• blocking ads in apps

    From sobriquet@21:1/5 to All on Fri Mar 1 04:12:53 2024
    Hi.

    Is there any good free ad blocker that will block ads in apps?

    With some apps there are pesky ads and they even force you to watch the
    ad for up to half a minute before you can proceed to use the app.

    kind regards and thanks in advance for any suggestions!

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew@21:1/5 to sobriquet on Fri Mar 1 03:59:06 2024
    sobriquet wrote on Fri, 1 Mar 2024 04:12:53 +0100 :

    Is there any good free ad blocker that will block ads in apps?

    I'm glad you said "in apps" because most people seem to think ad blockers
    are only for web browsers - but in-app ads should also be blocked.

    With some apps there are pesky ads and they even force you to watch the
    ad for up to half a minute before you can proceed to use the app.

    The only free app functionality I ever found that didn't have a free ap
    without an ad were the toon makers and the comprehensive app updaters.

    Everything else I've found to be free if you know how to use app finder. https://play.google.com/store/apps/details?id=scadica.aq

    But if you're not using app finder, then you deserve to see ads! :->

    kind regards and thanks in advance for any suggestions!

    Two powerful free well known system-wide ad blockers come to mind.

    AdAway https://adaway.org
    NetGuard https://netguard.me

    Be advised that the Google Play Store version of NetGuard is emasculated by Google as, for some odd reason, Google doesn't want you to block ads.

    AdAway
    https://github.com/AdAway/AdAway/releases https://f-droid.org/en/packages/org.adaway/

    NetGuard
    https://github.com/M66B/NetGuard/releases https://f-droid.org/en/packages/eu.faircode.netguard/

    It would be interesting to find out which you feel is best.
    --
    gpsbabel
    openorienteering_mapper
    oziexplorer
    qgis
    usgs_maps
    qfield
    caltopo
    osm
    mobac

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew@21:1/5 to sobriquet on Fri Mar 1 04:33:44 2024
    sobriquet wrote on Fri, 1 Mar 2024 05:16:06 +0100 :

    I've tried AdAway and so far it seems to work blocking the ads in Rocket Player.

    I had to look up what "Rocket Player" is, so is this what you're using? https://play.google.com/store/apps/details?id=com.jrtstudio.AnotherMusicPlayer

    I don't play music but as a favor to you, I ran a Skyica search for "music player free noads 4.0 rating 10K reviews and no in-app purchases" which had over a hundred results which, when sorted from best to worst showed these.

    The top three of well over a hundred free music players without ads. https://play.google.com/store/apps/details?id=com.kmusic https://play.google.com/store/apps/details?id=com.rhmsoft.pulsar https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer

    What does Rocket Player do that those three no-ad music players don't do?
    --
    If you're running a search any other way than Skyica,
    you have way too much time on your hands to waste.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sobriquet@21:1/5 to All on Fri Mar 1 05:16:06 2024
    Op 01/03/2024 om 04:59 schreef Andrew:
    sobriquet wrote on Fri, 1 Mar 2024 04:12:53 +0100 :

    Is there any good free ad blocker that will block ads in apps?

    I'm glad you said "in apps" because most people seem to think ad blockers
    are only for web browsers - but in-app ads should also be blocked.

    With some apps there are pesky ads and they even force you to watch the
    ad for up to half a minute before you can proceed to use the app.

    The only free app functionality I ever found that didn't have a free ap without an ad were the toon makers and the comprehensive app updaters.

    Everything else I've found to be free if you know how to use app finder. https://play.google.com/store/apps/details?id=scadica.aq

    But if you're not using app finder, then you deserve to see ads! :->

    kind regards and thanks in advance for any suggestions!

    Two powerful free well known system-wide ad blockers come to mind.

    AdAway https://adaway.org
    NetGuard https://netguard.me

    Be advised that the Google Play Store version of NetGuard is emasculated by Google as, for some odd reason, Google doesn't want you to block ads.

    AdAway
    https://github.com/AdAway/AdAway/releases https://f-droid.org/en/packages/org.adaway/

    NetGuard
    https://github.com/M66B/NetGuard/releases https://f-droid.org/en/packages/eu.faircode.netguard/

    It would be interesting to find out which you feel is best.

    Thanks!
    I've tried AdAway and so far it seems to work blocking the ads in Rocket Player.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sobriquet@21:1/5 to All on Fri Mar 1 06:02:25 2024
    Op 01/03/2024 om 05:33 schreef Andrew:
    sobriquet wrote on Fri, 1 Mar 2024 05:16:06 +0100 :

    I've tried AdAway and so far it seems to work blocking the ads in Rocket
    Player.

    I had to look up what "Rocket Player" is, so is this what you're using? https://play.google.com/store/apps/details?id=com.jrtstudio.AnotherMusicPlayer

    I don't play music but as a favor to you, I ran a Skyica search for "music player free noads 4.0 rating 10K reviews and no in-app purchases" which had over a hundred results which, when sorted from best to worst showed these.

    The top three of well over a hundred free music players without ads. https://play.google.com/store/apps/details?id=com.kmusic https://play.google.com/store/apps/details?id=com.rhmsoft.pulsar https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer

    What does Rocket Player do that those three no-ad music players don't do?


    The thing is that I use many music players, because I like to listen to audiobooks while I listen to multiple kinds of music (abstract music in
    the background and more conventional music in the foreground).
    So I have many requirements for music players. They have to work
    together (each playing its own playlist independently), I need a pre-amp
    to set the volume levels independently so things sound good together.

    Hence I've tried many audioplayers (like more than 20) and eventually I
    found that the combination of rocket player, music player and musicolet
    work together. Only rocket player had ads.. the others don't force me
    to view an ad every time I use the app.
    I also have another player for use at night to listen to music while
    sleeping (Muzio player) and I like to have a separate player for that
    because I like to keep the volume at a very low level just above ambient
    noise (avoiding the hassle of setting the volume level every time).

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew@21:1/5 to sobriquet on Fri Mar 1 05:09:16 2024
    sobriquet wrote on Fri, 1 Mar 2024 06:02:25 +0100 :

    the combination of rocket player, music player and musicolet
    work together.

    Fair enough. I don't use any Android music players so I wouldn't know more.

    As for ad blocking, it seems AdAway hasn't been updated in a while but most people I've seen talking about that say it doesn't matter much because all
    it does is block ads by domain so you probably keep your domains updated.

    https://xdaforums.com/t/app-root-nonroot-official-adaway-v6-1-1.2190753/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Walther@21:1/5 to sobriquet on Fri Mar 1 14:05:46 2024
    sobriquet wrote:

    Is there any good free ad blocker that will block ads in apps?

    Sure, at home I use AdGuard home on a Raspberry Pi, which serves as ad
    blocking DNS, which is highly configurable. For my mobile devices I use dns.adguard.com as DNS, not configurable, but also blocks all ads in
    apps as well as on websites.

    -jw-

    --

    And now for something completely different...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Newyana2@21:1/5 to sobriquet on Fri Mar 1 08:24:42 2024
    "sobriquet" <dohduhdah@yahoo.com> wrote

    | Is there any good free ad blocker that will block ads in apps?
    |
    | With some apps there are pesky ads and they even force you to watch the
    | ad for up to half a minute before you can proceed to use the app.

    NetGuard seems to be highly regarded. I installed it recently
    on my TracFone. I don't really use apps and don't use the
    phone much, so I can't really say much about it. But the idea
    is something I want on every device. On every Windows computer
    I've had I install a firewall to control what can go in or out. On
    Linux there's now opensnitch. (Finally!) Netguard seems to be
    the same idea.

    Of course, you're trying to thwart the apps making money. The
    less they can show ads, the more they're likely to sell data directly.
    And if you're blocking ads then you might also be blocking functionality.
    But it's worth a try for convenience, privacy and security. Wired just
    put out a good article detailing just how intrusive cellphone ads are.
    But it's not just ads. App developers often get paid by selling your
    private information to data wholesalers.

    https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From s|b@21:1/5 to Joerg Walther on Fri Mar 1 15:55:44 2024
    On Fri, 01 Mar 2024 14:05:46 +0100, Joerg Walther wrote:

    Sure, at home I use AdGuard home on a Raspberry Pi, which serves as ad blocking DNS, which is highly configurable. For my mobile devices I use dns.adguard.com as DNS, not configurable, but also blocks all ads in
    apps as well as on websites.

    I've installed Pi-Hole and PiVPN on my RPi. When I'm not at home I use
    the VPN and traffic is filtered, same as home. No need to change DNS; my
    router is set to use Pi-Hole as my VPN, so all devices in my network
    pass through it.

    --
    s|b

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to sobriquet on Fri Mar 1 09:51:08 2024
    sobriquet <dohduhdah@yahoo.com> wrote:

    Is there any good free ad blocker that will block ads in apps?

    With some apps there are pesky ads and they even force you to watch the
    ad for up to half a minute before you can proceed to use the app.

    kind regards and thanks in advance for any suggestions!

    In Android 9, and up, you can configure the DNS server without requiring
    root privileges. That means you could specify a DNS server that
    incorporates content filtering, like OpenDNS or Adguard. No need to
    install software.

    However, just because you blocked the source of an ad does not mean the
    app adapts to the absence of the ad in itself. If banners or screen
    space is used to present the ad, you'll get blank space in the app
    allocated to where the ad would've appeared. Depends on how the app
    presents the ad it expects to retrieve. That assumes the ad content is
    not bundled with the app. You cannot block ads that are within the app.
    If, say, you get a free app that has a payware version, the freeware
    version can still shove ads at you to buy/upgrade to the payware
    version.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tim Slattery@21:1/5 to Andrew on Fri Mar 1 11:39:39 2024
    Andrew <andrew@spam.net> wrote:


    The only free app functionality I ever found that didn't have a free ap >without an ad were the toon makers and the comprehensive app updaters.

    I can add one to that: FBReader (Favorite Book Reader). It reads
    *.pub, *.pub3 and other ebook formats. I should make clear that the
    *free* version does this *without* ads or in-app purchases. You can
    use the free version for as long as you like, and it will probably do everything you need. If you care to spend $5, the paid version will
    also read PDFs (but you may have something that handles them better)
    and adds a few other functions. I download stuff from Gutenberg.com in
    pub3 format, and this app is excellent!

    --
    Tim Slattery
    timslattery <at> utexas <dot> edu

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Walther@21:1/5 to VanguardLH on Fri Mar 1 17:20:15 2024
    VanguardLH wrote:

    However, just because you blocked the source of an ad does not mean the
    app adapts to the absence of the ad in itself.

    I have got quite a number of apps with ads which are quite well behaved
    when it comes to using an adblock DNS, so chances are that the ads are
    just filtered out.

    -jw-

    --

    And now for something completely different...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Joerg Walther on Fri Mar 1 11:16:27 2024
    Joerg Walther <joerg.walther@magenta.de> wrote:

    VanguardLH wrote:

    However, just because you blocked the source of an ad does not mean the
    app adapts to the absence of the ad in itself.

    I have got quite a number of apps with ads which are quite well behaved
    when it comes to using an adblock DNS, so chances are that the ads are
    just filtered out.

    The ad sources, yes. The app's GUI layout, no. Whether there is blank
    space shown in the app depends on how the app was coded to present ads.
    I've blocked ad sources, but some apps end up with white space where
    they expected to show the ad source.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Fri Mar 1 10:56:52 2024
    On Fri, 1 Mar 2024 11:16:27 -0600, VanguardLH wrote:

    However, just because you blocked the source of an ad does not mean the >>>app adapts to the absence of the ad in itself.

    I have got quite a number of apps with ads which are quite well behaved
    when it comes to using an adblock DNS, so chances are that the ads are
    just filtered out.

    The ad sources, yes. The app's GUI layout, no. Whether there is blank
    space shown in the app depends on how the app was coded to present ads.
    I've blocked ad sources, but some apps end up with white space where
    they expected to show the ad source.

    And then there are apps which say they have no ads, but which have them. https://play.google.com/store/apps/details?id=com.quantum.updater

    If you load that app, does it have ads for you that are not blocked?
    The Google Play Store description says it has no ads. But it has ads.

    How do they get away with ads when they say they do not have ads?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Fri Mar 1 10:59:10 2024
    On Fri, 1 Mar 2024 09:51:08 -0600, VanguardLH wrote:

    In Android 9, and up, you can configure the DNS server without requiring
    root privileges. That means you could specify a DNS server that
    incorporates content filtering, like OpenDNS or Adguard. No need to
    install software.

    I installed this app which said on Google Play that it had no ads. https://play.google.com/store/apps/details?id=com.quantum.updater

    But it has ads.

    Can you show me how to block them by configuring my DNS server without requiring root privileges? I don't know how to do that (Android 13).

    However, just because you blocked the source of an ad does not mean the
    app adapts to the absence of the ad in itself. If banners or screen
    space is used to present the ad, you'll get blank space in the app
    allocated to where the ad would've appeared. Depends on how the app
    presents the ad it expects to retrieve. That assumes the ad content is
    not bundled with the app. You cannot block ads that are within the app.
    If, say, you get a free app that has a payware version, the freeware
    version can still shove ads at you to buy/upgrade to the payware
    version.

    Do you get ads with that app if you test it out?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From s|b@21:1/5 to All on Fri Mar 1 18:43:36 2024
    On Fri, 01 Mar 2024 15:55:44 +0100, s|b wrote:

    Pi-Hole as my VPN

    Sorry, should be _DNS_.

    --
    s|b

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to All on Fri Mar 1 10:48:38 2024
    On Fri, 1 Mar 2024 08:24:42 -0500, Newyana2 wrote:

    Wired just
    put out a good article detailing just how intrusive cellphone ads are.

    If that irritates you, you'll get indigestion after you read this. https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Powell@21:1/5 to VanguardLH on Fri Mar 1 20:47:28 2024
    On Fri, 1 Mar 2024 09:51:08 -0600, VanguardLH wrote:

    That means you could specify a DNS server that
    incorporates content filtering, like OpenDNS or Adguard. No need to
    install software.

    I get ads all the time even though long ago I had set up Android Settings Connections | More connection settings | Private DNS = one.one.one.one

    What DNS server should I set that Android setting to for ad removal?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Fri Mar 1 15:50:08 2024
    Nick Cine <nickcine@is.invalid> wrote:

    On Fri, 1 Mar 2024 09:51:08 -0600, VanguardLH wrote:

    In Android 9, and up, you can configure the DNS server without requiring
    root privileges. That means you could specify a DNS server that
    incorporates content filtering, like OpenDNS or Adguard. No need to
    install software.

    I installed this app which said on Google Play that it had no ads. https://play.google.com/store/apps/details?id=com.quantum.updater

    But it has ads.

    Can you show me how to block them by configuring my DNS server without requiring root privileges? I don't know how to do that (Android 13).

    However, just because you blocked the source of an ad does not mean the
    app adapts to the absence of the ad in itself. If banners or screen
    space is used to present the ad, you'll get blank space in the app
    allocated to where the ad would've appeared. Depends on how the app
    presents the ad it expects to retrieve. That assumes the ad content is
    not bundled with the app. You cannot block ads that are within the app.
    If, say, you get a free app that has a payware version, the freeware
    version can still shove ads at you to buy/upgrade to the payware
    version.

    Do you get ads with that app if you test it out?

    I'm back on Android 8. My phone's maker (LG) discontinued the phone
    back in 2019 (released in 2016), and in 2022 completely left the phone
    market. No way for me to get a later Android version unless I root my
    phone, but I'm not doing that. User configuration of the DNS server in
    Android became available, as per online articles, in Android 9+.

    Have you yet changed your DNS server in the OS to point to OpenDNS or
    AdGuard?

    https://developers.google.com/speed/public-dns/docs/using

    Scroll down to the "Android" section. Since phone makers can customize
    the Android OS, the navpath to the setting may not match what Google
    uses on their Pixel phones.

    There are lots of other online article on how to change the DNS settings
    in Android 9, and up, like:

    https://www.lifewire.com/how-to-change-dns-on-android-4588645

    I've used OpenDNS' DNS server on Windows where I also use their IP
    updater client. You create an account at OpenDNS, and their updater
    client updates your account there to record what is your current IP
    address. That setup is needed if you are assigned a dynamic IP address.
    In your account, you can configure what categories of content to block.

    https://support.opendns.com/hc/en-us/articles/227987867-What-is-the-OpenDNS-Dynamic-IP-updater-client

    They don't have an Android or iOS version of their IP updater client, so
    all you can do is use the default filtering available in the public DNS
    server. As I recall, that may only filter out known phishing sites. If
    your devices gets a static IP address, you don't need their updater
    client, and just record your static IP address in your OpenDNS account.
    They need to know which IP address they associate with which OpenDNS
    account to know how you configured your account for filtering. You can
    use them without an account, but you just get their default anti-phish filtering.

    The AdGuard DNS server filters out spam. From their web page (https://adguard-dns.io/en/welcome.html), they say they filter out "advertising, tracking, malicious, or phishing websites". So, AdGuard
    is probably a better choice for you on a mobile platform.

    https://www.networkworld.com/article/934944/6-dns-services-protect-against-malware-and-other-unwanted-content-2.html

    Notice they say AdGuard DNS has a max of 300K monthly queries. Sounds
    like a huge quota except remember that every web page has resources that
    are referenced by domains, not IP numbers, so a single web page could
    make hundreds if not thousands of DNS requests. AdGuard provides 3
    different sets (primary and secondary) of DNS server addresses depending
    on what, if any, content you want to filter.

    On my Windows desktop, I use, in order, the following DNS servers:
    Cloudflare
    OpenDNS
    Google
    my router (which passes DNS requests to my ISP's DNS server)
    I use that setup for both IPv4 and IPv6. I don't do any filtering
    (other than OpenDNS' default phish filtering, but then Google's
    filtering employed by almost every web browser does, too).

    https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work

    The blocklist comes from Google's Safe Browsing service. In Firefox
    Desktop, you can disable Safe Browsing (about:config, set browser.safebrowsing.malware and browser.safebrowsing.phishing to
    false). Alas, for Firefox Mobile, Mozilla took away about:config, so no
    way to tweak Firefox on Android like you can for Firefox on desktop.

    None of that deals with ads, but with phishing and malware. In order to eliminate using some app to block connects to ad sources, use a DNS
    server that, by default, blocks ads, and more (phishing, malware). You
    have Android 9. Read the online articles on how to configure using a non-default DNS server. Alas, for me back on Android 8, the option is
    not available, and I'm not rooting my phone.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Bill Powell on Fri Mar 1 15:55:31 2024
    Bill Powell <bill@anarchists.org> wrote:

    On Fri, 1 Mar 2024 09:51:08 -0600, VanguardLH wrote:

    That means you could specify a DNS server that
    incorporates content filtering, like OpenDNS or Adguard. No need to
    install software.

    I get ads all the time even though long ago I had set up Android Settings Connections | More connection settings | Private DNS = one.one.one.one

    What DNS server should I set that Android setting to for ad removal?

    You should not be specifying a domain name for the DNS server. That
    would require a DNS lookup. Instead you should be using 1.1.1.1. That
    is Cloudflare's DNS server -- which does no filtering. You need to
    change to a DNS server that does do ad filtering, and perhaps also phish
    and malware site filtering.

    Try using AdGuard's DNS server. They are often recommended for ad
    filtering via DNS.

    https://adguard-dns.io/en/public-dns.html

    If you don't want to use their app to change the DNS settings (and to
    link your phone's current IP address with an account, because you don't
    want to establish an account there), use method 2. I suspect if you get
    an AdGuard account, and use their app (which is likely an IP updater
    client to update your AdGuard account with whatever is your current IP
    address) that you can configure which categories of sites to block
    (return a failed DNS lookup).

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Fri Mar 1 15:19:46 2024
    Nick Cine <nickcine@is.invalid> wrote:

    On Fri, 1 Mar 2024 11:16:27 -0600, VanguardLH wrote:

    However, just because you blocked the source of an ad does not mean the >>>>app adapts to the absence of the ad in itself.

    I have got quite a number of apps with ads which are quite well behaved
    when it comes to using an adblock DNS, so chances are that the ads are
    just filtered out.

    The ad sources, yes. The app's GUI layout, no. Whether there is blank
    space shown in the app depends on how the app was coded to present ads.
    I've blocked ad sources, but some apps end up with white space where
    they expected to show the ad source.

    And then there are apps which say they have no ads, but which have them. https://play.google.com/store/apps/details?id=com.quantum.updater

    If you load that app, does it have ads for you that are not blocked?
    The Google Play Store description says it has no ads. But it has ads.

    How do they get away with ads when they say they do not have ads?

    Even after showing the "About this app", I can't see where on that store
    page where "ads" is mentioned either in no ads or has ads. There is no
    claim either way. An assumption is no mention means no ads, but that's
    just an assumption.

    Are the ads in the app's window, when you look at its settings, or do
    they appear in a separate window (worse is if they open fullscreen which
    I consider malicious)?

    The "Website" link points to http://skyeurop.com/ which gives "403
    forbidden" when I attempt to visit there. They're hosted at CloudFlare.
    Guess they didn't pay their dues, or their hosted site there is down.

    I don't need to check if this app leaves white space in its window when
    its ad resources are unreachable. I've had apps in the past where the
    app's window had white space, like a banner at the bottom that turns
    white when the app can't get its ad resource.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Fri Mar 1 17:54:48 2024
    On Fri, 1 Mar 2024 15:19:46 -0600, VanguardLH wrote:

    Even after showing the "About this app", I can't see where on that store
    page where "ads" is mentioned either in no ads or has ads. There is no
    claim either way. An assumption is no mention means no ads, but that's
    just an assumption.

    Apps that have ads say they have ads. Google requires it as far as I know.

    Are the ads in the app's window, when you look at its settings, or do
    they appear in a separate window (worse is if they open fullscreen which
    I consider malicious)?

    Some of the ads take up the whole Android screen inside the app.
    Others of the ads take up a half-inch wide bar across the app display.

    The "Website" link points to http://skyeurop.com/ which gives "403
    forbidden" when I attempt to visit there. They're hosted at CloudFlare. Guess they didn't pay their dues, or their hosted site there is down.

    I don't need to check if this app leaves white space in its window when
    its ad resources are unreachable. I've had apps in the past where the
    app's window had white space, like a banner at the bottom that turns
    white when the app can't get its ad resource.

    I think the app developers lied to Google.
    And Google didn't hold them to the truth.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Fri Mar 1 19:18:51 2024
    Nick Cine <nickcine@is.invalid> wrote:

    VanguardLH wrote:

    Have you yet changed your DNS server in the OS to point to OpenDNS or
    AdGuard?
    https://developers.google.com/speed/public-dns/docs/using
    Scroll down to the "Android" section. Since phone makers can customize
    the Android OS, the navpath to the setting may not match what Google
    uses on their Pixel phones.

    Your link is a Google link so it tells you to use "dns.google" but
    what I want to use is the "OpenDNS" or "AdGuard" domain name instead.

    Android
    ...
    3. Enter dns.google as the hostname of the DNS provider.
    ...

    Geez, you're so pendantic that you can't figure out that's the step
    where you enter *whatever* DNS server you want to use? Don't play dumb.

    You'd think it uses an IP address - but the instructions use a domain.

    I would enter an IP address to see if that works. A hostname would
    itself require a DNS lookup.

    The article is old so it says to go here which works for Android 9.

    Geez, didn't you see where I said tweaking the DNS setting became
    available in Android 9, and up?

    But for me on Android 13, the interface is here. Android13 Settings > Connections > More connection settings > Private DNS > dns.google

    Which errors out as "Couldn't connect" anyway.

    Google's DNS server IP address (for their primary server) is 8.8.8.8.
    An nslookup on that IP address returns dns.google, but how is a hostname
    going to be found until a DNS lookup returns the IP address for the
    host? If you want to use Google's DNS server, see if 8.8.8.8 works.
    Humans like names. Computers demand IP addresses.

    There are lots of other online article on how to change the DNS settings
    in Android 9, and up, like:
    https://www.lifewire.com/how-to-change-dns-on-android-4588645

    Changing the private dns setting isn't the problem.
    It's what domain to change the private dns to that's the problem.
    You'd think it uses an IP address - but the instructions use a domain.

    Think outside the box.

    I've used OpenDNS' DNS server on Windows where I also use their IP
    updater client. You create an account at OpenDNS, and their updater
    client updates your account there to record what is your current IP
    address. That setup is needed if you are assigned a dynamic IP address.
    In your account, you can configure what categories of content to block.
    https://support.opendns.com/hc/en-us/articles/227987867-What-is-the-OpenDNS-Dynamic-IP-updater-client

    Once you create an account you've completely defeated the whole
    purpose.

    The purpose was to remove ads. The purpose is not defeated by creating
    an OpenDNS account. As I said, you don't need an OpenDNS account to use
    the OpenDNS DNS server, but then the only filtering you get through
    their DNS server is the default of blocking phishing sites.

    All I want to know is what domain to put in the private dns settings.
    You'd think it uses an IP address - but the instructions use a domain.

    If Google Maps tells you to turn right, but there is no road off to the
    side there, do you still turn right?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Sat Mar 2 02:15:38 2024
    On Fri, 1 Mar 2024 19:18:51 -0600, VanguardLH wrote:

    3. Enter dns.google as the hostname of the DNS provider.
    ... you can't figure out that's the step
    where you enter *whatever* DNS server you want to use?

    Well, "dns.google" doesn't work - but it *definitely* wants a hostname.
    But even so, that's just the name for 8.8.8.8 which isn't an ad blocker.

    ping dns.google

    Pinging dns.google [8.8.8.8] with 32 bytes of data:
    Reply from 8.8.8.8: bytes=32 time=15ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=26ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=22ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=71ms TTL=115

    Android13: Settings > Connections > More connection settings > Private DNS
    Private DNS Provider Hostname = Enter hostname of DNS provider

    Notice that it specifically asks for a hostname & not an IP address.

    Looking here https://adguard-dns.io/en/public-dns.html for a hostname,
    I see it's providing IP addresses, not hostnames, for the ad blocking. 94.140.14.14 & 94.140.15.15

    You'd think it would take an IP address, even though it's not a hostname.
    But the Android 13 "Save" button is grayed out unless you use alphabetics.

    The only thing you can put there is a domain name.
    All that's needed is a domain name for an ad-blocking DNS host.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Indira@21:1/5 to Nick Cine on Sat Mar 2 15:04:02 2024
    Nick Cine wrote:

    All that's needed is a domain name for an ad-blocking DNS host.

    https://www.xda-developers.com/block-ads-on-android/ https://techviral.net/block-ads-on-android-using-private-dns/ https://techviralab.pages.dev/posts/how-to-block-ads-on-android-using-private-dns-in-2022/
    https://www.zdnet.com/article/how-to-turn-on-private-dns-mode-on-android-and-why-you-should/

    dns.adguard.com
    one.one.one.one
    1dot1dot1dot1.cloudflare-dns.com

    After setting the private DNS hostname in your Android settings,
    Open the Google Chrome browser.
    On the URL bar, enter 'Chrome://flags' and hit Enter.
    Now search for 'DNS' and disable the 'Async DNS' option.
    Now enter 'chrome://net-internals/#dns' in the URL bar and hit enter.
    Select the DNS tab and tap on the Clear Cache option.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Walther@21:1/5 to Bill Powell on Sat Mar 2 12:27:18 2024
    Bill Powell wrote:

    What DNS server should I set that Android setting to for ad removal?

    dns.adguard.com

    -jw-

    --

    And now for something completely different...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From jetjock@21:1/5 to All on Sat Mar 2 11:40:07 2024
    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    >>>>>>>>>>jetjock<<<<<<<<<<

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ed Cryer@21:1/5 to All on Sat Mar 2 18:54:14 2024
    RWQgQ3J5ZXIgd3JvdGU6DQo+IGpldGpvY2sgd3JvdGU6DQo+PiBBbnlvbmUga25vdyBvZiBh IEZSRUUgYXBwIGFzIGdvb2QgYXMgYWRndWFyZD8gJDM2L3lyIGlzbid0IGJhZCwgYnV0DQo+ PiBmcmVlIHdvdWxkIGJlIGJldHRlciEgSSB0cmllZCBOZXRndWFyZCBidXQgaXQgZGlkbid0 IGJsb2NrIG1hbnkgYWRzLg0KPj4NCj4+IMKgwqDCoMKgwqAgPj4+Pj4+Pj4+PmpldGpvY2s8 PDw8PDw8PDw8DQo+IA0KPiBJJ3ZlIGJlZW4gdXNpbmcgYSBmcmVlIHRlY2huaXF1ZSBmb3Ig eWVhcnMuIEl0IHN0b3BzIGFsbCBhZHMgd2hlbiBJIHBsYXkgDQo+IGdhbWVzIG9uIGFuIGlQ YWQvcGhvbmUgb3IgYW4gYW5kcm9pZCBkZXZpY2UuDQo+IEkgc2ltcGx5IHR1cm4gb2ZmIHdp ZmkuDQo+IEFsbCB0aGUgZ2FtZXMgSSBwbGF5IHByb2NlZWQgd2VsbDsgdGhleSBqdXN0IGNh cnJ5IG9uIGFzIG5vcm1hbCBidXQgd2l0aCANCj4gbm8gYWRzLiBJIHN1cHBvc2UgdGhlIGNv ZGluZyBjb25zaXN0cyBvZiBhIGNhbGwgdG8gdGhlIGFkLXJvdXRpbmUsIG5vIA0KPiByZXNw b25zZSwgc3RlcCB0byBuZXh0IGluc3RydWN0aW9uLg0KPiANCj4gRWQNCg0KSSd2ZSBzZWVu IGEgZmV3IGdhbWVzIHRoYXQgcmVmdXNlIHRvIHJ1biB3aXRob3V0IHdpZmk7IG9idmlvdXNs eSB0byB0cnkgDQphbmQgZm9yZXN0YWxsIHN3aXRjaGluZyB0aGUgTmV0IG9mZi4gQnV0IG9u bHkgYSB2ZXJ5IGZldy4NCk1vc3QgcGVvcGxlIHdpbGwgc2ltcGx5IG1vdmUgdG8gb3RoZXIg Z2FtZXMsIGFuZCBub3QgYmUgY3Jvd2JhcnJlZCBpbnRvIA0KYmVpbmcgYWQtc3BsYXNoZWQu DQoNCkVkDQoNCg==

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ed Cryer@21:1/5 to jetjock on Sat Mar 2 18:47:00 2024
    jetjock wrote:
    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    >>>>>>>>>>jetjock<<<<<<<<<<

    I've been using a free technique for years. It stops all ads when I play
    games on an iPad/phone or an android device.
    I simply turn off wifi.
    All the games I play proceed well; they just carry on as normal but with
    no ads. I suppose the coding consists of a call to the ad-routine, no
    response, step to next instruction.

    Ed

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Sat Mar 2 12:19:17 2024
    Nick Cine <nickcine@is.invalid> wrote:

    On Fri, 1 Mar 2024 19:18:51 -0600, VanguardLH wrote:

    3. Enter dns.google as the hostname of the DNS provider.
    ... you can't figure out that's the step
    where you enter *whatever* DNS server you want to use?

    Well, "dns.google" doesn't work - but it *definitely* wants a hostname.
    But even so, that's just the name for 8.8.8.8 which isn't an ad blocker.

    ping dns.google

    Pinging dns.google [8.8.8.8] with 32 bytes of data:
    Reply from 8.8.8.8: bytes=32 time=15ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=26ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=22ms TTL=115
    Reply from 8.8.8.8: bytes=32 time=71ms TTL=115

    Android13: Settings > Connections > More connection settings > Private DNS
    Private DNS Provider Hostname = Enter hostname of DNS provider

    Notice that it specifically asks for a hostname & not an IP address.

    Looking here https://adguard-dns.io/en/public-dns.html for a hostname,
    I see it's providing IP addresses, not hostnames, for the ad blocking. 94.140.14.14 & 94.140.15.15

    You'd think it would take an IP address, even though it's not a hostname.
    But the Android 13 "Save" button is grayed out unless you use alphabetics.

    The only thing you can put there is a domain name.
    All that's needed is a domain name for an ad-blocking DNS host.

    Odd that a hostname gets entered, because a computer can't use that.
    Needs an IP address. Seems some other DNS gets used to get the IP
    address of the wanted DNS server. If it demands a hostname, use that.
    Google (dns.google) doesn't do any filtering. Adguard DNS does, so use Adguard's DNS server.

    https://adguard-dns.io/en/public-dns.html https://adguard-dns.io/en/support/configure_on_device.html

    Whether you use their assist app or not is up to you. I can't find
    specific info on the app to determine if it assists with DNS, like
    sending your current IP address to your Adguard account (if you have
    one), or if it is just their adblocker app. Possibly their app makes
    the setup easy instead of you having to drill through the Android
    settings.

    https://adguard.com/en/adguard-android/overview.html
    "Block throughout the whole system. This includes video ads and ads in
    your favorite apps, ..."

    I've not used it to see if it changes the Android DNS settings, but then
    I'm not at Android 9, or later, (still back on Android 8) where the
    private DNS setting becomes available.

    What is suspicious is they say "Try AdGuard ad blocker for Android apps
    for free". "Try for free" usually means trialware, and you end up
    paying for the app if you keep it. Also, this is not the same Adguard
    app at the play store:

    https://play.google.com/store/apps/details?id=com.adguard.android.contentblocker

    Adguard's page above has you download an .apk file. This is an offline installation, not through the Google Play Store, so you have to
    configure your Android phone to allow non-store apps.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From kelown@21:1/5 to All on Sat Mar 2 13:05:44 2024
    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    For Android 9.0+ I use the Private DNS feature server:
    dns.adguard-dns.com

    For Android 8.1 and below, I use Block This! DNS VPN ad-blocker. https://block-this.com

    Both system-wide DNS ad-blockers are very easy to use and work just as
    well as the more complex ad-blocking solutions.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From kelown@21:1/5 to All on Sat Mar 2 13:36:43 2024
    And then there are apps which say they have no ads, but which have them. https://play.google.com/store/apps/details?id=com.quantum.updater

    I use the Android Private DNS feature. I didn't see any ads on any of
    the app's screens. I only found a blank gray strip at the bottom that
    blended in with the rest of the gray/orange/white interface.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From jetjock@21:1/5 to All on Sat Mar 2 15:29:34 2024
    On Sat, 2 Mar 2024 13:05:44 -0600, kelown <kelown@privacy.invalid>
    wrote:


    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    For Android 9.0+ I use the Private DNS feature server:
    dns.adguard-dns.com

    I turned off both NetGuard app and the free trial of AdGuard app and
    added the dns above. Looks like it's working great so far. Many thanks
    to all who suggested this method!! I was skeptical initially, but it
    appears to work.

    For Android 8.1 and below, I use Block This! DNS VPN ad-blocker. >https://block-this.com

    Both system-wide DNS ad-blockers are very easy to use and work just as
    well as the more complex ad-blocking solutions.

    >>>>>>>>>>jetjock<<<<<<<<<<

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Sat Mar 2 22:34:36 2024
    jetjock, 2024-03-02 18:40:

    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    And how should such an app be maintained if no one is willing to pay for it?

    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From kelown@21:1/5 to All on Sat Mar 2 15:50:53 2024
    What DNS server should I set that Android setting to for ad removal?

    dns.adguard-dns.com (adguard's latest public DNS server URL) dns.alternate-dns.com (blocked a site that adguard didn't catch)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ed Cryer@21:1/5 to Arno Welzel on Sat Mar 2 22:27:23 2024
    Arno Welzel wrote:
    jetjock, 2024-03-02 18:40:

    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    And how should such an app be maintained if no one is willing to pay for it?


    Did the writer have a patron when he wrote it?

    Ed

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to kelown on Sat Mar 2 19:25:03 2024
    On Sat, 2 Mar 2024 15:50:53 -0600, kelown wrote:

    What DNS server should I set that Android setting to for ad removal?

    dns.adguard-dns.com (adguard's latest public DNS server URL) dns.alternate-dns.com (blocked a site that adguard didn't catch)

    I've got most of the ad blocking problem solved in a few apps I tested.
    But I'm still confused how private DNS works.

    I tried dns.adguard-dns.com & dns.alternate-dns.com and they didn't work.
    So I almost gave up on Private DNS.

    Even though it's so simple.
    All you do is type in a hostname into the native Android field for it.

    But then I went down the list of private DNS hostnames, one by one.
    And "p2.freedns.controld.com" won me over!

    Obviously I never heard of "controlD.com" but it was the cat's meow.
    Why?

    I don't know why.
    But while "dns.adguard-dns.com" failed me, "p2.freedns.controld.com" won me over.

    It removed EVERY ad from the problematic app updater with ads.
    But it did not remove every ad in every app with ads that I tested.

    But "p2.freedns.controld.com" was simple enough to type.
    And it worked simple enough for *many* ads (not all, but many).

    How does this private DNS stuff work to get rid of the obnoxious ads?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to Indira on Sat Mar 2 19:26:56 2024
    On Sat, 2 Mar 2024 15:04:02 +0530, Indira wrote:

    After setting the private DNS hostname in your Android settings,
    Open the Google Chrome browser.
    On the URL bar, enter 'Chrome://flags' and hit Enter.
    Now search for 'DNS' and disable the 'Async DNS' option.
    Now enter 'chrome://net-internals/#dns' in the URL bar and hit enter.
    Select the DNS tab and tap on the Clear Cache option.

    Who knew the Chromium web browser uses it's own DNS server setting.
    Not me.

    Sheesh.

    Why?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Sat Mar 2 19:27:05 2024
    On Sat, 2 Mar 2024 12:19:17 -0600, VanguardLH wrote:

    The only thing you can put there is a domain name.
    All that's needed is a domain name for an ad-blocking DNS host.

    Odd that a hostname gets entered, because a computer can't use that.
    Needs an IP address. Seems some other DNS gets used to get the IP
    address of the wanted DNS server. If it demands a hostname, use that.
    Google (dns.google) doesn't do any filtering. Adguard DNS does, so use Adguard's DNS server.

    https://adguard-dns.io/en/public-dns.html https://adguard-dns.io/en/support/configure_on_device.html

    Whether you use their assist app or not is up to you. I can't find
    specific info on the app to determine if it assists with DNS, like
    sending your current IP address to your Adguard account (if you have
    one), or if it is just their adblocker app. Possibly their app makes
    the setup easy instead of you having to drill through the Android
    settings.

    https://adguard.com/en/adguard-android/overview.html
    "Block throughout the whole system. This includes video ads and ads in
    your favorite apps, ..."

    I've not used it to see if it changes the Android DNS settings, but then
    I'm not at Android 9, or later, (still back on Android 8) where the
    private DNS setting becomes available.

    What is suspicious is they say "Try AdGuard ad blocker for Android apps
    for free". "Try for free" usually means trialware, and you end up
    paying for the app if you keep it. Also, this is not the same Adguard
    app at the play store:

    https://play.google.com/store/apps/details?id=com.adguard.android.contentblocker

    Adguard's page above has you download an .apk file. This is an offline installation, not through the Google Play Store, so you have to
    configure your Android phone to allow non-store apps.

    It's a very odd behavior that something called "DNS" uses a hostname.
    I'd have thought, as you had thought, it would use an IP address.

    But I tried it.
    You can't enter a numeric IP address into the Private DNS field.
    Android won't let you.

    Android insists on an alphabetic (or at least alphanumeric) hostname.
    All the articles say the same thing, so that's odd - but it's what it is.

    I have NO IDEA how it "finds" the IP address of that hostname.
    Do you?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Sat Mar 2 21:54:13 2024
    Nick Cine <nickcine@is.invalid> wrote:

    On Sat, 2 Mar 2024 12:19:17 -0600, VanguardLH wrote:

    The only thing you can put there is a domain name.
    All that's needed is a domain name for an ad-blocking DNS host.

    Odd that a hostname gets entered, because a computer can't use that.
    Needs an IP address. Seems some other DNS gets used to get the IP
    address of the wanted DNS server. If it demands a hostname, use that.
    Google (dns.google) doesn't do any filtering. Adguard DNS does, so use
    Adguard's DNS server.

    https://adguard-dns.io/en/public-dns.html
    https://adguard-dns.io/en/support/configure_on_device.html

    Whether you use their assist app or not is up to you. I can't find
    specific info on the app to determine if it assists with DNS, like
    sending your current IP address to your Adguard account (if you have
    one), or if it is just their adblocker app. Possibly their app makes
    the setup easy instead of you having to drill through the Android
    settings.

    https://adguard.com/en/adguard-android/overview.html
    "Block throughout the whole system. This includes video ads and ads in
    your favorite apps, ..."

    I've not used it to see if it changes the Android DNS settings, but then
    I'm not at Android 9, or later, (still back on Android 8) where the
    private DNS setting becomes available.

    What is suspicious is they say "Try AdGuard ad blocker for Android apps
    for free". "Try for free" usually means trialware, and you end up
    paying for the app if you keep it. Also, this is not the same Adguard
    app at the play store:

    https://play.google.com/store/apps/details?id=com.adguard.android.contentblocker

    Adguard's page above has you download an .apk file. This is an offline
    installation, not through the Google Play Store, so you have to
    configure your Android phone to allow non-store apps.

    It's a very odd behavior that something called "DNS" uses a hostname.
    I'd have thought, as you had thought, it would use an IP address.

    But I tried it.
    You can't enter a numeric IP address into the Private DNS field.
    Android won't let you.

    Android insists on an alphabetic (or at least alphanumeric) hostname.
    All the articles say the same thing, so that's odd - but it's what it is.

    I have NO IDEA how it "finds" the IP address of that hostname.
    Do you?

    https://www.zdnet.com/article/how-to-turn-on-private-dns-mode-on-android-and-why-you-should/

    That also shows entering a FQDN for the DNS server. Weird. My only
    guess is you enter the FQDN, and Android uses the current DNS server to
    get the IP address to thereafter use that.

    https://developers.cloudflare.com/1.1.1.1/setup/android/

    That shows using either the FQDN or IP address of the DNS server. Guess
    it depends on which brand and model of smartphone you have.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Newyana2@21:1/5 to Arno Welzel on Sat Mar 2 22:44:51 2024
    "Arno Welzel" <usenet@arnowelzel.de> wrote

    | > Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    | > free would be better! I tried Netguard but it didn't block many ads.
    |
    | And how should such an app be maintained if no one is willing to pay for
    it?
    |

    Indeed. They usually get paid, if at all, by ads and by selling
    private data to data wholesalers. That's the model that started
    with the Internet. Neither side is honest. But it's even more
    complicated. If you pay, they still might sell private data.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Sat Mar 2 21:56:26 2024
    Nick Cine <nickcine@is.invalid> wrote:

    On Sat, 2 Mar 2024 15:50:53 -0600, kelown wrote:

    What DNS server should I set that Android setting to for ad removal?

    dns.adguard-dns.com (adguard's latest public DNS server URL)
    dns.alternate-dns.com (blocked a site that adguard didn't catch)

    I've got most of the ad blocking problem solved in a few apps I tested.
    But I'm still confused how private DNS works.

    I tried dns.adguard-dns.com & dns.alternate-dns.com and they didn't work.
    So I almost gave up on Private DNS.

    Even though it's so simple.
    All you do is type in a hostname into the native Android field for it.

    But then I went down the list of private DNS hostnames, one by one.
    And "p2.freedns.controld.com" won me over!

    Obviously I never heard of "controlD.com" but it was the cat's meow.
    Why?

    I don't know why.
    But while "dns.adguard-dns.com" failed me, "p2.freedns.controld.com" won me over.

    It removed EVERY ad from the problematic app updater with ads.
    But it did not remove every ad in every app with ads that I tested.

    Some ads are internal. They're coded in the app. They don't connect
    out to get ad content. You can't block those with DNS or adblocker.
    Besides internal ads, it's possible to buffer them up: grab some when
    the ad sources are unblocked, and show until another Internet connection becomes available (without ad blocking).

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Sun Mar 3 02:43:32 2024
    On Sat, 2 Mar 2024 21:54:13 -0600, VanguardLH wrote:

    I have NO IDEA how it "finds" the IP address of that hostname.
    Do you?

    https://www.zdnet.com/article/how-to-turn-on-private-dns-mode-on-android-and-why-you-should/
    That also shows entering a FQDN for the DNS server. Weird.

    Everything about private DNS is weird.

    The first weird thing is you don't give it an IP address like every other
    DNS setting gets. Instead of an IP address, you give it a FQDN like "1dot1dot1dot1.cloudflare-dns.com". That's weird.

    The second weird thing is that it blocks ads for sure (as I've been using
    it for a day and it does stop ads). I'm guessing the hostname lookup to IP address returns a null for advertising networks, but I don't if that's how
    it works.

    The third weird thing is the Internet is filled with articles telling you
    how to set it up (which is very simple) but I can't find an article yet
    that explains how it works.
    <https://www.google.com/search?q=how+does+android+private+dns+work>

    An example is this promises to explain how it works, but all it explains is
    how to set it up (which is very easy). But not how it works.
    <https://www.namehero.com/blog/what-is-private-dns-a-detailed-guide/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?J=C3=B6rg_Lorenz?=@21:1/5 to Nick Cine on Sun Mar 3 11:05:16 2024
    On 03.03.24 10:43, Nick Cine wrote:
    The first weird thing is you don't give it an IP address like every other
    DNS setting gets.

    Sorry. This is total nonsense.
    DNS over HTTPS always requires a complete hyperlink.

    The one I use in TB and FF is this one:

    https://unicast.uncensoreddns.org/dns-query

    There are dozens of DNS-servers that do not have a numeric IP-address.

    The DNS-over-TLS of the same provider is

    anycast.uncensoreddns.org:853

    --
    "Ave Caesar! Morituri te salutant!"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Sun Mar 3 05:33:00 2024
    Nick Cine <nickcine@is.invalid> wrote:

    VanguardLH wrote:

    I have NO IDEA how it "finds" the IP address of that hostname.
    Do you?

    https://www.zdnet.com/article/how-to-turn-on-private-dns-mode-on-android-and-why-you-should/
    That also shows entering a FQDN for the DNS server. Weird.

    Everything about private DNS is weird.

    The first weird thing is you don't give it an IP address like every other
    DNS setting gets. Instead of an IP address, you give it a FQDN like "1dot1dot1dot1.cloudflare-dns.com". That's weird.

    As mentioned, whether you must enter an alphanumeric dotted hostname or
    can enter a dotted IP address depends on which smartphone you're using.

    The second weird thing is that it blocks ads for sure (as I've been using
    it for a day and it does stop ads). I'm guessing the hostname lookup to IP address returns a null for advertising networks, but I don't if that's how
    it works.

    DNS lookups either succeed (and return an IP address), or their fail
    (return error status). There's nothing "null" returned. The client
    wouldn't know what to do with a null returned status.

    The third weird thing is the Internet is filled with articles telling you
    how to set it up (which is very simple) but I can't find an article yet
    that explains how it works.

    After a little digging, I found "private DNS" and "secure DNS" mean
    "encrypted DNS".

    Firefox, Edge-C, and Chrome support DoH (DNS Over HTTPS) to encrypt DNS traffic; else, it is plain text for the payload which anyone can
    intercept, including your ISP or cell carrier.

    https://en.wikipedia.org/wiki/DNS_over_HTTPS

    Another proposal has been to use DNS over TLS (DoT):

    https://en.wikipedia.org/wiki/DNS_over_TLS

    Apparently Gooogle, in Android, decided to go with DoT instead of DoH.
    You can read online the arguments of one over the other, like:

    https://www.cloudns.net/blog/understanding-dot-and-doh-dns-over-tls-vs-dns-over-https/

    Because they use different ports, anyone interrogating your network
    traffic can tell when you are using DoT, but DoH uses HTTPS, so a
    network admin couldn't tell which traffic was to a web site or which was
    to a DNS server; however, they can still tell what is the target of the traffic, so they can see when your traffic goes to a DNS server whether
    the traffic is encrypted or not. Hence some folks go even more extreme
    by employing a VPN to hide their DNS traffic, encrypted or not.

    The "private" in Android's private DNS means the DNS traffic is
    encrypted. However, that also means you need to connect to a DNS server
    that supports your choice of encryption: DoH or DoT.

    https://nordvpn.com/blog/private-dns-android/ https://www.makeuseof.com/android-private-dns-everything-you-need-to-know/

    Lots of nuggets found using:

    https://www.google.com/search?q=android+private+dns+how+it+works

    I don't know how pervasive is DoH and DoT across all DNS servers.
    Encryption requires both endpoints (client and server) to participate in
    the encryption. Presumably if the DNS to which you connect does not
    support those encryption schemes, Android will fall back to sending
    plain DNS requests to the server, so they're not private anymore. If a
    DNS server does not accept HTTPS or TLS connects (which is the "S" part
    used by HTTPS) then you can't connect to that DNS server.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Sun Mar 3 15:17:47 2024
    Ed Cryer, 2024-03-02 23:27:

    Arno Welzel wrote:
    jetjock, 2024-03-02 18:40:

    Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    free would be better! I tried Netguard but it didn't block many ads.

    And how should such an app be maintained if no one is willing to pay for it? >>

    Did the writer have a patron when he wrote it?

    adguard is not free and Netguard asks for donations:

    <https://netguard.me/>

    However since dontations are not mandatory I don't think, that the
    maintainers of Netguard get a lot of money for it.

    I maintain some plugins for WordPress of which some have more than
    20.000 active installations. Even with that many users less than 40
    people donated something so far within the last 4 years. And yes, it is
    a 5-star-rated plugin:

    <https://wordpress.org/plugins/lightbox-photoswipe/>


    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Sun Mar 3 15:21:46 2024
    Newyana2, 2024-03-03 04:44:

    "Arno Welzel" <usenet@arnowelzel.de> wrote

    | > Anyone know of a FREE app as good as adguard? $36/yr isn't bad, but
    | > free would be better! I tried Netguard but it didn't block many ads.
    |
    | And how should such an app be maintained if no one is willing to pay for it?
    |

    Indeed. They usually get paid, if at all, by ads and by selling
    private data to data wholesalers. That's the model that started
    with the Internet. Neither side is honest. But it's even more
    complicated. If you pay, they still might sell private data.

    Well - if an adblocker asks for money to maintain the blocklists, I
    don't call this "not honest". Also there is no data to sell if you just
    block ads.

    On the other side: the apps I paid so far don't sell my private data
    since there is nothing to sell either. For example OSMAnd get's money to provide map data. The free version does this as well, but you can not
    update as often as with the paid version. The paid version of FolderSync
    has additional features and so on.

    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to VanguardLH on Sun Mar 3 11:48:07 2024
    On Sun, 3 Mar 2024 05:33:00 -0600, VanguardLH wrote:

    The first weird thing is you don't give it an IP address like every other
    DNS setting gets. Instead of an IP address, you give it a FQDN like
    "1dot1dot1dot1.cloudflare-dns.com". That's weird.

    As mentioned, whether you must enter an alphanumeric dotted hostname or
    can enter a dotted IP address depends on which smartphone you're using.

    I didn't see that mentioned (but I may easily have glossed over it as a
    *LOT* of incorrect information is in this thread, as in any thread).

    I can say I would have agreed with you that DNS would "normally" take an IP address for obvious reasons, but that "Private DNS" is something weird.

    Suffice to say that I have not seen any documentation anywhere saying what you're claiming - although I don't doubt that you claimed it.

    Since I already looked at scores of documentation on private DNS (all of
    which said how to set it up and none of which explained how it works), I'll leave it open for someone to actually document that the Android setting for Private DNS takes an IP address.

    The second weird thing is that it blocks ads for sure (as I've been using
    it for a day and it does stop ads). I'm guessing the hostname lookup to IP >> address returns a null for advertising networks, but I don't if that's how >> it works.

    DNS lookups either succeed (and return an IP address), or their fail
    (return error status). There's nothing "null" returned. The client
    wouldn't know what to do with a null returned status.

    Again, I will say there is a lot of incorrect information in this thread,
    so the only two undeniable facts I can point out from my experience setting
    my Android 13 Private DNS for two days now are these two empirical facts.

    1. My Android 13 Private DNS setting will not accept a numeric value.
    2. When I set my Private DNS to p2.freedns.controld.com, ads were blocked.

    How Private DNS blocks ads, I don't know yet.

    The third weird thing is the Internet is filled with articles telling you
    how to set it up (which is very simple) but I can't find an article yet
    that explains how it works.

    After a little digging, I found "private DNS" and "secure DNS" mean "encrypted DNS".

    Thank you for looking as it's clear that this "Private DNS" thing is
    "weird" (since we all know how a normal "8.8.8.8" DNS lookup is performed).

    The final DNS query is encrypted for sure, that much even I'm aware of.
    But how Private DNS blocks ads is still a mystery to me.

    Firefox, Edge-C, and Chrome support DoH (DNS Over HTTPS) to encrypt DNS traffic; else, it is plain text for the payload which anyone can
    intercept, including your ISP or cell carrier. https://en.wikipedia.org/wiki/DNS_over_HTTPS
    Another proposal has been to use DNS over TLS (DoT): https://en.wikipedia.org/wiki/DNS_over_TLS
    Apparently Gooogle, in Android, decided to go with DoT instead of DoH.
    You can read online the arguments of one over the other, like: https://www.cloudns.net/blog/understanding-dot-and-doh-dns-over-tls-vs-dns-over-https/

    To me, the "type" of encryption isn't that important yet.

    Because they use different ports, anyone interrogating your network
    traffic can tell when you are using DoT, but DoH uses HTTPS, so a
    network admin couldn't tell which traffic was to a web site or which was
    to a DNS server; however, they can still tell what is the target of the traffic, so they can see when your traffic goes to a DNS server whether
    the traffic is encrypted or not. Hence some folks go even more extreme
    by employing a VPN to hide their DNS traffic, encrypted or not.

    The "private" in Android's private DNS means the DNS traffic is
    encrypted. However, that also means you need to connect to a DNS server
    that supports your choice of encryption: DoH or DoT. https://nordvpn.com/blog/private-dns-android/ https://www.makeuseof.com/android-private-dns-everything-you-need-to-know/ Lots of nuggets found using: https://www.google.com/search?q=android+private+dns+how+it+works
    I don't know how pervasive is DoH and DoT across all DNS servers.
    Encryption requires both endpoints (client and server) to participate in
    the encryption. Presumably if the DNS to which you connect does not
    support those encryption schemes, Android will fall back to sending
    plain DNS requests to the server, so they're not private anymore. If a
    DNS server does not accept HTTPS or TLS connects (which is the "S" part
    used by HTTPS) then you can't connect to that DNS server.

    Thanks for looking up the links as this "Private DNS" is not only new to
    me, but I don't yet know how it works (but it sure does block in-app ads).

    But you found out the same thing that I had found out.
    There's no suitable explanation of how Private DNS works.

    There are only descriptions of how to use it (which is simple).

    For example, https://nordvpn.com/blog/private-dns-android/
    a. That cite says Private DNS encrypts your DNS queries
    b. Using DNS over TLS encryption to cipher DNS queries
    c. Throughout "all your apps" (which isn't even correct)

    That's all it says. I saw it before. It's just like all the others.
    It doesn't explain how it works (and it's wrong about "C" above also).

    Note that I don't care that it's wrong on item "C".
    I'm only pointing out that it doesn't explain anything we don't know.

    For example https://www.makeuseof.com/android-private-dns-everything-you-need-to-know/
    a. That cite starts off explaining what we all know about DNS queries
    b. Then it says Private DNS encrypts the DNS query (which we knew)
    c. Then it goes into the encryption method (which doesn't matter yet)
    d. Then it tells you how to set it up (which is simple to do)

    Notice not a single web site yet explains how PrivateDNS works.

    What I'm trying to understand is how the Private DNS FQDN
    ends up going to that DNS server and how it blocks ads.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Frank Slootweg@21:1/5 to Nick Cine on Sun Mar 3 19:10:26 2024
    Nick Cine <nickcine@is.invalid> wrote:
    [...]

    Again, I will say there is a lot of incorrect information in this thread,
    so the only two undeniable facts I can point out from my experience setting my Android 13 Private DNS for two days now are these two empirical facts.

    1. My Android 13 Private DNS setting will not accept a numeric value.
    2. When I set my Private DNS to p2.freedns.controld.com, ads were blocked.

    How Private DNS blocks ads, I don't know yet.

    Private DNS doesn't block ads, p2.freedns.controld.com blocks ads.

    Private DNS is just DNS over TLS (and DNS over HTTPS), nothing more.

    <https://developers.cloudflare.com/1.1.1.1/setup/android/#configure-1111-manually>

    "Android 11 or later

    Android 11 or later versions support both DNS over TLS (DoT) and DNS
    over HTTPS (DoH).

    1. Go to Settings > Network & internet.

    2. Select Advanced > Private DNS.
    ...
    Android 9 or 10

    Android 9 and Android 10 support DNS over TLS to secure your queries
    through encryption. In Android, this option is called Private DNS."

    Note the latst sentence!

    N.B. I didn't know anything about this stuff, but it took me only a
    few minutes in Wikipedia and Google to find these answers!

    [...]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Nick Cine on Sun Mar 3 14:09:53 2024
    Nick Cine <nickcine@is.invalid> wrote:

    The final DNS query is encrypted for sure, that much even I'm aware of.
    But how Private DNS blocks ads is still a mystery to me.

    The DNS server returns a fail status to the client on a DNS lookup that
    is "blocked". Blocking at the DNS server is by failing DNS lookups to
    the client. So, depends on which DNS server to which you connect
    whether it blocks nothing or something. The Cloudflare and Google DNS
    don't block anything. AdGuard DNS says what they block (fail the
    lookups) at their web site to which I gave the URL.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nick Cine@21:1/5 to Frank Slootweg on Sun Mar 3 12:54:07 2024
    On 3 Mar 2024 19:10:26 GMT, Frank Slootweg wrote:

    How Private DNS blocks ads, I don't know yet.

    Private DNS doesn't block ads, p2.freedns.controld.com blocks ads.

    Private DNS is just DNS over TLS (and DNS over HTTPS), nothing more.

    Thanks for clarifying it's DNS over TLS, which makes complete sense.
    I had never heard of Private DNS until this thread.

    Here's what I think I know (which isn't much, I admit).
    1. You set the Android Private DNS to p2.freedns.controld.com
    2. Somehow Android inherently knows what IP address that is
    tracert p2.freedns.controld.com
    Tracing route to p2.freedns.controld.com [76.76.2.11]
    3. Somehow Android inherently knows the port & protocol (DNS over TLS)
    telnet p2.freedns.controld.com 53
    4. Somehow Android sets up an encrypted DoT connection over that port
    5. And then when an Android app asks to connect to a fqdn,
    that DoT encrypted connection returns the IP address to that app
    (unless that PrivateDNS fqdn decides to filter out the IP as an ad)

    Here's what I'm going to guess happens when an app inside
    of Android makes a query to an advertisement web site.

    1. The app makes the call to the advertisement site fqdn.
    2. The DNS query on port 53 goes through the Private DNS fqdn.
    3. That goes to p2.freedns.controld.com 76.76.2.11:53
    4. Which, since it's an advertisement, returns null (I guess).

    Is that guess as to how it works even close to how it works?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Newyana2@21:1/5 to Arno Welzel on Mon Mar 4 08:51:48 2024
    "Arno Welzel" <usenet@arnowelzel.de> wrote

    | Well - if an adblocker asks for money to maintain the blocklists, I
    | don't call this "not honest". Also there is no data to sell if you just
    | block ads.
    |

    There's all sorts of data to sell. They have your browsing
    record at the very least. In most cases they have a lot more.
    Since people don't want to pay, most apps that make
    money do it through some combination of ads and spyware.

    https://storage02.forbrukerradet.no/media/2020/01/mnemonic-security-test-report-v1.0.pdf

    https://www.nytimes.com/interactive/2018/12/10/business/location-data-privacy-apps.html

    https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

    | On the other side: the apps I paid so far don't sell my private data
    | since there is nothing to sell either.

    Very naive. The whole cellphone business runs on spyware.
    Even phone companies are selling personal data.

    http://www.theregister.co.uk/2017/10/16/danal_payfone_mobile_personal_data/

    There could certainly be honest app developers. The trouble is that
    you don't really have any way to track all this and confirm honest
    apps. Most app developers won't get paid without spying. Even if they
    do get paid, since spying is now industry standard, what's to stop them increasing their profits by selling data? What the heck? Everyone else
    is doing it, right?

    I once made a little side money writing shareware. As it turned out,
    I was among the most successful, even though I never made a full
    living at it. Almost no one paid if they didn't have to. With an activation code, more people would pay, but the code always got hacked immediately.
    Back then it wasn't feasible to put ads in software or sell personal data.
    So most shareware developers just didn't get paid. With cellphone apps
    the income is probably much worse because they're trinkets apps by
    definition.

    The problem is that the Internet, and now cellphone apps, have
    developed in an environment where spying and exploitation became
    the norm. A company holds out a bauble and hopes to pick the passerby's
    pocket while they're reaching to grab the freebie. The passerby is
    hoping to get something for nothing. Neither side is being honest.
    Since most of the process is invisible and frictionless, it works
    pretty well. If someone breaks into your house and collects personal
    data, that's a serious crime. If someone uses your cellphone as a
    tracking collar, that's clever marketing.

    Perhaps the best example is Google. They made billions showing honest
    text ads related to search terms. It was brilliant. Their search engine
    was brilliant. Life was good. But they couldn't stop there. They were too greedy. Today Google's main business is spyware. Their free services
    are the spying medium. But their income is from spying and ads. And
    now they all but own Android cellphones. It's possible that you're using honest, non-spyware apps, but the odds are against it. Ostrich mentality doesn't create privacy.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arno Welzel@21:1/5 to All on Tue Mar 5 20:16:53 2024
    Newyana2, 2024-03-04 14:51:

    "Arno Welzel" <usenet@arnowelzel.de> wrote

    | Well - if an adblocker asks for money to maintain the blocklists, I
    | don't call this "not honest". Also there is no data to sell if you just
    | block ads.
    |

    There's all sorts of data to sell. They have your browsing
    record at the very least. In most cases they have a lot more.
    Since people don't want to pay, most apps that make
    money do it through some combination of ads and spyware.

    https://storage02.forbrukerradet.no/media/2020/01/mnemonic-security-test-report-v1.0.pdf

    https://www.nytimes.com/interactive/2018/12/10/business/location-data-privacy-apps.html

    https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/

    And what does this have to do with "ad blocking"? If you don't trust a
    vendor at all, then *every* app is suspicous.

    | On the other side: the apps I paid so far don't sell my private data
    | since there is nothing to sell either.

    Very naive. The whole cellphone business runs on spyware.
    Even phone companies are selling personal data.

    Ok, everyone is evil. I understand. So it's better not to use a
    smartphone at all.

    But just because I'm courious: do you know if this applies to one of the following publishers as as well? Just a few of the apps I paid for:

    <https://osmand.net/> (OSMand+)
    <https://www.tacit.dk/> (FolderSync)
    <https://electrodoc.it/> (Electrodoc)
    <https://radio.garden/> (Radio Garden, offer a paid app as well)

    More about Radio Garden: <https://en.wikipedia.org/wiki/Radio_Garden>

    http://www.theregister.co.uk/2017/10/16/danal_payfone_mobile_personal_data/

    There could certainly be honest app developers. The trouble is that
    you don't really have any way to track all this and confirm honest
    apps. Most app developers won't get paid without spying. Even if they
    do get paid, since spying is now industry standard, what's to stop them increasing their profits by selling data? What the heck? Everyone else
    is doing it, right?

    Well - if you assume this, than I repeat it: don't use a smartphone at
    all, since everyone is evil anyway in this business.


    --
    Arno Welzel
    https://arnowelzel.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From david@21:1/5 to VanguardLH on Thu Mar 7 00:40:05 2024
    Using <news:t89d094xgey9$.dlg@v.nguard.lh>, VanguardLH wrote:

    The final DNS query is encrypted for sure, that much even I'm aware of.
    But how Private DNS blocks ads is still a mystery to me.

    The DNS server returns a fail status to the client on a DNS lookup that
    is "blocked". Blocking at the DNS server is by failing DNS lookups to
    the client. So, depends on which DNS server to which you connect
    whether it blocks nothing or something. The Cloudflare and Google DNS
    don't block anything. AdGuard DNS says what they block (fail the
    lookups) at their web site to which I gave the URL.

    https://developers.google.com/speed/public-dns/docs/dns-over-tls https://developers.google.com/speed/public-dns/docs/dns-over-tls#how_it_works

    1. The stub resolver is configured with the DNS-over-TLS resolver name dns.google.
    2. The stub resolver obtains the IP address(es) for dns.google using the local DNS resolver.
    3. The stub resolver makes a TCP connection to port 853 at one of those IP addresses.
    4. The stub resolver initiates a TLS handshake with the Google Public DNS resolver.
    5. The Google Public DNS server returns its TLS certificate along with a full chain of TLS certificates up to a trusted root certificate.
    6. The stub resolver verifies the server's identity based on the certificates presented.
    If the identity cannot be validated, DNS name resolution fails and the stub resolver returns an error.
    7. After the TLS connection is established, the stub resolver has a secure communication path between to a Google Public DNS server.
    8. Now the stub resolver can send DNS queries and receive responses over the connection.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gelato@21:1/5 to Nick Cine on Thu Mar 7 03:02:12 2024
    On Sat, 2 Mar 2024 19:26:56 -0700, Nick Cine wrote:

    After setting the private DNS hostname in your Android settings,
    Open the Google Chrome browser.
    On the URL bar, enter 'Chrome://flags' and hit Enter.
    Now search for 'DNS' and disable the 'Async DNS' option.
    Now enter 'chrome://net-internals/#dns' in the URL bar and hit enter.
    Select the DNS tab and tap on the Clear Cache option.

    Who knew the Chromium web browser uses it's own DNS server setting.

    This app is said to set DNS over TLS for mobile data in addition to wi-fi. https://play.google.com/store/apps/details?id=com.quad9.aegis
    This VPN tunnel app works on non-rooted devices to override local DNS
    settings for both mobile and WiFi networks to use the Quad9
    high-performance worldwide network of DNS servers."

    This app will change your DNS for mobile and wi-fi also but it has ads. https://play.google.com/store/apps/details?id=com.burakgon.dnschanger
    DNS Changer uses VPNService base class to create DNS & VPN connection

    I found those from this article https://www.easytechguides.com/android-dns/
    How to set up DNS on any Android phone (step by step) https://www.easytechguides.com/android-dns/#wi-fi-settings

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to david on Thu Mar 7 04:11:11 2024
    david <this@is.invalid> wrote:

    Using <news:t89d094xgey9$.dlg@v.nguard.lh>, VanguardLH wrote:

    The final DNS query is encrypted for sure, that much even I'm aware of.
    But how Private DNS blocks ads is still a mystery to me.

    The DNS server returns a fail status to the client on a DNS lookup that
    is "blocked". Blocking at the DNS server is by failing DNS lookups to
    the client. So, depends on which DNS server to which you connect
    whether it blocks nothing or something. The Cloudflare and Google DNS
    don't block anything. AdGuard DNS says what they block (fail the
    lookups) at their web site to which I gave the URL.

    https://developers.google.com/speed/public-dns/docs/dns-over-tls https://developers.google.com/speed/public-dns/docs/dns-over-tls#how_it_works

    1. The stub resolver is configured with the DNS-over-TLS resolver name dns.google.
    2. The stub resolver obtains the IP address(es) for dns.google using the local DNS resolver.
    3. The stub resolver makes a TCP connection to port 853 at one of those IP addresses.
    4. The stub resolver initiates a TLS handshake with the Google Public DNS resolver.
    5. The Google Public DNS server returns its TLS certificate along with a full chain of TLS certificates up to a trusted root certificate.
    6. The stub resolver verifies the server's identity based on the certificates presented.
    If the identity cannot be validated, DNS name resolution fails and the stub resolver returns an error.
    7. After the TLS connection is established, the stub resolver has a secure communication path between to a Google Public DNS server.
    8. Now the stub resolver can send DNS queries and receive responses over the connection.

    Guess the point that encrypted DNS (DoH or DoT) is about secreting the
    traffic, and ad, phish, malware, porn, or other blocking is a feature of
    the DNS server irrelevant of connection type.

    A DNS server may not accept encrypted connections, but it might.
    A DNS server may not block anything, but it could.
    Two different features. What you get depends on which DNS you use.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Newyana2@21:1/5 to VanguardLH on Thu Mar 7 07:38:45 2024
    "VanguardLH" <V@nguard.LH> wrote

    | A DNS server may not accept encrypted connections, but it might.
    | A DNS server may not block anything, but it could.
    | Two different features. What you get depends on which DNS you use.

    Not to mention that with Google you're asking a crook to
    watch your house while you go on vacation. And by the
    time you get back, anything of value will be gone. But
    at least the crook is registered with the Better Business
    Bureau... So there's that. :)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From VanguardLH@21:1/5 to Newyana2@invalid.nospam on Thu Mar 7 13:11:10 2024
    Newyana2 <Newyana2@invalid.nospam> wrote:

    "VanguardLH" <V@nguard.LH> wrote

    | A DNS server may not accept encrypted connections, but it might.
    | A DNS server may not block anything, but it could.
    | Two different features. What you get depends on which DNS you use.

    Not to mention that with Google you're asking a crook to
    watch your house while you go on vacation. And by the
    time you get back, anything of value will be gone. But
    at least the crook is registered with the Better Business
    Bureau... So there's that. :)

    Nah. More like you have a auditor watch your house, and after getting
    back everything you have has been recorded, so anyone else wanting to
    send you ads know better how to target you. Your driveway needs a
    recoating, you get back, and find flyers in your mailbox for sealant
    services.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From david@21:1/5 to VanguardLH on Thu Mar 7 18:44:34 2024
    Using <news:w7j6uskpmuxu$.dlg@v.nguard.lh>, VanguardLH wrote:

    More like you have a auditor watch your house, and after getting
    back everything you have has been recorded, so anyone else wanting to
    send you ads know better how to target you. Your driveway needs a
    recoating, you get back, and find flyers in your mailbox for sealant services.

    You're always trusting somebody's DNS server.
    I guess that's why there so many to choose from. :0

    A critical question to answer that is unknown to me is what happens if you specific an encrypted ad blocking server IP address for a static Wi-Fi connection?

    For example, instead of setting an ad blocking DNS server in the Private
    DNS Android setting of, say "dns.quad9.net", instead you set your Android static Wi-Fi DNS server to "9.9.9.9" (which is supposedly the same thing).

    What happens?
    Do you get the ad blocking encryption either way?
    If they're both set, who wins?
    If only the DNS server is set for static Wi-Fi, is it encrypted & ad
    blocking?

    Only your hairdresser knows for sure.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)