Open source NextDNS alternatives

GOST cryptography – Russian Federation’s cryptographic algorithms

“I don't follow this objection even a little bit, but I'm also not very motivated to try, so: no need to clarify. I'm just going to reiterate. I am making a very simple point. If you don't trust NIST standards because you think they're backdoored, but won't run Russian standards…”

GOST cryptography – Russian Federation’s cryptographic algorithms

“If you think standard A is good except for a potential backdoor with the key held by entity X and you think standard B is good except for a potential backdoor held by entity Y and you assume entity X and entity Y do not cooperate, then composing A and B is completely reasonable.…”

Tunnel Vision: CloudflareD AbuseD in the Wild

“"Winning" and "Losing" are not a great framework for this sort of analysis. In that binary framework, there's no difference between "1 bit of sensitive data was leaked" and "the medical and financial records of every person ever, nuclear launch codes, and the backdoor that…”

Tunnel Vision: CloudflareD AbuseD in the Wild

“> If an attacker is capable of installing apps on your server... you've already lost. You're right, but cloudflared is a whole lot easier to get running than previous RATs, and attackers don't need to operate their own c&c infrastructure - you can't defend yourself from such…”

CoreDNS: DNS service discovery for the cloud

“Indeed! It's a delicate balance between being informative and talking down the competition, but I wish more projects did this. K8S uses SkyDNS and CoreDNS says it's a full replacement for sky just with more features. From quick eyeballing of the site, these new features include:…”

CoreDNS: DNS service discovery for the cloud

“CoreDNS is very cool. You can try it without any downloads or configuration using a Katacoda interactive scenario at”

Add SOCKS proxy support

“At the moment we support HTTP/S proxies, but we don't support SOCKS from what I can tell. I have tried making use of the environment variables but this doesn't work. So we need to bake this in.”

Enhancement Reqeust: Status and Pause/Resume

“What is the plausibility of you adding a status hotkey to return where gobuster is currently at in the wordlist and also a pause/resume? Or a switch to start at a specific position in a wordlist?”

[Thread] Running dnscrypt-proxy on Android

“Current status: - The proxy compiles without any changes using `gomobile` - It also compiles and runs fine on Termux This is fantastic, but not enough for most Android users to easily install and use it. Since my knowledge of Android is fairly limited, help would be welcome!”

[Thread] dnscrypt-proxy on iOS

“[DNSCloak]( takes advantage of the [DNS proxy provider]( system introduced in iOS 11 to bring the DNSCrypt protocol to Apple devices. Devices don't have to be jailbroken to install this software. This is great, but it apparently uses code from dnscrypt-proxy v1, it is not…”

Square Register

“This looks awesome! It's important they get this kind of product right on the first release -- because small business owners can't tolerate 'beta' for something so critical as their cash register. Case in point: One of my favorite restaurants in Seattle was using iPads for…”

Square Register

“Square will be in trouble if NFC takes off. That is why its coming up with what I think is its main product line, the register. The credit card reader thingy is not where it makes money. Once prople get hooked on the analytics it can hope to add the NFC functionality in and…”

Bricks and Minifigs Stole a Man's $200k Lego Collection

“Only tangentially related, there was a "500-year" flood in my region a couple of years ago and a manager in my department who would shortly become the company president had his house flood. I volunteered to help with cleanup and ended up at his house tearing his basement, at one…”

Bricks and Minifigs Stole a Man's $200k Lego Collection

“Lego survives being eaten by babies and poop back out again (source: my younger brother). They also survive being left out at theme parks (ie the various Legolands) and primary schools under all weather conditions for months and years. So I don't think I'm underestimating the…”

Kubernetes, ingress-Nginx, cert-manager and external-DNS

“While certain aspects of the article are GCP specific, part of the motivation of using ingress-nginx and cert-manager is to make the solution more generically applicable to _any_ Kubernetes cluster. The specific commands used to spin up the infrastructure, the workload identity…”

Kubernetes, ingress-Nginx, cert-manager and external-DNS

“You should post a link to your article in the community blog post section of the external-dns GitHub readme”

1.1.1.1: Fast, privacy-first consumer DNS service

“You seem to know an awful lot about this specific case, and I'll defer to you on that. I know about the general case, technically speaking (though merely a DNS hobbyist). However, having a business relationship with another organization is not a right. Hate speakers are not a…”

1.1.1.1: Fast, privacy-first consumer DNS service

“ARRIS Group, Inc. TG1682G less than a year old. This is what everyone has in Denver, as far as I'm aware. Most of the devices settings aren't managable by its own web interface, I have to go to xfinity.com/myxfi and login to the account, and then it pushes changes to the cable…”

Blocky – a DNS proxy and ad-blocker for the local network

“It looks like it's much easy to setup DoH with blocky. Blocky's DoT doesn't work for me but it's a pain to setup with Pi-hole and it's impossible to make DoH work in Pi-hole.”

Blocky – a DNS proxy and ad-blocker for the local network

“Blocky is better because it uses less resources ,only a single yml onfig file and dns queries are faster as it's stateless”

Show HN: WireHole combines WireGuard, Pi-hole, and Unbound with an easy UI

“My setup on Raspberry Pi 3 is - Dietpi [1] - Unbound - Wireguad via PiVPN [2] - AdGuard, as a replacement of PiHole, never went back Every time I tried to move it to a container-based solution (Portainer is quite helpful), I went into problems here and there, adding more…”

Show HN: WireHole combines WireGuard, Pi-hole, and Unbound with an easy UI

“Dnsmasq needs an upstream server to resolve the DNS queries. That upstream server can be anything, Google, Cloudflate, Quad9, or, a local Unbound instance. You run an unbound server with a static IP, and point dnsmasq to said static IP. OPs setup has this configured through…”

Free DDNS with Cloudflare and a cronjob

“There's one gotcha tho. For Dynamic DNS you want minimal TTL, ideally less than 60 seconds, otherwise the DNS records will be cached and will not reflect the correct address during the short period of time window it changes. Dedicated DDNS services usually have very short TTL…”

Free DDNS with Cloudflare and a cronjob

“I also wrote my own pseudo-DDNS recently! With inspiration from a couple of similar projects on github Mine is a golang executable that runs directly on my OpenWRT-based router on a 30 minute cron job. The beauty of running it on my router directly is that I can simply query the…”

interactsh.com is down?

“interactsh.com is down?”

Errors in TXT propagation during SSL certificate update/installation

“The certificate update randomly fails due to delays/issues in the TXT record propagation containing the challenge: ``` # ./interactsh-server -domain abcd.efg -ip xxx.xxx.xxx.xxx -listen-ip xxx.xxx.xxx.xxx 2021/12/15 14:24:28 Creating new order for domains: [*.abcd.efg abcd.efg]…”

Support: Ubiquiti Unifi Dream Machine (UDM)

“Following on from #48. Device: It runs a variant of Linux called UbiOS _(Ubiquiti OS)_, which _seems_ to be a variant of Alpine Linux. ```sh # sh -c 'sh -c "$(curl -sL ERROR: Unsupported OS: Linux INFO: OS: INFO: GOARCH: arm64 INFO: GOOS: linux ERROR: Cannot detect running…”

UDMP SE - firmware 2.X does not use UbiOS or Podman. CLI starts after reboot and breaks dnsmasq. Only listens on 53.

“The UDMP SE runs on Debian, not UbiOS and there are no containers. It’s firmware is 2.x branch which would indicate the UDM and UDMP will be moving to this branch. It installed fine but throws this error on startup: Startup failed: proxy: tcp: listen tcp :53: bind: address…”

ESP32-S ad blocker — step-by-step guide

“12 de out. de 2026 · @shinjeikari With a cheap ESP32 board and about an hour, your whole home blocks ads and trackers, with nothing to install on phones, TVs or computers. The guide uses the open-source project esp32-c3-adblock and is written for people who have never…”

bogus_nxdomain does not block responses when at least one IP address is not listed as bogus

“1. When the "fastest address" mode is turned on, the "bogus-nxdomain" function does not seem to work. 2. In the "fastest address" mode, AGH seems to ignore the network environment: for example, after artificially blocking the IP address and confirming that it has been blocked,…”

Docker error: Failed to run: Failed to send query data

“Hi! I am running the latest docker and the latest adguard home version (0.107.29) and can't get it working: Log: ``` Welcome to AdGuardian Terminal Edition! Terminal-based, real-time traffic monitoring and statistics for your AdGuard Home instance For documentation and support,…”

[arm64] exec format error

“[arm64] exec format error”

Stubby unable to connect to Cloudflare's 1.1.1.1 (WINDOWS)

“Stubby is unable to connect to 1.1.1.1 for DNS-over-TLS cause it cannot validate the certificate on **Windows 10 Build 16299** Following configuration **should** work: ```yaml upstream_recursive_servers: - address_data: 1.1.1.1 tls_pubkey_pinset: - digest: "sha256" value:…”

Error in `/usr/bin/stubby': double free or corruption

“Observed this in my journal when I woke up this morning. >Dec 26 01:22:01 debian stubby[29787]: [14:22:01.795784] STUBBY: Read config from file /etc/stubby/stubby.yml >Dec 26 01:22:01 debian stubby[29787]: [14:22:01.796863] STUBBY: Starting DAEMON.... >Dec 26 05:53:43 debian…”