[tyre]

Yes. I bought a Samsung TV and there isn’t a way to set up Art Mode without the internet. So first you have to get a raspberry pi, install pi hole, then switch your router’s DNS.

What a wild experience 2026 is. But I do feel like a wizard.

[walrus01]

You don't need an actual physical raspberry pi to temporarily run pihole on your LAN, you can, for instance, install a barebones debian VM inside any common hypervisor on your laptop like virtualbox or qemu, then install pihole on that basic debian x86-64 system.

[entropie]

They might hardcode DNS. It's not certain that this will work.

[CyberDildonics]

You can intercept normal DNS with iptables rules.

The best way to deal with a TV you don't trust is what no one wants to hear.

Open up the back and disconnect the wifi antenna. It is easy to open them up and everything is pretty simple and obvious once you do.

[drnick1]

> Open up the back and disconnect the wifi antenna.

Upvoted. This is precisely the kind of thing I expect to read on HN.

[CyberDildonics]

It's not even some difficult technical task like people think. The back of a TV is kind of like a PC but much simpler.

There is the power board (AC to DC conversion for electronics and leds), video input board (where you plug in HDMI etc) and a t-con board, which takes a single video signal in from the input board and drives the LCD screen.

Then there are a few ancillary components like speakers, maybe a roku module etc. There are easy to find and everything is modular. You can take the speakers out and use them somewhere else if you want. You can just disconnect the wifi antennae on the smart tv board and be done with it. You can also find the IR led connection that the remote sends signals to.

[slau]

This is why I’m a bit conflicted about DoH and ODoH. Firefox and Chrome have defaulted to DoH for years if I’m not mistaken (although I’m in Europe so I believe my FF still uses regular DNS instead of DoH by default).

This also means that DoH effectively sends all your queries to CloudFlare on FF. Chrome is slightly smarter and tries to map your DNS provider to a DoH implementation if known.

[TeMPOraL]

That's why I'm not a fan of DoH or certificate pinning. Those are tools of control.

[inigyou]

DoH in your resolv.conf wouldn't be a problem. When the browser ignores system settings it's a problem.

Guess what though? resolv.conf doesn't have syntax to specify DoH.

[tkel]

I have my router set with iptables rules to block/redirect all port 53 and you can also add known DoH to a blocklist to try and force LAN devices to use your router DNS.

[lodovic]

I have a separate lan for untrusted devices, I only use whitelisting. No public DNS for these devices.

[tyre]

You are correct! They do and it was bypassing my pihole. I was able to get around this but man they really want to stalk people.

[Jnr]

I block known DoH servers on my lan and forward all dns requests to my dns server.

[drnick1]

> So first you have to get a raspberry pi, install pi hole, then switch your router’s DNS.

This does not provide any meaningful protection against data exfiltration. The TV is very possibly using public DNS or outright phoning home through stable IPs.