Yeah. To be honest on the DNS side it would probably be far easier to just do a whitelist instead, block everything except your specific service. and yeah, its a stupid amount of work. i hate smart tvs but i’ll be damned if im gonna pay extra for a streaming box =|
just saying its possible
Not sure if you mean hardcoded DNS IPs or hardcoded “phone home” IPs. Hardcoded DNS addresses in devices are annoying, the only way i’ve found to get around that is using destination nat rules (DNAT) which requires more than a consumer router typically. hardcoded phone home IPs would get blocked by your firewall. you’re right that most firewalls are set up by default to implicitly allow outbound traffic. you set up a rule that denies all outbound traffic from the TV, then only allow port 443 (or whatever port your streaming service uses) on the specific IP/IPs that your service uses. Here’s Netflix’s published IP info for example.
edit also i’m fully aware it’s fucking ridiculous that we as consumers have to go through this much rigamarole. you shouldnt have to be a literal network engineer to do something as simple as have a tv that doesnt spy on you.
no it helps to block everything that isnt just netflix or whatever streaming service you use. you combine a DNS adblock along with blocking all the unused ports and it severely limits the communications. you could also add a vpn to add another layer of security. idk about jellyfin but most streaming services i know use https/443 to stream to your tv. so youre only allowing the specific service you want and only on a specific port. buncha great dns blocklists here https://github.com/hagezi/dns-blocklists, and a smart tv specific one for pihole here https://github.com/Perflyst/PiHoleBlocklist/blob/master/SmartTV.txt
It’s relatively easy to restrict a smart tv to TLS/HTTPS traffic only using your router and a dns adblocker.
oh shit this is FASCINATING. i’m glad you had a landlord that at least dealt with the problem instead of blaming you after the first couple times.
hence the quotes around their. these people are flat out anti-american.
what the fuck data are they trying to use to train LLMs? DNS? basically everything else these days is encrypted and unreadable by them (for the time being), and DNS is easily masked as well (DoH, DoT, etc). maybe i just answered my own question, they want to train a model that can surreptitiously spy on encrypted traffic.
edit: here’s some info on the “traditional” method of monitoring encrypted traffic, but this is typically done in organizations and requires having special certificates on every customer device
Right? They should be making them watch the entire Lord of the Rings extended trilogy instead.
consumer level copyright infringement is generally a civil matter, not a criminal one. you’d have to be doing something like selling bootleg dvds for it to turn into a criminal issue.
For me it was buying star trek the next generation on blu-ray and getting annoyed with having to flip through fifty disks to watch an episode.
The problem of non-white people being in “their” country, I would guess. But I don’t care to dig too deeply into the psyche of these monsters.
we prefer to call ourselves acetomeniphen-americans
fair enough, i guess that’s an option with that kinda dough.
Even then you’d be dealing with the hassle of moving a heavy, expensive appliance to a new home.
My parents seem to move every 15 years or so, i have no clue what a normal amount is.
We had a washing machine that “failed”. All that was wrong was the relays/water intake valves stopped recieving a signal. Ended up spending a week and an old raspberry pi making a stupid replacement controller because the washer was still sending signals, they just werent making it to the relays for some reason. i still can’t tell what part of the original boards failed. also i only programmed one cycle and it no longer senses fill rate D= but it does wash clothes reliably assuming the water pressure (and hence fill rate) is relatively stable.
to get something as flexible as my android tv i’d need an nvidia shield and those are going on ten years old at this point. maybe if/when they do a hardware refresh, assuming sideloading isn’t completely impossible by then.