Who do you trust? And do you trust them indefinitely far into the
future?
If you have specific reasons to believe you will be targetted by an
interested, competent, resourceful attacker: you need serious
information security measures, which will be painful and potentially
expensive in both time and money. I have no such specific fears, so I’m
merely interested in protecting my household against generalized
attacks, the sort of thing that Google and Facebook and Amazon and every
advertiser in the world carries out as a matter of course.
In this installment, I’m going to increase the difficulty of tracking
my household network via intercepting DNS requests. I will assume you
know a fair amount about DNS and feel comfortable configuring daemons
and running them – this isn’t a step-by-step HowTo.