hosts-blocklists

Unfortunate that the map is on your simpleanalytics.com site. NextDNS tells me it is blocked by the notracking list: https://github.com/notracking/hosts-blocklists It's also bizarre that some pretty major countries haven't been researched that are probably significant contributors to legitimate Internet traffic (UK, AUS, India etc.)

Websites that use CNAME to forward their main domain to some tracking company, basically give their entire domain away, I don't see how that is a good secure way to track your users.. DNSCrypt-proxy (and even pihole these days I believe) are actually capable of blocking forwarded CNAME requests. Setting up such system for network wide adblocking is not complicated at all, see: https://github.com/notracking/hosts-blocklists/wiki/Install-...

https://github.com/notracking/hosts-blocklists Use this for network wide blocking of all sorts of virtual garbage. Not only for safari, but all your locally connected devices.

You can get even better coverage with the NoTracking lists (dnsmasq/unbound or dnscrypt-proxy) https://github.com/notracking/hosts-blocklists They focus not only on tracking but also malware prevention, where possible via dns filtering. Pi-Hole still does not properly support wildcard filtering, only via regex but that is not really efficient (requires tons of resources).

You might want to consider checking for hosts listed in https://github.com/notracking/hosts-blocklists This is an excellent merged blocklist, with public whitelist (oisd is fully closed, no insight in what is whitelisted and why, also causing more false positives..)

This[1], but it's being run through `sed` to filter some things out of the filter, since their idea of "virtual garbage" can be a little broad. But at least I'm ultimately in control of what gets blocked, unlike when Apple decides what's best for you. [1]https://github.com/notracking/hosts-blocklists

I wanted to do that, but I had a look at Pi Hole and ran away screaming. Instead of proper packaging, they have a 3000 line install script they want you to pipe into Bash. I went a saner route, and used dnsmasq and a blocklist[1] updated nightly via cron. Dnsmasq in turn queries Stubby that talks to uncensoreddns.org via DNS-over-TLS. Boom, DoT on my entire LAN. [1]https://github.com/notracking/hosts-blocklists

You can use a tracker blocklist, so you don't have to disable javascript: https://github.com/notracking/hosts-blocklists

Also a ref to: https://github.com/notracking/hosts-blocklists They have a public whitelist and updates are pushed on a daily basis.

See: https://github.com/notracking/hosts-blocklists#dns-over-http... how Mozilla deals with this. For Chrome this feature seems not to be implemented, making it harder to control your DNS behavior in your own network. (see Q&A at the bottom of the page) https://sites.google.com/a/chromium.org/dev/developers/dns-o...

It is possible to use this feature 'in' Pi-Hole, see: https://github.com/notracking/hosts-blocklists/wiki/Install-...

A dnscrypt-proxy setup with https://github.com/notracking/hosts-blocklists/tree/master/d... goes a long way! For anything that is not blockable on DNS level one should use uBlock Origin from Gorhill.

try hosting your own dnscrypt-proxy in combination with https://github.com/notracking/hosts-blocklists. That will turn off most trackers on your entire network.

You can use some of those crowdsourced lists of hosts files to ban trackers, ad networks, and the like, i.e. https://github.com/StevenBlack/hosts or https://github.com/notracking/hosts-blocklists, you can use pi-hole even as a docker container https://github.com/pi-hole/docker-pi-hole or install it in your router. You can use privacy plugins and extensions for browsers, like umatrix, etc. You can use Tails, which uses 2 VMs. You can use a VPN service (that's controversial since you then put your trust on the VPN provider), or roll your own with something like algo from trailofbits, or streisand. You can combine multiple VPNs an/or Tor, with VMs. Mirimir wrote some articles on that setup. If you want to go full in you can use QubesOS, although now Joanna Rutkowska left the team. I'm sure there are other options...