MineTurte wrote:

BigNate469 wrote:

kRxZy_kRxZy wrote:

MarvelousCodes wrote:

snip

Schools don't block these sites, they use an app that they pay for which blocks all games and inappropriate content.

And my school manages to not pay for the app, and not use the app, but still block many websites.

Again, DNS Sinkhole

Blocking apps have gotten a lot more intricate, at least for my school. They don't use DNS or internet to block websites. They actually use 3 methods to. First is a chrome extension that I assume contains a blacklist of websites not allowed. I know for sure it's a blacklist and not a whitelist because people still find websites with games unblocked, which wouldn't be possible with a whitelist. Second is built into the computer, aka enrollment. The school's Chromebooks are specifically built for school and have the blacklist manually put in during creation. I know this because every time the school changes blocking providers, everything gets reset. All Chromebooks get pulled back and sent out again.

maybe a little TMI…

Well your IT is stupid cuz you don't bake the restrictions onto your chromebook, they use a little website called the Google Admin Console where you can modify stuff and have it effect everyone in less than 20 seconds. They can remove the old blocker extension and replace it with a new one by putting the IDs of it into the “ExtensionInstallForcelist” (or smthn like that) policy

and also, Google doesn't make chromebooks specifically for your school, whenever you factory reset it then during the setup proccess it asks Google if it was previously enrolled and then enrolls it once again and applies the restrictions

WindowsAdmin wrote:

Well your IT is stupid cuz you don't bake the restrictions onto your chromebook, they use a little website called the Google Admin Console where you can modify stuff and have it effect everyone in less than 20 seconds. They can remove the old blocker extension and replace it with a new one by putting the IDs of it into the “ExtensionInstallForcelist” (or smthn like that) policy

and also, Google doesn't make chromebooks specifically for your school, whenever you factory reset it then during the setup proccess it asks Google if it was previously enrolled and then enrolls it once again and applies the restrictions

IT is just really paranoid. Also surprisingly factory reset doesn't exist. When you try to factory reset, it just restarts normally (even signs you in automatically after you logged out). Also the one time I did unenroll my chromebook, it still wouldn't let me login without a school email…

MineTurte wrote:

WindowsAdmin wrote:

Well your IT is stupid cuz you don't bake the restrictions onto your chromebook, they use a little website called the Google Admin Console where you can modify stuff and have it effect everyone in less than 20 seconds. They can remove the old blocker extension and replace it with a new one by putting the IDs of it into the “ExtensionInstallForcelist” (or smthn like that) policy

and also, Google doesn't make chromebooks specifically for your school, whenever you factory reset it then during the setup proccess it asks Google if it was previously enrolled and then enrolls it once again and applies the restrictions

IT is just really paranoid. Also surprisingly factory reset doesn't exist. When you try to factory reset, it just restarts normally (even signs you in automatically after you logged out). Also the one time I did unenroll my chromebook, it still wouldn't let me login without a school email…

They can block the Ctrl+Alt+Shift+R way to reset but they can't block the “going into and going out of developer mode” (even when it's blocked)

and also what you just described wasn't unenrolling, If your chromebook unenrolls itself then the next step after connecting to Wifi in the setup will be choosing if you or a child is using it (And lets you login to a google account)

MarvelousCodes wrote:

I didn't say the US government is trying to rid the WebGL, I'm saying the school administrators that take place in US or other countries are starting to prevent WebGL for the chromebooks using the devices. It affects some of the websites, including scratch, but not all.

They're removing it to “essentially” block scratch.

Most schools aren't willing to completely disable WebGL, since many, many online simulations of things use it, which they may be using in classrooms.

ninjaMAR wrote:

BigNate469 wrote:

snip

DNS runs on UDP and TCP – if TLS isn't used (it mostly isn't for DNS), then network traffic can be snooped on. I don't think self hosting a DNS server would work. If it's recursive, it would need to connect to other servers and fetch the records. If it isn't recursive, then it isn't feasible to store every single record (unless you only want to access certain sites)

In this case, you would only need to intercept DNS requests for websites you know are blocked, lowering the number of URL to IP values you would need to store dramatically. For everything else, the locally hosted DNS would just forward the request to whatever DNS servers are already being used.

Honestly it's a bit more like a JavaScript Service Worker than a DNS server, that instead of returning the cached version of a page returns an IP address (and potentially a port) to connect to in some cases.

“Democratic Republic of Korea”

carsonsalt0205 wrote:

“Democratic Republic of Korea”

This is literally north korea, I guess they didn't have to turn the games website “off”, eh? Ha! Heh heh.