“`html

Are You the Product? Understanding and Protecting Your Online Privacy

So I stumbled across this video where Dave from Dave’s Garage breaks down how ISPs can resell your browsing data based on DNS queries. Spoiler alert: It’s not as scary as it sounds, but it is something you should know about.

Why This Topic Matters

The internet has evolved into a complex ecosystem where your data is constantly in transit. Understanding how your information is being used (and misused) by ISPs can help you make more informed decisions about your online privacy.

The Problem with DNS Data

Dave makes a compelling case that most people don’t understand what their Internet Service Provider (ISP) sees when they browse the web. The crux of the issue lies in Domain Name System (DNS) queries, which are essentially like phone book lookups for websites.

Key Insight 1: DNS is Like a Gossipy Neighbor

The YouTuber explains that your browser doesn’t know where to find a website like example.com. It uses DNS to get the IP address of the site. This process happens every time you visit a new domain, and it’s not encrypted by default.

Key Insight 2: HTTPS Encrypts Content but Not Metadata

Even though HTTPS encrypts your browsing data, Dave points out that DNS queries are still sent in plain text. This means your ISP can see which domains you’re visiting and when. It’s like having a nosy neighbor who keeps tabs on everyone coming to visit.

Key Insight 3: VPNs Aren’t the Magic Bullet

The YouTuber makes an excellent point about how many people believe that using a Virtual Private Network (VPN) will solve all their privacy issues. While VPNs do hide your browsing data from ISPs, they often just shift who can see it to the VPN provider.

Protecting Your DNS Data

Dave suggests several practical steps you can take to protect yourself. Encrypted DNS (DNS over HTTPS or DNS over TLS) is one of the most effective methods he covers.

The Power of Encrypted DNS

By switching to a secure DNS resolver like Cloudflare’s 1.1.1.1, Google Public DNS, or Quad9, you can encrypt your DNS queries so that even if someone intercepts them, they won’t be able to read the data.

Setting Up Encrypted DNS

Here are some steps Dave mentions for setting up encrypted DNS on different platforms:

• Windows 11: Go to Network & Internet settings and set a secure DNS server like Cloudflare’s 1.1.1.1.
• MacOS/iOS: Install a custom DNS profile that points at an encrypted DNS provider.
• Android: Use the Private DNS setting to enter a hostname like dns.quad9.net or 1.1.1.1.

The Limitations of Encrypted DNS

While encrypted DNS is a powerful tool, Dave doesn’t sugarcoat its limitations. Destination IPs still exist and can be used to infer browsing habits through pattern recognition. But in most practical scenarios, it’s a significant step up from unencrypted DNS.

Running Your Own Resolver

For the more tech-savvy users, Dave suggests running your own recursive resolver using tools like Unbound or Adguard Home on a Raspberry Pi. This way, you have complete control over your data and can choose what to log (or not).

The Bottom Line: Are You the Product?

Dave wraps up with an insightful question: are you aware that your metadata is being used as a product? It’s a wake-up call for many who assume HTTPS makes them invisible online.

What I’d Add

Here’s where I’d do things differently. While Dave does mention the limitations, I think it would be valuable to discuss more about how different encrypted DNS providers handle privacy policies and data retention periods. Transparency is key when deciding who you trust with your browsing data.

Conclusion

The reality of online privacy is complex, but taking control of your DNS queries can significantly reduce the amount of personal information that’s available to ISPs. While no solution is perfect, it’s essential to make informed decisions and use tools like encrypted DNS to protect yourself.

Written By: Ada Codewell – AI Specialist & Software Engineer at Gray Technical