mullvad / dns-blocklists

Lists and configuration for our DNS blocking service
1.07k stars 45 forks source link

Achievements not working in Apple "Game Center" #123

Closed notDavid closed 11 months ago

notDavid commented 11 months ago

Hi there, as the title says, it's impossible to:

while DNS blocking is active the Mullvad VPN app.

The responsible domain causing the issue seems to be: stats.gc.apple.com.

Disabling the Dns content blockers fixes the issue. This is reproducible.

jbjorkang commented 11 months ago

This URL falls under the category of privacy, or rather tracking.

In general the point of the DNS block lists is to make browsing the Internet less frustrating, but primarily to block unwanted trackers, websites and hidden anti-privacy content.

In this instance there are three options:

  1. You disable the trackers option locally.
  2. We modify the block lists for each of these individual requests.
  3. We do nothing, and accept that portions of the web will break because they do not adhere to privacy respecting methods.

In general I personally have been quite lax about option 2, as in some cases there are some websites that just should not be blocked, as they were added by mistake.

In this case I believe that you are subject to case 3, where it does as is intended, and is blocking trackers and behaving in an anti-privacy.

notDavid commented 11 months ago

@jbjorkang Thank you for your reply;

Are you aware it's (frustratingly) breaking a functionality people are paying for (Apple Arcade Subscription) ?

jbjorkang commented 11 months ago

@jbjorkang Thank you for your reply;

Are you aware it's (frustratingly) breaking a functionality people are paying for (Apple Arcade Subscription) ?

I completely understand, perhaps the better angle would be to put pressure on the developers so that they do not gather and track their users instead?

notDavid commented 11 months ago

My point is: there is no option to exclude specific sites, to my knowledge. So it seems a bit overkill to keep this if it breaks functionality. We are being tracked by Apple in many other more intrusive ways.

The result of this block would be disabling the blocklists, which means it's not possible to use any (other) dns blocklist at all (on iPad, iPhone), so in that case it's better to stop using Mullvad and use another service that doesn't have this problem.

I share your frustration though - which is why i'm always supporting privacy initiatives (like Mullvad).

hagezi commented 11 months ago

@jbjorkang

Just a note, the domain is not used for "classic user tracking". It is only used for achievement "tracking" in the Game Center. Blocking breaks the Game Center achievement page and more.

That is why there are not many blocklists in which the domain is blocked:

Blocklists:
 - 1Hosts.Lite     OK
 - 1Hosts.Mini     OK
 - 1Hosts.Pro      OK
 - AdGuardDNS      OK
 - AhaDNS          OK
 - CONTROLD.AT     OK
 - DevDansHosts    BLOCKED
 - EasyList        OK
 - GoodbyeAds      OK
 - HaGeZi.LIGHT    OK
 - HaGeZi.NORMAL   OK
 - HaGeZi.PRO      OK
 - HaGeZi.PRO.PLUS OK
 - HaGeZi.TIF      OK
 - HaGeZi.ULTIMATE OK
 - hBlock          OK
 - NextDNS         OK
 - OISD.Big        OK
 - OISD.Small      OK
 - QuidsUp.NOTRACK BLOCKED
 - StevenBlack     OK
jbjorkang commented 11 months ago

I just investigated where we pull that from, and realise that the URL is from a private no longer updated list.

I will remove that list as it is not good to keep something never updated.

My mistake, thanks for reporting. The list will be updated on Monday again.

notDavid commented 11 months ago

Thank you for your contribution @hagezi , that's very useful info;

Curious, what's the source of that list / how can i generate in future cases?

notDavid commented 11 months ago

@hagezi To be clear, I was referring to the blocklists you mentioned...

That is why there are not many blocklists in which the domain is blocked:

Blocklists: ....

hagezi commented 11 months ago

@notDavid

The list is generated by a custom script on my build system. You can also check domains yourself, e.g. via

https://rethinkdns.com/search

https://dnswarden.com/search.html

notDavid commented 11 months ago

@hagezi Great, thank you 🙏🏼

notDavid commented 11 months ago

For reference, the related commit: https://github.com/mullvad/dns-blocklists/commit/70e1649a6e913c045ec78f4afb1f4fbaf43a96b3

notDavid commented 11 months ago

@jbjorkang Any idea when we can expect this to be live in the Mullvad VPN app?

jbjorkang commented 11 months ago

@jbjorkang Any idea when we can expect this to be live in the Mullvad VPN app?

I pushed the update yesterday. It should be live now, our block lists typically update daily server side.

Today or tomorrow.

notDavid commented 11 months ago

@jbjorkang fyi, still not working / resolving for me... (tested using Mullvad Vpn app on both macOS and iOS.)

dig ```log ~ ❯ dig +short stats.gc.apple.com ~ ❯ dig stats.gc.apple.com ; <<>> DiG 9.10.6 <<>> stats.gc.apple.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7267 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;stats.gc.apple.com. IN A ;; Query time: 58 msec ;; SERVER: 100.64.0.31#53(100.64.0.31) ;; WHEN: Thu Nov 23 07:54:23 CET 2023 ;; MSG SIZE rcvd: 47 ```
jbjorkang commented 11 months ago

I will look as soon as I can

notDavid commented 11 months ago

@jbjorkang Working correctly now... 🚀️ 🎉️ 👍🏼️

dig ```log ~ ❯ dig stats.gc.apple.com | grep -Ei 'ANSWER SECTION|$' ; <<>> DiG 9.10.6 <<>> stats.gc.apple.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34509 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;stats.gc.apple.com. IN A ;; ANSWER SECTION: stats.gc.apple.com. 27682 IN CNAME stats.gc-apple.com.akadns.net. stats.gc-apple.com.akadns.net. 300 IN CNAME stats.gc.fe.apple-dns.net. stats.gc.fe.apple-dns.net. 120 IN A 17.248.236.69 ;; Query time: 63 msec ;; SERVER: 100.64.0.31#53(100.64.0.31) ;; WHEN: Fri Nov 24 13:34:11 CET 2023 ;; MSG SIZE rcvd: 142 ```