125
Warning: NextDNS causes major DNS leak
(lemmy.dbzer0.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 11 Nov 2026
125 points (98.4% liked)
Privacy
52018 readers
658 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 7 years ago
MODERATORS
Because we can't implement every change at once. Just degoogling is tough as hell. I still have an account I use on a really old laptop for dealing with work and the gov just to appear conformist.
Then we have to change email, figure out vpn, find alternatives for everything under the sun, figure out what Linux we can live with and how to maintain it. What phone to buy, how to keep google away from it and Facebook from hiding under every damn thing too.
Going as fast as I can and still be sane. I'm tired boss.
There is no such thing as a perfect solution that also keeps you sane and reasonably able to function in this society of ours. I switched to Proton for mailing service and VPN, Qwant, DNS4EU and you will find people everywhere complaining that their choices are much better and whatnot. I don't believe it matters that much, it's more important to decouple from google and big techs in general.
Pihole was my first venture into privacy, and it was years ago. Of course I did not realize that is what it was at the time, I thought it was just ad blocking. I still have a google account for youtube, and I hate that I am using it but that is where the creaters are. I currently do not have anything strong enough to do the whole YouTube without the google thing yet, I hope to be getting a new to me Mac mini that I will install Debian on next week where I will try invedious but right now I have a pi 5 running librewolf with adguard and sponser block. Do not get me wrong it hurts me knowing I am taking money away from creators doing this but it makes me feel better knowing that the Google is not selling me.
I have my own domain that hosts emails I have a wildcard email address so I can give out random emails to people so that I could stop using Apple’s hide my email as I was slowly moving away from Apple already. When Trump got in for his second term and the boycott the US movement started I started self hosting a lot of services.
I in no way meant to implement everything at once, it has taken me years to get where I am. The pihole was just my gateway drug into doing stuff.
Trump was the straw that broke the camels back for me too. I got off Facebook in 2012 and went back to promote my bands. When people start protecting and funding pedophiles and fascists, I'm checking out. It's a lifestyle change for sure, but I regret nothing. I'll take my $900 mid-grade Fairphone without the bells and whistles and be happy.
I got a OpenWRT router and some servers I have not set up yet. Bought a few Pis last night to host Pi Holes too. Just wish I had local buddies to nerd with and make our own internet with antennas and tell these fascists to get fucked and host it all myself. I still can but am lonely without nerd friends. People I know never know the meanings of the words I use so I quit trying and just learn on my own.
So I was using pihole with unbound, unbound was pointed at CIRA. So I thought my my stuff was secure, @randombullet@programming.dev pointed some things out to me so I spent some time trying to learn what ODoH was and a few minutes learning that unbound does not support ODoH, it does not support DoH, but it does support DoT. DNS over HTTPS was not new to me so I did not need to spend time learning what it was but unbound does not support it, DNS over TLS was new to me but unbound does support it. As a Canadian who has three different static IP addresses and currently 2 different .ca domains CIRA knows stuff about me but I am currently still cool with their up to 24 hour logging of my DNS requests, it is just my ISP knowing that I do not use port 80 or 443 for out going stuff as all my DNS requests go out through port 853.
This is the way.