• WhyJiffie@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    if pihole says its blocked, that does not mean your device does not also query another DNS server

    and once they should really hardcode the DNS or similar stuff here, the connection will be disabled

    but how’ll you notice that? that ads return? different subsystems of the tv might work differently

    Once they try to reach IPs directly (ECOVACS once did so) you may block those on a firewall-basis

    and how do you know what IPs to block? and then, a server on an IP could hold multiple services such that blocking it breaks multiple things.

    I’m not here to tease you, but I really think that this might not be enough even today

    • Oliver@lemmy.neuralwhisper.eu
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      Well, there is some work to do with identifying the device in your network (which shouldn’t be the problem) and monitor the connections over a specific time. When (as happened with ECOVACS) a single device frequently connects to DNS and HTTPS reaching a single IP belonging to this vendor, this is regulated quite easily with a proper firewall. Without the insights, this is (like you wrote) difficult to accomplish and yes, there may be false positives. Also separating those devices within an own VLAN could be part of a (individual) scenario.

      Samsung mostly talks to specific hosts, LG does as well and searching for firmware triggers different targets. These are easy to find if you know what you‘re doing but this depends on setup and knowledge. It‘s a hare-and-tortoise-race though.

      The safest way would be disabling the WiFi or LAN-connection if you don“t need any of the services shipped with the devices but while this may work for TVs, it may make your Vacuum Cleaner useless as the specific app for that device won‘t work anymore.