cross-posted from: https://links.hackliberty.org/post/2005038
I know this is an outrageously bad idea, I don't need convincing. I am just looking for some more information and discussion on what exactly the exposure and surveillance risk is.
I'm asking both for my own education (I am still very green to networking), and to better explain to people in my life if and why they should care.
-
Is it true that traffic can be tracked and logged by ISP through DNS lookups, as these routers are preconfigured to use their internal dns service?
-
If this is changed (like base.dns.mullvad.net), how much does this actually mitigate the risk here?
-
What about when a VPN (mullvad) is also being used at all times? Would it then be "overly paranoid" to fear this untrusted box all the traffic goes through?
I personally take a conservative approach to things like this and assume it's an unacceptable risk, but I don't really understand what the truth is.
Thank you in advance for your time and thoughts.
EDIT: I'm asking about US and US adjacent areas
Someone more technologically savvy than me can probably give you an answer but is there any reason why you'd use an ISP-provided router? Those "rental" fees are outrageous considering the fact that you can buy a Nighthawk for the price of only a few months payments.
No, but how am I supposed to convince someone I care about who might not even care that much about privacy/security to change their working internet setup when I don't even fully understand the situation and can't explain it to them?
I agree with your sentiment but I think you may have misunderstood me.
They may not know if it is changed 😄