of per-device ad blockers, so that phones, TVs, and other clients benefit automatically.
      • The core of the solution is running a self-hosted DNS-based blocker (like Pi-hole or AdGuard Home) to sinkhole common ad and tracker domains.
      • Additional blocklists are layered on top to handle more aggressive tracking and region-specific ad domains, trading a bit of breakage for increased privacy.
      • For services that hardcode ad endpoints or use techniques that bypass DNS blocking, the author uses more advanced tools such as proxying or firewall rules.
      • Some apps and sites break when ads are blocked; in those cases, the author selectively whitelists domains or uses per-device exceptions rather than relaxing global rules.
      • On mobile, encrypted DNS and VPN-like tunneling are configured so that all traffic still flows through the home-level blocking setup even on the go.
      • The author argues that this configuration significantly improves page load times, reduces bandwidth usage, and makes devices feel faster and less cluttered.
      • They acknowledge an ethical gray area with ad blocking but conclude that user safety, privacy, and mental comfort outweigh the downsides of depriving low-quality ad networks of revenue.
      • The piece emphasizes that the goal is not absolute perfection but a sustainable setup that requires minimal maintenance once deployed.

      Hacker News Discussion

      • Commenters discuss additional tools like SponsorBlock for skipping in-video sponsorships on platforms such as YouTube, highlighting that traditional ad blockers do not remove creator-embedded promos.
      • Several users point out that DNS-level blocking does not stop ads injected directly by streaming services, noting that such platforms often use certificate pinning or app-level tricks that make proxying and MITM approaches difficult or impossible.
      • A highly upvoted comment recommends using a user-agent switcher to bypass sites that block non-Chrome browsers, with examples where services claim to be incompatible with Firefox but run better once the browser “pretends” to be Chrome.
      • Participants criticize websites that enforce brittle user-agent checks instead of feature detection, arguing that this needlessly breaks otherwise compatible browsers and punishes privacy-conscious users.
      • Some users express skepticism about privacy-focused browsers that are built on or dependent on codebases controlled by ad-driven companies, calling out an inherent tension between privacy promises and ad-based business models.
  2. Mar 2025
  3. May 2024
  4. Nov 2023
  5. Sep 2023
  6. Jul 2023
  7. Jun 2023
    1. By default the pure Go resolver is used, because a blocked DNS request consumes only a goroutine, while a blocked C call consumes an operating system thread. When cgo is available, the cgo-based resolver is used instead under a variety of conditions: on systems that do not let programs make direct DNS requests (OS X), when the LOCALDOMAIN environment variable is present (even if empty), when the RES_OPTIONS or HOSTALIASES environment variable is non-empty, when the ASR_CONFIG environment variable is non-empty (OpenBSD only), when /etc/resolv.conf or /etc/nsswitch.conf specify the use of features that the Go resolver does not implement, and when the name being looked up ends in .local or is an mDNS name.

      Whenever go detects an attempt has been made by the sysadmin to customize the behaviour of the DNS resolver, by setting the given ENV variables such ad RES_OPTIONS, it uses the resolver provided by the OS or sysadmin instead of the pure Go resolver.

  8. May 2023
  9. Apr 2023
  10. Mar 2023
    1. The Inflexibility of DNS Traditionally, the root record of a domain needed to point to an IP address (known as an A -- for "address" -- Record). While it may not seem like a big deal, tying a service to an IP address can be extremely limiting.
  11. Dec 2022
  12. Oct 2022
  13. Sep 2022
    1. On the internet today, it seems like it’s more common to use “absolute” domain names (like example.com).

      Relative domain names are not as common these days.

    2. The technical term for “THIS IS THE WHOLE THING” is “fully qualified domain name” or “FQDN”. So google.com. is a fully qualified domain name, and google.com isn’t.

      Example of FQDN

    3. So because domain names can actually be translated to something else in some cases, people like to put a "." at the end to communicate “THIS IS THE DOMAIN NAME, NOTHING GETS ADDED AT THE END, THIS IS THE WHOLE THING”.

      Reason why one may put a . at the end of an address

    1. Mais la justice fait face à un autre problème bien plus difficile à régler. Le blocage par les FAI n'est en effet efficace que si les internautes se servent des réglages DNS de base de leur fournisseur. Une simple modification permet donc de les contourner et de retrouver par conséquent un accès à la Z-Lib. Le seul moyen d'en couper définitivement l'accès serait donc d'en trouver les serveurs et de les désactiver. Une mission particulièrement ardue : ceux-ci sont disséminés dans de nombreux pays… dont la Russie, qui n'est peut-être pas encline à suivre les recommandations de la justice française actuellement.

      Contourner blocage FAI

  14. Aug 2022
    1. Example BIMI records

      This is an example BIMI record that includes a VMC. This record includes 2 example URLs :

      This is an example BIMI record that doesn’t use a VMC. Make sure to replace the example URL with the URL for your own SVG file location.

      v=BIMI1;l=https://images.solarmora.com/brand/bimi-logo.svg

  15. Jul 2022
  16. Jun 2022
    1. The bearerURI for a VHF/FM service is compiled as follows:fm:<gcc>.<pi>.<frequency>The <frequency> element may be replaced by the asterisk ("*") character to signify any frequency. In this case the PIcode alone shall be used by the device to locate the source
      Table 4: Example of RadioDNS bearerURI construction for RDS/RBDS

      | GCC | PI | Frequency (MHz) | RadioDNS bearerURI | |-----|------|------------------|--------------------| | ce1 | c586 | 95,8 | fm:ce1.c586.09580 | | de0 | d1e0 | 103,9 | fm:de0.d1e0.10390 | | ce1 | c201 | many | fm:ce1.c201.* |

  17. May 2022
    1. 权威各种DNS有什么区别?比如帝恩思小编的电脑上配置的是DNS114.114.114.114,但是www.dns.com用的是帝恩思dns.com的DNS,这两种DNS有什么区别?这里就做一些解释。首先,DNS按功能(角色)的分类:1.权威DNS:权威DNS是经过上一级授权对域名进行解析的服务器,同时它可以把解析授权转授给其他人,如COM顶级服务器可以授权dns.com这个域名的的权威服务器为NS.ABC.COM,同时NS.ABC.COM还可以把授权转授给NS.DDD.COM,这样NS.DDD.COM就成了ABC.COM实际上的权威服务器了。平时我们解析域名的结果都源自权威DNS。比如dns.com的权威DNS服务器就是帝恩思的ns1.dns.com ns2.dns.com2.递归DNS:负责接受用户对任意域名查询,并返回结果给用户。递归DNS可以缓存结果以避免重复向上查询。我们平时使用最多的就是这类DNS,他对公众开放服务,一般由网络运营商提供,大家都自己可以架递归DNS提供服务。递归DNS一定要有可靠的互联网连接方可使用。比如谷歌的8.8.8.8和8.8.4.4以及114的114.114.114.114和114.114.115.115都属于这一类DNS。你本地电脑上设置的DNS就是这类DNS。3.转发DNS:负责接受用户查询,并返回结果给用户。但这个结果不是按标准的域名解析过程得到的,而是直接把递归DNS的结果转发给用户。它也具备缓存功能。他主要使用在没有直接的互联网连接,但可以连接到一个递归DNS那里,这时使用转发DNS就比较合适。其缺陷是:直接受递归DNS的影响,服务品质较差。比如我们用的路由器里面的DNS就是这一类,用路由器的朋友可以看下本地电脑的DNS一般都是192.168.1.1。

      权威DNS #递归DNS #转发DNS #DNS

      DNS 有几种类型

  18. Mar 2022
  19. Feb 2022
    1. bash $ host -t txt wd.ip.wtf wd.ip.wtf descriptive text "Welcome to Wordle over DNS! Today's puzzle is #1: <guess>.1.wd.ip.wtf" wd.ip.wtf descriptive text "This shell function makes it easier to play" "wd() { dig +short txt $1.1.wd.ip.wtf | perl -pe's/\\\([0-9]{1,3})/chr$1/eg'; }"

      bash $ wd() { dig +short txt $1.example.wd.ip.wtf | perl -pe's/\\\([0-9]{1,3})/chr$1/eg'; } $ wd crane "⬜⬜🟨🟨🟨" $ wd reads "⬜🟨🟨⬜🟩" $ wd sense "🟨🟨🟨⬜⬜" $ wd names "🟩🟩🟩🟩🟩"

  20. Nov 2021
  21. Oct 2021
  22. Sep 2021
  23. Jun 2021
    1. This means that the request had pass to the external network but did not come back...

      Good to know to check if it works well on proxy in this way: Run below command in one terminal: sudo tcpdump -n -i en0 host 8.8.8.8

      And run below command in another terminal: dig @8.8.8.8 www.google.com

  24. May 2021
    1. If you're already an admin for the zone in question, then the proper way to get that information is to log on to the DNS server or DNS control console and read it right from there. If you're not an admin for the zone, you're not supposed to have that information. Note that the person you are talking to on the phone is almost certainly not a DNS zone admin, so they also should not have that information. If they somehow did have it, they definitely shouldn't give it out over the phone. This is for your protection.
  25. Mar 2021
  26. Dec 2020
    1. CNAME A <domain-name> which specifies the canonical or primary name for the owner. The owner name is an alias.

      The second sentence ruins understanding this definition for me. Does this mean that CNAME is basically an alias, but it is the highest priority one (hence the designation "primary")?

  27. Jul 2020
  28. May 2020
    1. With a single source IP address it's possible to quickly determine the type of devices on their network, and the social networks they frequent – Google, YouTube, Facebook, Soichat.com, TikTok, Line (a chat application), among many other domains.
  29. Feb 2020
    1. To add insult to injury I learn that when Cloudflare automatically detects an anomaly with your domain they permanently delete all DNS records. Mine won't be difficult to restore, but I'm not sure why this is necessary. Surely it would be possible for Cloudflare to mark a domain as disabled without irrevocably deleting it? Combined with the hacky audit log, I'm left with the opinion that for some reason Cloudflare decided to completely half-ass the part of their system that is responsible for deleting everything that matters to a user.

      ...and this is why some companies should not grow to become too big for the good of their customers.

  30. Oct 2019
  31. Apr 2019
  32. Nov 2018
  33. Oct 2018
  34. Sep 2015
    1. enter a forward to http://www.mydomain.com in the "Forward My Domain" section of the Domain Details tab, rather than setting up something in the Forwards tab