Is for real.

I provided a "better DNS configuration" suggestion, a month ago, but at this point I doubt it will remain useful [†]:

<https://news.ycombinator.com/item?id=50071310#50078574> [have router's DHCP auto-issue DNS to your pi-hole].

[†] I am but an observant (on my DNS logs) bluecollar poweruser – my tip will reduce only one vector, and we probably live in a world where IPv6 DNS addresses are [about to be, if not already] being hardcoded into TVs, computer security chips, and phones

----

At an absolute minimum: LittleSnitch will NOT help you here (and isn't doing everything it claims to, under the hood); it is entirely impossible for LS to stop pre-boot DNS queries; even under normal operation (e.g: when a dialogue pops up to `ACCEPT/DENY` a DNS resolution) your ISP still sees every. single. URL resolution (even if you `DENY` the connection).

Before you write "no it doesn't" please check your own DNS logs. It do be like it is.

▲

Ajoha 2 days ago | parent | next [-]

Wow!!

	▲	ProllyInfamous 2 days ago \| parent [-]
		The above are facts. ---- Speculating out loud: sure, perhaps this userprofile data is stored locally; but perhaps also (like Apple's "advertising token") this local data can help remote servers better track your entire computing humanity. While still "locally stored." (Language doesn't mean anything when EULAs are dozens of unreadable pages long; "stored locally" is just another set of weasle words, like "then just opt-out" [why is opt-in the default, if -out is even allowed at all?!]). Wouldn't surprise me if every single webpage has an advertising option to exploit the local user data (via Apple$$$), if only by offering on-device scrubbing; one could then look to see what advertising content the localhost is requesting (and thus have essentially root access to all userdata, "locally stored," by detecting outbound queries) with the user's own host acting as Apple's backendserver (while Apple profits, not you). ¢¢

▲

dabinat a day ago | parent | prev [-]

I’m just glad that we’re still at the stage where the spying is happening on your own network and is still theoretically blockable. If cellular or satellite connectivity ever gets cheap enough they’ll just bypass your network completely.