shreyasonline (u/shreyasonline)

shreyasonline commented on Bitchat – A decentralized messaging app that works over Bluetooth mesh networks github.com/jackjackbits/b... · Posted by u/ananddtyagi

shreyasonline · 2 months ago

Oops!

https://blog.technitium.com/2015/05/technitium-bit-chat-rele...

I had released that 10 yrs ago lol.

shreyasonline commented on Technitium DNS Server: Self host a DNS server for privacy and security technitium.com/dns/... · Posted by u/thunderbong

kd913 · 2 years ago

It is trivial to get pihole working with DoH. Just pair pihole with DNSCryptProxy.

shreyasonline · 2 years ago

Sure, but its not what pi-hole does or support. You need to install another software and forward requests to it. Technitium DNS has this feature built-in along with support for DoT and DoQ, including support for DoH/3.

shreyasonline commented on Technitium DNS Server: Self host a DNS server for privacy and security technitium.com/dns/... · Posted by u/thunderbong

janwillemb · 2 years ago

I really do want to self host DNS, but I am afraid it will cause problems. Aren't DNS servers easily used in DoS attacks against other servers?

shreyasonline · 2 years ago

If you are looking for self hosting local resolver then just make sure its not accessible from public Internet. If you wish to host your own authoritative DNS server for your domain names then just configuring query rate limiting will mitigate DoS or DNS amplification attacks. I have been self hosting all my domain names since 2+ years now and its not much of an issue.

shreyasonline commented on Technitium DNS Server: Self host a DNS server for privacy and security technitium.com/dns/... · Posted by u/thunderbong

Alifatisk · 2 years ago

Isn’t self-hosting a dns server kind off pointless if you are the only user? Like doesn’t that make you unique to tracking?

shreyasonline · 2 years ago

Its actually much more beneficial to use a local DNS server even for a single user. A single user will keep querying for DNS requests since OS/apps cache DNS only for a minute or so. Local DNS will keep cache for the full TTL of the record and thus reduce the number of DNS requests that go out of your network. Plus there is Serve Stale feature which improves resiliency. For privacy, depending on your scenario, you can either run recursive resolver or use encrypted DNS protocols to hide DNS from your ISP. There is also support for configuring SOCKS5 or HTTP proxy to route requests via another server or via Tor network.

shreyasonline commented on Technitium DNS Server: Self host a DNS server for privacy and security technitium.com/dns/... · Posted by u/thunderbong

gigatexal · 2 years ago

and what does this do that pi-hole doesn't? or what does this do better than pi-hole does?

shreyasonline · 2 years ago

It does what pi-hole does and a lot more. Has encrypted DNS protocols like DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC support and also has built-in recursive resolver.

shreyasonline commented on Understanding the .NET ecosystem: The evolution of .NET into .NET 7 andrewlock.net/understand... · Posted by u/alexzeitler

Kwpolska · 2 years ago

ASP.NET Web Forms are a complete trainwreck and an abuse of HTTP and other basic web development standards (e.g. by using javascript: URLs and POSTing forms for every single interaction with the page). It is broken by design. ASP.NET MVC 1.0 came out in 2009, there was plenty of time to modernize those apps.

shreyasonline · 2 years ago

It seems you have not kept up with .NET development. Web Forms have been obsolete since many years by now.

shreyasonline commented on Analyzing DNS-over-HTTPS and DNS-over-TLS Privacy and Security Claims blog.technitium.com/2019/... · Posted by u/shreyasonline

shawnz · 6 years ago

> DNS is one important control planes in a network. It essentially allows network administrators to block content based on domain names making it quite useful tool in the arsenal. It is being widely used to provide content filtering services, parental controls, and to block known malware command and control. Its so popular that a lot of people install a locally running DNS server on their home networks to block Internet Ads using block lists.

This is a totally wrong usage of DNS and I wish we would focus more effort into making IP-based blocking easy and accessible rather than wasting time trying to make DNS fit this niche. DNS is not the right tool for this job and maintaining this functionality is not a valid reason to block progress on more private technologies like DoH. And it's totally possible to run a PiHole-style system using DoH anyway.

shreyasonline · 6 years ago

Same can be said about IP-based blocking that firewalls employ. IP-based blocking can also be bypassed by using various tunneling techniques but that does not make it useless. Having DNS based control in addition to IP-based control is much useful for most scenarios.