Hacker News

parent

load more comments (1 reply)

[–] PennyRoyal@sh.itjust.works 13 points 1 year ago

That seems almost more important than the original post

parent

[–] echedeylr@lemmy.blahaj.zone 5 points 1 year ago (1 child)

This blog was classified as "parked" by Palo Alto urlfiltering service.

I just reported is a personal website about computer and cybersecurity.

parent

[–] echedeylr@lemmy.blahaj.zone 5 points 1 year ago

Wait, maybe was intentional on their side????

I just read better the blogpost.

parent

[–] phoenixz@lemmy.ca 3 points 1 year ago

Just WTF, how could that be legal?

parent

[–] sudo@programming.dev 137 points 1 year ago (14 children)

In Germany, we have the Clearingstelle Urheberrecht im Internet (CUII) - literally 'Copyright Clearinghouse for the Internet', a private organization that decides what websites to block, corporate interests rewriting our free internet. No judges, no transparency, just a bunch of ISPs and major copyright holders deciding what your eyes can see.

This is worse than whatever the UK is doing IMO.

hideshow 14 child comments

[–] PhilipTheBucket@piefed.social 78 points 1 year ago (5 children)

Germany's been doing fucked up stuff for a while. People have literally had the police visit and gotten citations for what they said online (for example calling a politician a "penis" on social media.) It's fucked.

hideshow 5 child comments

parent

[–] Korhaka@sopuli.xyz 9 points 1 year ago (2 children)

UK also arrests people for online comments

parent

[–] PhilipTheBucket@piefed.social 1 point 1 year ago

Do they? When did this happen? I know they arrest people for "Plasticine Action" T-shirts.

parent

load more comments (1 reply)

[–] Natanox@discuss.tchncs.de 13 points 1 year ago (1 child)

That one at least got cleared up in court, and even the damn police was pissed to be instrumentalized by 1 Penis like that (not to mention the societal backlash). In many cases it's even legitimate to have police involved, like with wild racist deathwishes in Facebook… but they indeed went way too far in too many cases.

Surely some more Chatcontrol and big cousin Palantir will fix that, right? …right? 🫠

parent

load more comments (1 reply)

[–] helloworld@lemmy.ml [S] 31 points 1 year ago (7 children)

Recently they switched to a more public court-order based approach.

But my thought on this is as well: Once their domain name servers are configured according to law, can they force us to not use other domain name services?

hideshow 7 child comments

parent

[–] 1Fuji2Taka3Nasubi@lemmy.zip 22 points 1 year ago (2 children)

Theoretically an ISP can block all outgoing queries to the DNS port 53 except to whitelisted servers, but now DNS over HTTPS exists, haven’t looked into how blockable that one is.

parent

[–] helloworld@lemmy.ml [S] 19 points 1 year ago (1 child)

At this point you can copy Chinas great firewall I guess.

parent

[–] outhouseperilous@lemmy.dbzer0.com 5 points 1 year ago

People do get around that sometimes.

parent

[–] sudo@programming.dev 9 points 1 year ago (3 children)

They probably can just block IPs of foreign DNS but I suspect there's ways of mirroring around that.

hideshow 3 child comments

parent

[–] HelloRoot@lemy.lol 9 points 1 year ago* (last edited 1 year ago) (2 children)

There is DoT, DoH and oblivious dns techniques. The problem is - users will have to configure those and aint nobody got time for that.

parent

[–] zingo@sh.itjust.works 5 points 1 year ago* (1 child)

In Firefox its just a flip of a button. Private DNS.

I think it uses Cloudflare by default when activated, but there are also others like quad9 9.9.9.9

parent

[–] user224@lemmy.sdf.org 3 points 1 year ago

By default you choose between Cloudflare and NextDNS.

parent

[–] statingtheobvious@lemmy.world 161 points 1 month ago (2 children)

And the follow up post “Germany's private internet censorship organization gives up” from around 5 months later.

[–] inari@piefed.zip 42 points 1 month ago

Ya love to see it

parent

[–] WhyJiffie@sh.itjust.works 4 points 1 month ago

lol, and all this was achieved by a talented 17 year old kid, and a few articles. there are still miracles in the world

parent

[–] thisNotMyName@lemmy.world 30 points 1 month ago (1 child)

CUII provides a great list of sites you'd definitely want to avoid these days. Especially if you use another DNS than the one of the ISP, which renders the blocks useless! Stay safe and make sure to regularly check their list of highly illegal sources for all kind of stuff so you are always up to date and know what to avoid as the law abiding citizen you are!

[–] black0ut@pawb.social 3 points 1 month ago

I don't usually pirate content in spanish, but whenever someone asks me for it, I always go to the latest blocked domain list from the govt to find piracy sites. It's such a nice and convenient list with all the latest sites.

I don't even need to use a VPN, since most of the blocks are just DNS. I have my own DNS resolver using unbound at home, so none of those blocks affect me.

parent

[–] fdnomad@programming.dev 4 points 1 month ago (7 children)

Ey, du hast Linux installiert, du weißt ganz genau was du machen musst. Ändere einfach deine DNS Einstellungen, sodass du nicht mehr das DNS durch den Router beziehst.

okay but I still need detailed instructions to follow step by step :(

hideshow 7 child comments

[–] glitch1985@lemmy.world 5 points 1 month ago (6 children)

https://support.nordvpn.com/hc/en-us/articles/20094975629585-Change-your-DNS-servers-on-Linux

8.8.8.8 is Google dns and pretty quick. You can also search to find some more privacy focused dns servers (but always remember if you aren't paying for it you're the product).

hideshow 6 child comments

parent

[–] diaphragmwp@discuss.tchncs.de 6 points 1 month ago* (last edited 1 month ago)

No. Not enough, still often overridden by router or whatever.

Edit /etc/NetworkManager/NetworkManager.conf:

[main]
dns=0
rc-manager=unmanaged

Full file I suggest

# Configuration file for NetworkManager.
# See "man 5 NetworkManager.conf" for details.
[main]
hostname-mode=none
dns=0
rc-manager=unmanaged

[device]
wifi.scan-rand-mac-address=yes

[connection]
ethernet.cloned-mac-address=random
wifi.cloned-mac-address=random
connection.mdns=0
connection.llmnr=0

[ipv6]
addr-gen-mode=1
ip6-privacy=2

And disable/delete "Avahi".

Restart NetworkManager twice. If you don't know how, restart the computer twice. No, I don't know why twice. Now, edit /etc/resolv.conf:

nameserver 2001:470:1f15:b80::53
nameserver 91.190.185.43

Servers grabbed from here: https://servers.opennic.org/ (OpenNIC itself is kinda barely holding but the servers are pretty good).

Note that your browser will ignore this. Open up Firefox (or derivative), Settings, Privacy and security, DNS over HTTPS, Own settings, Own, and paste something like https://dns1.slowb.ro/dns-query into it. Again, you can grab a server from opennic (look into description for URL). No, you cannot use opennic.glue addresses here.

Now, note that this may still be tampered with, if your ISP/government cares enough. Not in the browser, but system wide yes. In this case, you will have to use dnssec-proxy, route your DNS over I2P/Tor OR run your own resolver. In all of these scenarios, you will have to make sure the program providing it is listening on port 53 (and nothing else is taking it) then just make /etc/resolv.conf this instead:

nameserver ::1
nameserver 127.0.0.1

Obviously, all of this only affects DNS tampering and nothing else.

parent

[–] Captain_Stupid@lemmy.world 4 points 1 month ago (2 children)

I would more recommend Quad9 instead of google. It also has some Addblock and anti tracker functionality, it also supports dns sec and dns over https. https://quad9.net/ Here the default dns resolver 9.9.9.9

parent

[–] glitch1985@lemmy.world 3 points 1 month ago

I'll have to remember 9.9.9.9 instead of 8.8.8.8 The only reason I remember is someone said 8.x was owned by Amazon the other day and I had to look it up to make sure I wasn't crazy.

parent

[–] victorz@lemmy.world 2 points 1 month ago

I'm happily using dnsforge.de. Free ad blocking at the DNS level. Makes silly mobile games incapable of showing their ads as well, as a bonus. Much better environment for my kids, because these ads be TRIPPIN yo.

parent

[–] ScoffingLizard@lemmy.dbzer0.com 2 points 1 month ago (1 child)

I use NextDNS. I'd pay but don't exceed the limit of queries. Who has a paid option that are not assholes. (Love that sweet domain filtering)

parent

[–] glitch1985@lemmy.world 4 points 1 month ago

If you have a spare raspberry pi and don't mind an afternoon to get everything setup you could do what I have which is adguard home using the OISD block list and any other dns requests get resolved by unbound running on the same hardware so you're your own dns server.

parent

[–] fushuan@lemmy.blahaj.zone 3 points 1 month ago

Telefonica is a Spanish ISP tho. It does operate in Germany, but the ISP is spanish. It's in the name c'mon.

[–] phoenixz@lemmy.ca 3 points 1 month ago

So why isn't this an article in regional and national newspapers, showing the rather sinister behavior of an organization that works to silence the free flow of information?

[+] sunzu2@thebrainbin.org 5 points 1 year ago* (last edited 1 year ago) (6 children)

[deleted]

hideshow 6 child comments

[–] DahGangalang@infosec.pub 2 points 1 year ago (5 children)

So there's obviously alternatives like Mullvad and AdGuard, but those have the potential to evolve into the same corporatist setup as google and cloud flare.

Are there any decentralized solutions that one could use to replace these? The structure of DNS says to me there probably isn't, but looking to see if you know something I don't.