this post was submitted on 18 Sep 2025
927 points (99.2% liked)
Technology
75295 readers
4103 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Being pedantic is totally OK here - we're talking about SSL's spoof protection. I'll have to look up how any rando can host a DNS that supports DNS/HTTPS when a system would be expecting a valid SSL cert that declares who it was issued to and by whom and the requester is expecting a particular whom.
unbound, bind, or if you want a gui then technitium DNS.
but this thread is so, so full of misinfo. you don't need a local doh capable DNS server at home. having one won't solve anything either, because your advertising fridge won't be using it. that's the actual problem. you need to block any doh servers that the fridge might access (and regular DNS servers too), so that it doesn't have a choice but respect your pihole, but that is very difficult because doh traffic looks like regular web traffic (because it is). yeah the fridge does not need to load websites, but it does all its questionably useful functions through HTTPS APIs too, so if you want to give it internet, you can't just block web traffic for it.
I had a spirited discussion with an LG repair guy working on the smart fridge that came with my home. I don't allow malware on my network so the fridge doesn't get to do whatever a fridge needs internet access for.
He tried to scare me by saying it would connect to whatever network was available but I live in the sticks and there isn't even cell coverage here much less another router for it to connect to so unless they are putting a satellite uplink in it that would not happen and I would think he knew that since I had to put him on my guestnet so he could call his support line.
So then he said it wouldn't work properly unless it was on the network and I told him if it somehow connected I would use an ACL to ensure it couldn't talk to anything.
Anyway, bought a cheap fridge from CostCo with an extended warranty and they dumpstered that LG POS. Good riddance.
I wonder what was his goal with that