Hacker News new | past | comments | ask | show | jobs | submit | evanreichard's comments login

The current version of Bitwarden straight up doesn't work in Orion [0]. I ran into this yesterday when setting it up for the first time. Wasn't a great first experience as it's literally the only extension that is a deal breaker to me.

I'm still giving Orion a chance for now... I just installed a slightly older version that works.

[0] https://orionfeedback.org/d/10197-bitwarden-hangs-on-load


FWIW I've been running a jailbroken PW5 for a few years now always connected to the internet without any issues dealing with updates.

I did rename the ota binary. I'm aware that there's always the possibility of Amazon maybe having some other way to push an update, but I haven't had any issues so far.


Good for you, but you can't count on buying a new device and having it be jailbreakable. For someone deciding what to buy it's not a good option. It's also a lot of work and worrying over something you bought and paid for.


I've got the same generation PW and have it jailbroken running KOReader. I've considered trying other readers out, not because of issues but rather shiny new thing reasons. But at least when it comes to KOReader, it seems like the PW are the best if you can jailbreak the version you're on.

(I want / need it to run KOReader because I wrote a small Lua plugin for it that syncs reading stats (words per minute, minutes read per year, etc) to a centralized server.)


As someone who used CrowdStike daily and worked as an MDR Analyst and Engineer at a top ranked MDR provider, CrowdStrike is a very capable piece of tech.

While the driver for purchase is almost always to pass audits, it's still a good product.


FYI I've been running multiple jailbroken Kindles connected to WiFi with KOReader for a few years now. Just install renameotabin and you're good to go. You can even register it like a normal Kindle.


The relicense doesn't bother me. That straight up lie, though.


Pretty much. I think it's the whole virtue signaling and intellectual hand wavy dishonesty that really bugs me about these companies. They want to have the cake and eat it too.

Do companies like Apple say macOS is open source (I mean the entire OS, not just Darwin)? No. Some people are fine with it because we know this.


All of my phones (except the iPhone, actually) had hard reboot issues at around the 2-3yr mark. Usually at under 30% battery charge under high load. HTC Incredible, Galaxy S4, and Nexus 6. Nexus 6 was the worst, but I also had that one the longest.

My iPhone X didn't have shutoff issues, but the battery did swell enough to push out the screen, which Apple replaced for free even with an expired warranty.


I'm curious what issues you ran into with Pi-hole? I was running my instance for years without a single hiccup. I ended up moving to AdGuard Home about a year ago though because I wanted to run it on my OPNSense box.

I have an automatic WireGuard VPN set up on my devices to VPN into my home network when I'm not connected to my SSID, so my local DNS still works remotely.


> I'm curious what issues you ran into with Pi-hole?

My primary problem with Pi-hole or any other DNS-based blocker is that it silently breaks things. YouTube stopped saving my spot in videos. I couldn't click through on any link that involved a tracking service.

These things accomplish their stated task well, but leave behind an insidious trail of browser errors, broken pages, and broken apps without ever indicating to the user what the cause of the problem really is.

DNS just isn't the right tool for fixing shitty UX in the browser DOM or a mobile app. It's a happy coincidence that it works more often than not.


It must be the lists in pihole or something, I don't get any of those issues with NextDNS, if anything Ublock breaks sites before it does


Yeah nextdns regularly blocks things I don’t want to see and many email tracking links fail, some online stores don’t work (https://www.thermoworks.com/) and it’s really easy to turn off on my phone.

I saw some people setup pihole 5min temporary off buttons one way or another to get by. I run lockdown also.


Try disabling ublock or other privacy extensions. Thermoworks add to cart doesn't work on my regular browser with everything but works on my browser that doesn't have those extensions with NextDNS, again it might be one of your blocklists


Odd - I have a pi-hole on my home network and never hit the issue with YouTube. The only breakage I've found is the top "results" (actually sponsored ads) on Google search don't work, but I always scroll past those anyway to discourage bad behaviour.

In fact pi-hole works so well that I'm always struck by how awful the internet has become when I venture away from my home network. Doctorow's enshitification in action.


The YouTube thing was what turned me on to Pi-Hole's list of commonly-whitelisted domains[1], but even after adding it, the experience of things breaking was just ultimately too frustrating to keep using it.

It's really an issue with feedback, though. When my ad blocker breaks a page, it says that it blocked something. When pi-hole breaks a page, it just appears to be broken.

1: https://discourse.pi-hole.net/t/commonly-whitelisted-domains...


I have had to do the same to fix Youtube progress reporting, but not much more. That is one of few things the PiHole has ever broken for me (that I know of...). I agree that a problem with PiHole is that if something is not working and I disable uBlock as a debugging step, then I have to also browse and login to 2 different PiHole GUIs and temporarily disable it. Without knowing if PiHole actually blocked anything. It is especially inconvenient when on the phone. I have not looked if it already exist, but I would want a nice little app I can open and just click "disable for X time" which would disable the blocking on all my PiHoles at once. Also syncing all settings from a "master" instance would be great. Maybe the default lists should contain some of the whitelis domains or something aswell.

Still, these problems are so small compared to the value I get out of my PiHoles. Blocking ads for years on end while having troubles maybe 3-4 times in total. All the other time it just works.


Is this an issue that next dns fixes for you?


Never used it, but I wouldn't expect it to, assuming it works the same way.


SD card corruption that just slowly started degrading the results, twice.

For the price of a single Pi, I can get NextDNS ad protection for _all_ my devices for multiple years. No matter where they are.


Running pihole on a Pi is severely overrated.

I run it on my NAS Linux server (in a Docker container) where I have a bunch of other things. Zero problems, now using it for more than two years.


I tried that too, but the Pi needs to be bridged to the network for it to show up properly and that caused issues with docker containers not being able to access it properly.

Most likely it can be made to work, but I have more money than time to spend on faffing about with stuff that should Just Work, so I threw $10 at NextDNS which solved all my issues instantly :)


I don't even have a clue how I solved it for myself, but again, didn't have a problem.


Just run it in a container. No need to use an actual Pi.


Same here. After a few SD Card corruptions, I was done.

NextDNS has been fantastic. And like you said, easily portable.


The Pi needs a bit more power than most USB powerplugs deliver, did you get any warnings about underpower? The SD Card corruptions are often caused by this.


> I have an automatic WireGuard VPN set up on my devices to VPN into my home network when I'm not connected to my SSID, so my local DNS still works remotely.

Exact same setup for me also.

I also run Tailscale since I have run into some remote networks that blocked wireguard's port.


How's the latency?

I like the idea and might set that up but my residential ISP doesn't have great peering and latency isn't great. I wonder if that extra roundtrip would be noticable or not.


I do this from my phone with crummy copper ADSL at home that gets <20Mbps in the uplink and don't notice the difference between it being on and being off. YMMV of course, and all I'm doing is basic web browsing, occasional youtube videos and chat apps but it's fine for that.


I'm on a 2 Gbps fiber link at home, so none as far as I'm concerned.


I do the same thing and am on 500mbps - don’t experience any issues


Too many false positives with Pi-Hole. I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town, unable to get into the pi-hole and sort out the issue.

I also had my banking app stop working one day. Never could get it working. Eventually I just got fed up with having to switch vlans or to mobile data to check my bank and got rid of the pi-hole.

The blocker on PFsense eventually had the same issue.

Realistically, I was probably running too many overly restricting blocklists for my actual needs.

But, I also don't want to fiddle with messing with the out of the block blocklists that also caused me issues.


I can empathize with the sometimes aggressive blocking, and as you pointed out can be pretty block list dependent.

I generally will go in and whitelist things if a site breaks due to a DNS block, but of course putting your partner on the same VLAN can be problematic. I "got around" that by having a button in Home Assistant that will completely turn off Pi-hole (and now AdGuard). So my partner will go in and toggle that if there's a problem.

AdGuard Home does also have the ability to completely disable blocking for specific clients.


I had similar issues and the problem with a white list is it can be very difficult to figure exactly which cryptic subdomain of some major company is necessary for the service to work, without just allowing everything and defeating the purpose .


Yeah - I usually watch the network tab in debugging tools to figure out whats being blocked, then whitelist and try again.

I also realize that you shouldn't expect most people to do that, let alone know how to.

I am someone who is very aggressively anti-ad.


Sure, if you’re accessing it in your web browser. But when it’s an app on someone else’s phone that’s misbehaving, that’s where I throw in the towel. It’s not worth the effort at that point.


> I never felt comfortable putting my partner on the same vlan that it was serving DNS requests for fear that something would break for them when I was out of town

One potential workaround, if your hardware supports it, is to broadcast two separate SSIDs for general users: one with a blocklist, and one without as a fallback. Users just need to know when to use each.


Couldn't you just monitor the query log and whitelist domains that were false positives?


"Just" is doing a lot of work in that sentence. That sounds like a lot of work, and it isn't always obvious which weirdly-spelled domain is causing the issue.


> "Just" is doing a lot of work in that sentence

Not really. You can pull your phone out and do it in less than a minute

> it isn't always obvious which weirdly-spelled domain is causing the issue

It typically /is/ pretty obvious. You can drill down to the device making the request, and it becomes obvious once you see the blocked query

To each their own though. I personally don't want to pay a company to do something for me that I can do myself.


I did have several issues with adguard home, after some time (or packets?) the dns wouldn’t resolve and basically you can’t open any website, you can ping with no issues but not opening the site, only resolved by either restarting the server or waiting few minutes, didn’t bother to troubleshoot it but I tried it on several hardware and got the same issues with different interruptions time.


I experience similar issues with Cloudflare Zero Trust (I have it setup to work as an ad blocker, using a Terraform config to update blocklists pulled from eg uBlock Origin sources). It'll work great most of the time, but when it stops working I need to disconnect and reconnect. Hard to complain since it's free, though.


Is there any config update to the wire guard profile needed to ensure that DNS request traffic is routed through pi-hole?


I use the bare WireGuard app on iOS. I just statically set the DNS server to the AdGuard Home IP (or Pi-hole IP) on my local network in the app.


I think op's saying local DNS was fine and preferred, just not usable outside the home network.


This is the way. Added Unbound as my upstream DNS server in recursive mode for extra privacy!


That’s wild. I’m right outside DC and last month I used 2066kWh for a total bill of $258.85. So, 0.13c/kWh.

I’m all electric heat pump. That ran for about 300hrs last month, so accounts for around 800kWh.


I don't understand how hours run equates to your calculation unless it was always pulling 2,7 kW. Is this some 30 year old setup that doesn't have an inverter-driven compressor?

Also, wow your electricity is really cheap.


I used to run a 5 node Ceph cluster on a bunch of ODROID-HC2's [0]. Was a royal pain to get installed (armhf processor). But once it was running it worked great. Just slow with the single 1Gb NIC.

Was just a learning experience at the time.

[0] https://www.hardkernel.com/shop/odroid-hc2-home-cloud-two/


Same here, but on PI 4b's. 6 node cluster with a 2tb hdd and 512 Tb ssd per node. CEPH made a huge impression on me, as in I didn't recognize how extensive the package was. I went up to 122mb/s and thought it's too little for my hack-NAS replacement :)

The functionality: mixing various pool types on the same set of SSD's, different redundancy types (erasure coded, replicated) was very impressive. Now I can't help but look down at a RAID NAS in comparision. Still, some extra packages like the NFS exporter were not ready for the arm architecture


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: