Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/awilliams/virtu
Block Vizio televisions from accessing the internet and creating a WiFi access point
https://github.com/awilliams/virtu
Last synced: about 1 month ago
JSON representation
Block Vizio televisions from accessing the internet and creating a WiFi access point
- Host: GitHub
- URL: https://github.com/awilliams/virtu
- Owner: awilliams
- License: mit
- Created: 2022-03-18T19:55:16.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2022-03-19T18:18:05.000Z (almost 3 years ago)
- Last Synced: 2024-06-19T16:43:01.787Z (7 months ago)
- Language: Go
- Size: 6.84 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# virtu
Stop Vizio TV from accessing the internet *and* from starting an open WiFi access point.
### About
"_[Vizio makes nearly as much money from ads and data as it does from TVs](https://www.engadget.com/vizio-q1-earnings-inscape-013937337.html)_".
Vizio televisions can be unplugged from the internet, unfortunately this may trigger the television to stand up an open WiFi access point (`Television.e000`).
What follows is a (convoluted) setup to block the television from the internet, along with preventing it from creating an AP.
### Connectivity Check
Through experimentation, it was found that the television will *not* start an AP if:
* It can make a HTTPS requests to `connectivitycheck.gstatic.com`
* It can make NTP requests
The following firewall/iptables rule can be used to block all traffic *except*:
* TCP traffic on port 443 (HTTPS) to the IP range of `connectivitycheck.gstatic.com`
* UDP traffic on port 123 (NTP)
The IP range for `connectivitycheck.gstatic.com` (in this case `142.250.0.0/15`) was determined by:
1. Doing a DNS lookup of `connectivitycheck.gstatic.com`
2. Then finding the corresponding block in https://www.gstatic.com/ipranges/goog.json
```
Chain Blackhole (1 references)
target prot opt source destination
RETURN udp -- 0.0.0.0/0 0.0.0.0/0 /* Blackhole-10 */ state NEW,RELATED,ESTABLISHED match-set Blackhole src udp dpt:123
RETURN tcp -- 0.0.0.0/0 142.250.0.0/15 /* Blackhole-20 */ state NEW,RELATED,ESTABLISHED match-set Blackhole src tcp dpt:443
DROP all -- 0.0.0.0/0 0.0.0.0/0 /* Blackhole-30 */ match-set Blackhole src
RETURN all -- 0.0.0.0/0 0.0.0.0/0 /* Blackhole-10000 default-action accept */
```
The match-set "Blackhole" was assigned to the television's IP.
### DNS
As an additional step, the television's DNS can be redirected to the DNS resolver found in this repository.
The resolver returns the loopback address to all queries except those in a "forward" list (default is `connectivitycheck.gstatic.com, pool.ntp.org`).
Vizio televisions have been found to make a significant number of DNS requests.
#### Usage
Build:
```shell
go build
```
Run:
```shell
sudo ./virtu -port 53
```
#### dnsmasq
The DNS settings of the television can be set manually.
If using `dnsmasq` as a DHCP server, the following configuration can be used to assign the television a separate DNS resolver (such as `virtu`).
```
# Set hosts tagged with 'blackhole-dns' to use 10.0.1.8 as their DNS server.
dhcp-option=tag:blackhole-dns,option:dns-server,10.0.1.8
```
Then "tag" hosts with `blackhole-dns` to assign them the alternative DNS.
```
# tv
dhcp-host=aa:bb:cc:dd:ee:ff,set:blackhole-dns,10.0.1.110,tv
```