New Update NextDNS adds several new Early Access security features

Of course, I don't know how reliable it is.:rolleyes:
Phishing can be handled by blocking NRDs, which is obviously disabled by default, as seen on the original webpage, so custom tweaking would improve the detection.

nextdns-security-page.jpg
 
Phishing can be handled by blocking NRDs, which is obviously disabled by default, as seen on the original webpage, so custom tweaking would improve the detection.

View attachment 300929

If, in addition to the old features, you enable at least 8/9 of the new features in NextDNS, you can stop worrying about phishing and scams.
 
Although there's always the possibility of 1 exception that proves the rule.;)

Please note.
The website below is included in PhishTank's list of confirmed phishing sites.


hxxps://bio.site/igjipfbav

But the only possible interaction is blocked by:

  • Newly Active Domains
  • Free Hosting Domains
 
It's interesting to note that this new feature is under “Privacy,” not “Security.”
Some webpages are touchy when it comes to blocking ADs, though malvertising is a serious trend. Just by blocking tracking, I blocked 95% ADs, so it is hard to diferentiate.
11. No discussion or promotion of ad-blocking tools. The Site is ad-supported—advertising funds its operation and maintenance.
 
Yes the advertising industry is moving to server side advertising with in-video ads stitched into the content so they are really hard to block and rotating ad-server infrastructure. As posted the only way for extensions to overcome that is to apply horrible security practices (as uBo's json-edit family scriptlets).


DNS is a good place to tackle the rotating adservers because are with so many ( latest info I got is that top 100 advertising networks use over 50.000 rotating server domains)
 
In my opinion, this is a feature that’s useful when working with whitelists.
The reason is that if the domain changes, for example, every 3 days as stated here:

ExoClick - Zmatic

Anti-adblock technology
ExoClick’s Dynamic AdBlock Domain Rotation uses server-to-server technology to automatically rotate ad domains every three days, bypassing static adblock lists. For advertisers in verticals with high adblock rates, this preserves reach that other networks lose.

it should be blocked by the features for domains active for less than 30 days and/or domains that have recently become active.
 
Beside alls the new options in NextDNS's web interface, the NextDNS-cli package is also upgraded for Router and Linux Desktop :
NextDNS 1.49.0 Released :

Maintenance Changes​

  • a499fd6 chore: revert unintended OpenWrt timeout push
  • 9b004cc chore: use Digest.WriteString when hashing cache keys (#1140)
  • bea67d3 chore(deps): bump golang.org/x/net from 0.59.0 to 0.61.0 (#1132)
  • 4f224c9 chore(deps): bump github.com/godbus/dbus/v5 from 5.2.2 to 5.2.4 (#1133)
  • e2385ce chore: revert unintended direct xxhash push
  • a7aeb33 chore: hash small cache keys with one-shot xxhash
  • 0214daf chore(deps): bump golang.org/x/net from 0.57.0 to 0.59.0 (#1126)
  • 0784abf chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 (#1127)

🤖 Continuous Integration Changes​

  • 778fab6 ci: publish supported architectures in APT metadata
  • 73e5b1d ci: pin Fedora cloud image for snapshot tests

Others​

  • 567a8c5 bug: increase OpenWrt shutdown timeout to 30 seconds (#1142)
  • 6d22256 bug: increase OpenWrt shutdown timeout to 30 seconds
  • c54e2d1 bug: override OpenWrt IPv6 relay DNS with router resolver (#1138)
  • f0a498c bug: recover from blackholed DoH connections

 

Join the discussion

Write your reply below. You'll create a free account or log in before it's posted.

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top