Pages

Thursday, April 16, 2026

Your IoT devices are your enemy

Internet of Things (IoT) devices are generally considered useful, right? Hell, one could even say made for you specifically. Truth is, though, they do a little more than that. A lot more.

Data for dinner

These devices are very good at 2 things: one, doing exactly as advertised. Two, selling your data to bits. Because these are usually just seen as common appliances, you often use them without thinking. Turn on a light, tap a button on your toaster that makes it toast, open up the fridge, whatever.

Smart devices, because they essentially have a mini computer inside them, and plenty of sensors, track this. See when you regularly flick a light switch, grab the milk from your fridge, put your clothes in the dryer. All of this is harvested, especially if you have an ecosystem of smart devices of the same brand. This can build information profiles on you, which are then sold to whoever is the highest bidder.

Smart devices are often sneaky and chatty little bastards, too.  Because you can’t install a custom Linux distro on your smart microwave, the information flows to and from the appliance and some servers in some dark warehouse in the midwest US completely unseen. They will constantly ping servers with new information and data, slowly giving the manufacturer a general idea of you and your habits.

But whatever will you do? Try out

Starvation

Thankfully, there are ways to figure out what exactly is being sent, and stop it.

My personal favorite way to do this is DNS. Obviously, because your washing machine doesn’t have DNS settings, you can’t set it there, but you can set it on the next best place: your router, or a hotspot.

This is what I do, and have been doing for numerous months. And, wow, it really is disgusting, looking at the DNS logs. I use NextDNS, which is fairly novice friendly while still giving granular console, especially if you’re using the TUI/console app. I’m sure you’ll be just as disgusted as me, once you look at the logs. My DNS profile has every filter and setting on, as well as some more domains in the Denylist, which is a lot when all combined. Works for me, may not work for you. Experiment and find the sweet spot.

When you block the data harvesting domains for these IoT appliances, they usually still work. May lose one or two obscure features, but it’s really nothing to sob about.

Roku is one of the worst offenders. The DNS logs will get bloated, as they will constantly try to phone home to their servers to send lots of disgusting data, including watching habits, ad personalization, and even snapshots of what is on the screen, no matter what it is: the screensaver, a game console like the Wii U, the home screen, or an app like Hulu+. Blocking them via DNS is definitely worth it, next best option is getting a more privacy-conscious smart TV or just ditching the whole smart TV idea and, say, hooking up your computer to the TV.

Conclusion

At the end of the day, convenience comes as a cost, a cost that is constantly changing and becoming more and more worth it to dodge. The line between smart device and surveillance machine (looking at you, Ring) is becoming more and more difficult to spot. Your smart dryer may just seem as a little harmless thing, but when you add up all of the “harmless” smart devices, it becomes a whole lot more dangerous. Anyways, if you want more tips on dodging data and learning about privacy, be sure to tune into the CheeseBlog for another post. Cya!