Introducing 1.1.1.1 for Families

[blackice]

Two Flavors: 1.1.1.2 (No Malware) & 1.1.1.3 (No Malware or Adult Content)

1.1.1.1 for Families is easy to set up and install, requiring just changing two numbers in the settings of your home devices or network router: your primary DNS and your secondary DNS. Setting up 1.1.1.1 for Families usually takes less than a minute and we've provided instructions for common devices and routers through the installation guide.

1.1.1.1 for Families has two default options: one that blocks malware and the other that blocks malware and adult content. You choose which setting you want depending on which IP address you configure.

Malware Blocking Only
Primary DNS: 1.1.1.2
Secondary DNS: 1.0.0.2

Malware and Adult Content
Primary DNS: 1.1.1.3
Secondary DNS: 1.0.0.3

Additional Configuration

In the coming months, we will provide the ability to define additional configuration settings for 1.1.1.1 for Families. This will include options to create specific whitelists and blacklists of certain sites. You will be able to set the times of the day when categories, such as social media, are blocked and get reports on your household's Internet usage.

1.1.1.1 for Families is built on top of the same site categorization and filtering technology that powers Cloudflare's Gateway product. With the success of Gateway, we wanted to provide an easy-to-use service that can help any home network be fast, reliable, secure, and protected from potentially harmful content.

Introducing 1.1.1.1 for Families

Introducing 1.1.1.1 for Families — the easiest way to add a layer of protection to your home network and protect it from malware and adult content.

blog.cloudflare.com

 

[blackice]

I think this should have actually gone under technology news, not sure how to move it.

 

[oldschool]

I think this should have actually gone under technology news, not sure how to move it.

... under Utilities? Maybe @harlan4096 can move it to better spot?

 

[blackice]

As far as the article goes, a 1.1.1.1 security filter could be pretty nice and snappy. Though Cleanbrowsing basically already has that.

 

[South Park]

If this is real (not an April Fools' joke), I'd be interested. I'm using Quad9 mainly for its malware blocking as opposed to Firefox Cloudflare DoH.

 

[blackice]

If this is real (not an April Fools' joke), I'd be interested. I'm using Quad9 mainly for its malware blocking as opposed to Firefox Cloudflare DoH.

The article specifically said “not a joke”...so I’m not sure. I guess it would be pretty interesting if it is.

 

[TairikuOkami]

Family filter is excellent, it blocks less known webpages, even cleanbrowsing does not do that, though I tried to report those.
But I still can not use it, because it also blocks youtube, like my playlists with anime music, I guess family filters do not like Japanese.

Malware filter can be summed up easily: CleanBrowsing > UltraDNS > 1.1.1.2 > Quad9/Yandex/Adguard.
Unfortunately it seems, that they all lack phishing protection lately, even Cleanbrowsing, so back to Netcraft.

 

[SWCLM2020]

Thanks for sharing. More good news after the privacy audit of Cloudflare. Might consider it given the responsiveness of the service.

 

[upnorth]

 

[blackice]

I wonder if this is a case where the one employee in charge of the filter list had a different view of what was ‘family appropriate’. I doubt it’s a reflection of the values of the company as a whole, especially judging by their instantly unblocking things.

 

[Arequire]

I wonder if this is a case where the one employee in charge of the filter list had a different view of what was ‘family appropriate’. I doubt it’s a reflection of the values of the company as a whole, especially judging by their instantly unblocking things.

To get data for 1.1.1.1 for Families we licensed feeds from multiple different providers who specialize in site categorization.

One of the providers has multiple "Adult Content" categories. One “Adult Content” category includes content that mirrors the Google SafeSearch/CIPA definition. Another “Adult Content” content category includes a broader set of topics, including LGBTQIA+ sites.

... when we released the production version this morning we included the wrong “Adult Content” category from the provider in the build. As a result, the first users who tried 1.1.1.3 saw a broader set of sites being filtered than was intended, including LGBTQIA+ content.

The Mistake that Caused 1.1.1.3 to Block LGBTQIA+ Sites Today

Today we made a mistake. The mistake caused a number of LGBTQIA+ sites to inadvertently be blocked by the new 1.1.1.1 for Families service. I wanted to walk through what happened, why, and what we've done to fix it.

blog.cloudflare.com

 

[blackice]

The Mistake that Caused 1.1.1.3 to Block LGBTQIA+ Sites Today

Today we made a mistake. The mistake caused a number of LGBTQIA+ sites to inadvertently be blocked by the new 1.1.1.1 for Families service. I wanted to walk through what happened, why, and what we've done to fix it.

blog.cloudflare.com

ha, well there you go. They probably sourced block lists from some American conservative group.

 

[TairikuOkami]

I wonder if this is a case where the one employee in charge of the filter list had a different view of what was ‘family appropriate’.

I wonder, who reported it, since it has just launched and common folks hardly use third party DNS. LGBT community is like 0,1% a out of those, how many would use 1.1.1.3 the first day? It was most likely one those people, who get easily offended and spend their free time looking for problems.

As I was praising its family filter, I can not anymore, it is less strict, so it does not even block animated child porn (legal in some countries, but still).

 

[Tiamati]

Great news.

Yesterday, we announced the results of the 1.1.1.1 privacy examination. Cloudflare's business has never involved selling user data or targeted advertising, so it was easy for us to commit to strong privacy protections for 1.1.1.1. We've also led the way supporting encrypted DNS technologies including DNS over TLS and DNS over HTTPS. It is long past time to stop transmitting DNS in plaintext and we're excited that we see more and more encrypted DNS traffic every day.
(...)
In the coming months, we will provide the ability to define additional configuration settings for 1.1.1.1 for Families. This will include options to create specific whitelists and blacklists of certain sites. You will be able to set the times of the day when categories, such as social media, are blocked and get reports on your household's Internet usage.

Malware Blocking Only
Primary DNS: 1.1.1.2
Secondary DNS: 1.0.0.2

Malware and Adult Content
Primary DNS: 1.1.1.3
Secondary DNS: 1.0.0.3

For IPv6 use:

Malware Blocking Only
Primary DNS: 2606:4700:4700::1112
Secondary DNS: 2606:4700:4700::1002

Malware and Adult Content
Primary DNS: 2606:4700:4700::1113
Secondary DNS: 2606:4700:4700::1003

(I looked for the best place to post the thread but i didn't found a better sub-forum)

 

[blackice]

Great news.




(I looked for the best place to post the thread but i didn't found a better sub-forum)

Haha, I posted the same thing yesterday and put it in the same place until a mod moved it for me.

 

[Protomartyr]

Malware filter can be summed up easily: CleanBrowsing > UltraDNS > 1.1.1.2 > Quad9/Yandex/Adguard.

Was this done through testing?
I'm currently using CleanBrowsing but was thinking of trying out 1.1.1.2. My assumption being that Cloudfare would have a bigger database and therefore be more effective.

 

[TairikuOkami]

My assumption being that Cloudfare would have a bigger database and therefore be more effective.

I was previously trying to switch to Quad9 thinking the same. A small local company vs a worldwide giant, but bigger is not always better.
Yes, I tested 1.1.1.1 before and now using links from phishtank, urlhouse and vauxvault, but that is just subjective. I miss @Evjl's Rain testing.

 

[Protomartyr]

Yeah I miss @Evjl's Rain testing as well.
Cloudfare's DNS servers resolve a lot faster for me compared to CleanBrowsing so I'll be trying it out for a bit. I do have Malwarebytes Web Protection to cover anything that Cloudfare may miss.

 

[Evjl's Rain]

yeah, I want to test too but it's more difficult to find fresh links this time + my internet speed has been extremely unstable since January.
I would try to perform a test asap

 

[blackice]

yeah, I want to test too but it's more difficult to find fresh links this time + my internet speed has been extremely unstable since January.
I would try to perform a test asap

You have many fans! We appreciate your endeavors whenever you get around to it.