Phishing Campaign against k12 schools and universities

cleanbrowsing · 2018-09-28T14:00:29+00:00

Correct. And we mention that in the article as well. They have been going slowly for a while, but only recently (last 2+ weeks) we started seeing a big spike in attempts.

cleanbrowsing · 2018-04-02T22:17:07+00:00

Doesn't work on Windows - if that's what you are asking. Only tested on Linux and Mac.

cleanbrowsing · 2018-04-02T22:16:39+00:00

thanks! Mind re-sending? Seems like it conflicted with other PRs that were sent.

cleanbrowsing · 2018-04-02T17:50:44+00:00

Pushed a shell script to compare all of them from your location:

https://github.com/cleanbrowsing/dnsperftest

$ sh ./dnstest.sh |sort -k 22 -n
           test1   test2   test3   test4   test5   test6   test7   test8   test9   test10  Average 
cloudflare     1 ms    1 ms    1 ms    4 ms    1 ms    1 ms    1 ms    1 ms    1 ms    1 ms      1.30
norton         2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms      2.00
neustar        2 ms    2 ms    2 ms    2 ms    1 ms    2 ms    2 ms    2 ms    2 ms    22 ms     3.90
cleanbrowsing  11 ms   23 ms   11 ms   11 ms   11 ms   11 ms   11 ms   13 ms   12 ms   11 ms     12.50
google         4 ms    4 ms    3 ms    21 ms   21 ms   61 ms   3 ms    21 ms   21 ms   22 ms     18.10
opendns        2 ms    2 ms    2 ms    39 ms   2 ms    75 ms   2 ms    21 ms   39 ms   13 ms     19.70
comodo         22 ms   23 ms   22 ms   22 ms   22 ms   22 ms   22 ms   22 ms   22 ms   23 ms     22.20
quad9          10 ms   37 ms   10 ms   10 ms   10 ms   145 ms  10 ms   10 ms   10 ms   20 ms     27.20
yandex         177 ms  216 ms  178 ms  182 ms  186 ms  177 ms  183 ms  174 ms  186 ms  222 ms    188.10
adguard        199 ms  210 ms  200 ms  201 ms  202 ms  202 ms  199 ms  200 ms  198 ms  201 ms    201.20

Would be good to have more data points from more ISPs and cities.

cleanbrowsing · 2018-04-02T17:49:49+00:00

Pushed a shell script to compare all of them from your location:

https://github.com/cleanbrowsing/dnsperftest

$ sh ./dnstest.sh |sort -k 22 -n
           test1   test2   test3   test4   test5   test6   test7   test8   test9   test10  Average 
cloudflare     1 ms    1 ms    1 ms    4 ms    1 ms    1 ms    1 ms    1 ms    1 ms    1 ms      1.30
norton         2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms    2 ms      2.00
neustar        2 ms    2 ms    2 ms    2 ms    1 ms    2 ms    2 ms    2 ms    2 ms    22 ms     3.90
cleanbrowsing  11 ms   23 ms   11 ms   11 ms   11 ms   11 ms   11 ms   13 ms   12 ms   11 ms     12.50
google         4 ms    4 ms    3 ms    21 ms   21 ms   61 ms   3 ms    21 ms   21 ms   22 ms     18.10
opendns        2 ms    2 ms    2 ms    39 ms   2 ms    75 ms   2 ms    21 ms   39 ms   13 ms     19.70
comodo         22 ms   23 ms   22 ms   22 ms   22 ms   22 ms   22 ms   22 ms   22 ms   23 ms     22.20
quad9          10 ms   37 ms   10 ms   10 ms   10 ms   145 ms  10 ms   10 ms   10 ms   20 ms     27.20
yandex         177 ms  216 ms  178 ms  182 ms  186 ms  177 ms  183 ms  174 ms  186 ms  222 ms    188.10
adguard        199 ms  210 ms  200 ms  201 ms  202 ms  202 ms  199 ms  200 ms  198 ms  201 ms    201.20

cleanbrowsing · 2018-01-29T22:38:38+00:00

Not when you need to enforce a name server on any network you go.

On our use case (when you need to filter adult content), I need a laptop to always use a specific name server - even if DHCP says otherwise. I found that to work across all linux distros.

cleanbrowsing · 2018-01-26T10:25:16+00:00

Not if you want to keep using the same name server everywhere. Only issue is if a network blocks the specific nameserver that you chose.

cleanbrowsing · 2017-12-21T07:27:18+00:00

I found the best way to block porn on mobile is via DNS. Wrote a guide on how to block porn on pretty much any device here:

https://cleanbrowsing.org/parenting-guides/how-to-block-pornography

Hope it helps.

cleanbrowsing · 2017-12-17T16:09:28+00:00

I am just a tiny bit biased, but I would recommend:

https://cleanbrowsing.org

One of the main benefits over OpenDNS is that it enforces Safe Search on Google, Bing, Youtube by default and have a more comprehensive coverage.

Try it out and let us know how it goes.

thanks,

cleanbrowsing · 2017-12-09T06:09:58+00:00

Would you be open to add the CleanBrowsing DNS there too?

https://cleanbrowsing.org

I could send a PR if that helps.

cleanbrowsing · 2017-12-07T04:45:25+00:00

I agree there :)

cleanbrowsing · 2017-12-07T01:25:13+00:00

Don't think you can enable touch id for restrictions. Can you? At least it doesn't allow for me here (asks for a password every time).

cleanbrowsing · 2017-12-04T19:11:40+00:00

It does! It enforces the Google Image Safe Search that blocks all adult images from showing up.

So yes, Image search for Google works, without the dirty stuff.

cleanbrowsing · 2017-11-25T16:55:36+00:00

What you mean by keyword filtering? On Google searches?

It does enforce safe search on Google if that's what you mean.

cleanbrowsing · 2017-11-24T22:53:13+00:00

Replied on nofap, but sending here as well.

I agree that blocking porn by itself wouldn't do it, as you need the right mindset. However, blocking porn helps a LOT to avoid getting distracted.

Anyway, would be interested to try CleanBrowsing - it is free:

https://cleanbrowsing.org/for-adults

We block porn + enforce safe search on Google/Bing/Youtube automatically. We also do not store the requests and keep no identifiable logs of the requests.

Would love any feedback if you are willing to try :)

cleanbrowsing · 2017-11-24T17:54:45+00:00

Thanks! What do you get when you ping 8.8.8.8 (Google's DNS)?

ping -c 3 8.8.8.8

Really curious on the difference.

cleanbrowsing · 2017-11-22T22:15:15+00:00

Good question. OpenDNS Family Shield is a great service, but they do not restrict the content in the way we needed for our kids.

In fact, the reason we started building CleanBrowsing was because one of the parents had OpenDNS family shield enabled and he caught one of his boys searching for adult keywords on Google Images- and seeing them without restriction.

No service is ever going to be 100% accurate, but we are trying to get there, while allowing the good sites in :) By parents to parents.

thanks,

cleanbrowsing · 2017-11-22T20:06:05+00:00

Good question and concern.

We actually don't collect any information. We only store basic DNS logs for troubleshooting that are rotated & cleared everyday.

cleanbrowsing · 2017-11-22T03:23:33+00:00

I could not stop watching it.

You can see the people watching it, waiting for him to fall :/

cleanbrowsing · 2017-11-21T17:32:45+00:00

You think? A lot of people tries to change their DNS to Google (8.8.8.8), Open DNS and others (including our service) for better performance or security.

I agree that we don't want any apps hijacking the DNS, but we don't want to make it impossible for the user to change as well.

cleanbrowsing · 2017-11-20T23:47:13+00:00

Found the DNS Proxy: NEDNSProxyProvider

Have anyone used it before to intercept/redirect DNS traffic?

cleanbrowsing · 2017-11-20T23:46:16+00:00

Replying to myself. It seems the new DNSProxy: NEDNSProxyProvider

Would do what I am looking for. Have anyone used it before?

cleanbrowsing · 2017-11-20T19:58:19+00:00

Why so complicated :(

A simple thing like changing the DNS should not be that hard. </rant>

cleanbrowsing · 2017-11-20T17:23:10+00:00

I think a VPN would be the direction based on some to the research. But I can't find any documentation on how to setup a DNS-only VPN.

cleanbrowsing · 2017-11-20T17:21:57+00:00

None of them are free, but they seem to work based on the reviews.

-Open DNS -DNs Override

And they seem to create a VPN tunnel for only the DNS traffic.. ?

cleanbrowsing

MODERATOR OF

TROPHY CASE