<![CDATA[Sooo question on age restriction on Apple devices.]]>Sooo question on age restriction on Apple devices.

Non-age-verified people will get blocklist messages on any 18+ website on, right? This also happens if you have custom DNS, DoH/DoT, or VPN with DNS resolution on the other end...

So Apple intercepts the DNS request, checks against their blocklists before anything else happens?

]]>https://board.circlewithadot.net/topic/bb42c3ae-74d8-46c1-8b0e-31b9c4f17ac7/sooo-question-on-age-restriction-on-apple-devices.RSS for NodeFri, 15 May 2026 08:05:12 GMTWed, 15 Apr 2026 22:18:45 GMT60<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Thu, 16 Apr 2026 18:49:21 GMT]]>@ridogi which effectively means Apple have backdoored our DNS.

Every query leaks your request elsewhere, in an unknown location.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SecurityWriter/statuses/116415880300936694https://board.circlewithadot.net/post/https://infosec.exchange/users/SecurityWriter/statuses/116415880300936694Thu, 16 Apr 2026 18:49:21 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Thu, 16 Apr 2026 17:46:50 GMT]]>@SecurityWriter well currently using DoH along with Private Relay causes it to do 2 lookups for each request, so age restriction could be built similar to Private Relay.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/ridogi/statuses/116415634521227727https://board.circlewithadot.net/post/https://mastodon.social/users/ridogi/statuses/116415634521227727Thu, 16 Apr 2026 17:46:50 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Thu, 16 Apr 2026 00:55:28 GMT]]>@SecurityWriter I block all DNS at the packet level on my router. See, I can do packet inspection too. But if they have a home grown DNS protocol all their own would love to read about it. Then I’ll block that too.

Not sure it correlates, but my WiFi only iPad did an age thing this weekend when I did my daily Fallout Shelter thing. Wonder if those packet logs are still available… Anyway, besides my Wi-Fi subnet blocking external DNS requests, the iPad has NextDNS running. Are they just ignoring that whenever they want now?

I know my LG TV has hard wired DNS. That’s why it’s banished to the IoT subnet of shame. That subnet is very canonical.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/Spartan_1986/statuses/116411657671182043https://board.circlewithadot.net/post/https://infosec.exchange/users/Spartan_1986/statuses/116411657671182043Thu, 16 Apr 2026 00:55:28 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Wed, 15 Apr 2026 23:08:15 GMT]]>@SecurityWriter yet another reason to nit use devices, if their willingness to integrate - in the "P.R." and hosting like in wasn't already…

]]>https://board.circlewithadot.net/post/https://jorts.horse/users/kkarhan/statuses/116411236061940719https://board.circlewithadot.net/post/https://jorts.horse/users/kkarhan/statuses/116411236061940719Wed, 15 Apr 2026 23:08:15 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Wed, 15 Apr 2026 23:07:13 GMT]]>@SecurityWriter sounds like something they could do and charge you for

]]>https://board.circlewithadot.net/post/https://beige.party/users/Kierkegaanks/statuses/116411231984579092https://board.circlewithadot.net/post/https://beige.party/users/Kierkegaanks/statuses/116411231984579092Wed, 15 Apr 2026 23:07:13 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Wed, 15 Apr 2026 22:39:10 GMT]]>@SecurityWriter

I have no special knowledge of how Apple's doing things but ultimately apps default to the OS supplied method of name resolution, so the concept of interception doesn't really apply.

Now, if the app uses special techniques to bypass local DNS resolution for the app itself, that'd be one thing. I dunno if many iOS apps do that but I do know a handful of Android apps which do.

]]>https://board.circlewithadot.net/post/https://infosec.space/users/fennix/statuses/116411121700946870https://board.circlewithadot.net/post/https://infosec.space/users/fennix/statuses/116411121700946870Wed, 15 Apr 2026 22:39:10 GMT<![CDATA[Reply to Sooo question on age restriction on Apple devices. on Wed, 15 Apr 2026 22:20:25 GMT]]>@SecurityWriter Following this thread

]]>https://board.circlewithadot.net/post/https://hactivedirectory.com/users/josh/statuses/116411047964494787https://board.circlewithadot.net/post/https://hactivedirectory.com/users/josh/statuses/116411047964494787Wed, 15 Apr 2026 22:20:25 GMT