you are viewing a single comment's thread
view the rest of the comments
[–] 74 points 1 month ago (17 children)

Choose your DNS provider wisely

  • source
  • hideshow 17 child comments
  • [–] 73 points 1 month ago* (13 children)

    And ensure your VPN provider isn’t headquartered in the US (or better yet any five eyes nation) nor one of the ones owned by the Israeli Billionaire Teddy Sagi who likely also has deep ties to the Israeli and US governments

    https://en.wikipedia.org/wiki/Kape_Technologies

  • source
  • parent
  • hideshow 13 child comments
  • [–] 36 points 1 month ago

    TIL expressVPN started as

    Crossrider started off by making a SDK for the deployment of browser extensions platforms with support for monetizing extensions. The monetization options were used by major [ad injectors which used man-in-the-browser to change or add advertisements to what users saw.

    JFC.

  • source
  • parent
  • [–] 16 points 1 month ago (10 children)

    Good lists of vpn providers would be appreciated.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 17 points 1 month ago (2 children)

    Mullvad is zero log and located in Sweden, and accepts payment in crypto to reduce traceable privacy footprint (which frankly is one of the real, relevant use-cases for crypto to further legitimate privacy needs).

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 1 month ago

    Proton, mullvad, air VPN, depending on threat case. NordVPN for torrenting specifically, but not as good for privacy etc.

    The most important thing is to check who owns the VPN (as the previous commentor said, stay away from Kape tech) and where it's based (e.g., 14 eyes), as well as independent security audits and the company's public history with government requests.

  • source
  • parent
  • [–] 5 points 1 month ago* (2 children)

    NextDNS is good and I just realised that it's based in The US. The alternative ones don't seem to provide the feature of granular filtering.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 8 points 1 month ago (1 child)

    I use pihole+unbound right now and hoping that is unaffected

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 1 month ago*

    i think you have to set up DoH with unbound to make it not be in cleartext? I dunno honestly I'm a dummy, but I'm fairly sure that it's pretty tricky to get it totally secured. I guess I don't understand why you can't use ubound recursively but have its root.hints pointing as something like quad9 instead of all the actual root authoritative dns servers, theres like 13 of them and more than half are the US government.

  • source
  • parent