Filter web browsing on iOS.

[Donut417]

My sisters in laws made a comment that they just randomly click links on websites when browsing on their phones. They are not always sure they are on a "Legit" site. So now my sister and brother in law are looking for software that might prevent bad stuff from happening due to the bad behavior. Seems the father in law has very little to no patients.  

 

She was looking at Norton 360 device protection and Bitdeffender. I have 0 experience with this type of protection for mobile devices. Because I know better than to click on sketchy shit. Is there any go to software that can filter out the bad sites. I did look in to Open DNS but it doesnt work for Cellular connections, at least on phones. My sister did look at the protection software that was offered via Verizon but the iPhone in question is not eligible. 

[Donut417]

Update. I was looking at Ad Guard, but Im confused. 

 

So they seems they offer 3 product

 

1. Ad Blocker Extension 
2. Ad Blocking software 
3. DNS filtering 

As hes on iOS I know we are going to have to pay which means option 1 is out as filtering phishing sites is not included in the free tier. So would option 2 or 3 be better? Seems option 2 is $80 for a life time license that does 3 devices where option 3 is $20/yr but does like 20 devices. 

 

I have the ad guard app on my iphone to block ads in safari and it seems to work decent. What all does the app cover? Is it only web browsers or does it do the whole device, minus a few apps like Youtube and Facebook. 

[Donut417]

Can anyone give an opinion on Malwarebytes vs AdGuard  app vs AdGuard DNS? 

 

Malwarebytes standard plan is $59.99/yr

AdGuard app is $29.88/yr OR $79.99 for Life time 

AdGuard DNS is $19.99 a year 

 

Im leaning towards the AdGuard app due to cost, because it does like 3 devices which works because we need protection for at least 2 devices. Its a one time cost. I just need to know how effective it is 

[NinJake]

The best thing to do is

 

1) segregate the network so that all your trusted devices are connected to said network. (and only those who practice online security are allowed to connect to this network) All others can go on the separate network, so if their phone becomes infected or whatever, at least they're only able to infect the other devices. If you can, isolate each of the untrusted devices from each other from communicating with each other all together, however for smart-home environments, this will break stuff. (I actually recommend creating a dedicated "IoT" only network for such devices.

 

2) get a raspberry pi or similar and host a pi-hole yourself to filter the dns traffic at the router level.

 

As for your questions regarding malwarebytes/adguard etc I'm not familiar with them so can not help there, hopefully someone else can chime in. (I have used malwarebytes free for scanning things in the past.

 

[Donut417]

4 hours ago, NinJake said:

The best thing to do is

 

1) segregate the network so that all your trusted devices are connected to said network. (and only those who practice online security are allowed to connect to this network) All others can go on the separate network, so if their phone becomes infected or whatever, at least they're only able to infect the other devices. If you can, isolate each of the untrusted devices from each other from communicating with each other all together, however for smart-home environments, this will break stuff. (I actually recommend creating a dedicated "IoT" only network for such devices.

 

2) get a raspberry pi or similar and host a pi-hole yourself to filter the dns traffic at the router level.

 

As for your questions regarding malwarebytes/adguard etc I'm not familiar with them so can not help there, hopefully someone else can chime in. (I have used malwarebytes free for scanning things in the past.

 

 They are worried he might get a virus or his Identity/ bank account stolen. Also the person in question doesn’t live with me or my sister. filtering via pihole doesn’t work as he connected to cellular data, I don’t think this guy owns a computer. He spends time at his property in northern Michigan which has 0 internet. He has to rely on his phone for connectivity. 
They are going to look in to Ad Gaurd and Malwarebytes offerings and just pick one. 

[NinJake]

52 minutes ago, Donut417 said:

They are going to look in to Ad Gaurd and Malwarebytes offerings and just pick one. 

Sounds good! It still wouldn't hurt to maybe send over a short 5 min video explaining basic web/internet security. (Especially if they do online banking or other things with personal info like that) 

[Donut417]

2 hours ago, NinJake said:

Sounds good! It still wouldn't hurt to maybe send over a short 5 min video explaining basic web/internet security. (Especially if they do online banking or other things with personal info like that) 

This guy has two mortgages on his house and barely has a pot to piss in. I dont think he really cares. My involvement in this adventure is just to the point of finding the solution and nothing more. Im not setting stuff up, Im not deploying hardware, etc. It just my sister and brother in law were worried he might do something really stupid. So they are just trying to do their best to protect him, because if he does something stupid they are the ones who is going to go to.