IoT Telemetry Firewall That Catches What DNS Blocking Misses

desktop app real project •• multiple requests

Pi-hole and AdGuard Home are the go-to for blocking smart home telemetry, but devices increasingly bypass DNS via hardcoded IPs, DNS-over-HTTPS, and certificate pinning. One developer documented Philips Hue, Amazon Echo, and even NordVPN and Firefox phoning home despite disabled telemetry settings. Users want network-level visibility and blocking that goes beyond DNS sinkholes.

builder note

The play is a Raspberry Pi image (or Docker container on a home server) that does deep packet inspection at the network level, auto-discovers IoT devices by MAC/fingerprint, and applies device-specific blocking profiles. Think Pi-hole but with IP-level blocking and traffic anomaly detection. The 'telemetry report card' showing exactly what each device tried to send is the feature that sells it.

landscape (3 existing solutions)

DNS blocking catches maybe 60-70% of IoT telemetry. The remaining 30-40% goes through hardcoded IPs, DoH tunnels, and certificate-pinned connections that no DNS sinkhole can see. Proper firewall rules can catch more but require per-device manual configuration on pfSense/OPNsense. Nobody has built an IoT-specific firewall appliance that combines DNS blocking, IP reputation, traffic analysis, and device profiling into one self-hosted tool with a consumer-friendly UI.

Pi-hole DNS-level only. Completely blind to hardcoded IPs, DNS-over-HTTPS, and direct connections. Doesn't block IPv6 AAAA records by default.
AdGuard Home Better than Pi-hole with DoH/DoT support but still DNS-only. Cannot intercept direct IP connections from IoT firmware.
pfSense / OPNsense NAT rules Can redirect all DNS and block known telemetry IPs at the firewall level, but requires significant network expertise to configure. No IoT-specific profiles or device fingerprinting.
sources (3)
other https://dev.to/yuribe/your-smart-home-is-snitching-on-you-dn... "AdGuard only sees DNS requests. Apps that hardcoded IPs bypass entirely" 2026-03-10
other https://www.xda-developers.com/built-firewall-that-blocks-io... "I built a firewall that blocks IoT devices from phoning home" 2026-02-15
other https://www.xda-developers.com/your-dns-filters-are-probably... "Your DNS filters are probably being bypassed" 2026-01-28
IoTprivacysmart-homefirewallself-hosted

Getting a complete document intelligence workflow running locally requires stitching together Paperless-ngx for storage, Stirling PDF for manipulation, paperless-gpt for AI tagging, and custom scripts for the gaps. Built-in OCR still fails on tables and photographs. Users want one self-hosted pipeline that handles scan-to-searchable-archive with AI categorization without uploading anything to the cloud.

builder note

Don't rebuild Paperless-ngx. Build the missing middle layer: a local OCR+AI service that accepts documents via API, runs vision-model OCR (not Tesseract), classifies, extracts structured data, and pushes results back to Paperless-ngx or any document store. Ship it as a single Docker container with Qwen-VL or similar baked in.

landscape (3 existing solutions)

The pieces exist but the pipeline is fragmented across 3-4 separate tools requiring Docker expertise to glue together. The approaching native AI in Paperless-ngx may close part of this gap, but the OCR quality problem (tables, photos, handwriting) persists because Tesseract is the bottleneck. Vision-capable local LLMs are the solution but integration is DIY.

Paperless-ngx Excellent document management but built-in Tesseract OCR fails on tables, photos, and complex layouts. AI integration is bolted on via third-party tools, not native. Official AI integration is coming but timeline unclear.
Stirling PDF PDF manipulation powerhouse with OCR support, but it's a tool, not a pipeline. No automatic classification, no persistent document store, no search index.
paperless-gpt / paperless-ai Bridges the AI gap for Paperless-ngx but requires separate deployment, configuration, and maintenance. PDF text layer generation only works with Google Cloud AI, defeating the local-only purpose.
sources (3)
other https://github.com/icereed/paperless-gpt "LLM Vision OCR to handle paperless-ngx documents" 2026-03-01
other https://github.com/paperless-ngx/paperless-ngx/discussions/5... "Alternative OCR engines requested for better accuracy" 2026-01-20
other http://www.blog.brightcoding.dev/2026/01/16/offline-ocr-revo... "offline OCR revolution transforming local document processing" 2026-01-16
self-hostedOCRAIdocumentsprivacy

Photographers are leaving Adobe in unprecedented numbers over subscription fatigue (prices up 118% since 2015) and AI training concerns. Individual alternatives exist (Affinity, DxO, Capture One) but the migration path is brutal: decades of Lightroom catalog metadata, keyword hierarchies, and non-destructive edits cannot transfer cleanly. The real demand is not for another photo editor but for a migration bridge and unified workflow that doesn't require learning five separate apps.

builder note

The photo editor market is crowded. Don't build another one. Build the migration tool. A Lightroom catalog exporter that maps edits to open formats and preserves the full keyword/collection hierarchy would be the wedge product that pulls photographers into any alternative ecosystem.

landscape (3 existing solutions)

Individual alternatives to Photoshop and Lightroom exist and are getting better. But nobody has built the Lightroom-to-X migration tool that preserves metadata, keywords, and edit history. That migration bridge is the real bottleneck keeping photographers locked into Adobe.

Affinity Suite (Canva) Recently acquired by Canva raising future pricing and privacy concerns. No Lightroom catalog migration path.
DxO PhotoLab Excellent raw processing but single-purpose, no unified workflow, $240 price point for one tool
darktable + GIMP Free and open source but UX is notoriously rough. No Lightroom catalog import. Steep learning curve deters casual photographers.
sources (3)
other https://www.thephoblographer.com/2026/02/20/photographers-le... "Adobe's shady business practices trick people into subscriptions" 2026-02-20
other https://fstoppers.com/software/how-break-adobe-2026-subscrip... "Moving thousands of edited images without losing adjustments" 2026-03-15
other https://www.dqindia.com/news/adobe-ai-controversy-why-are-cr... "Training their AI off image libraries without paying royalties" 2026-01-28
adobe-alternativephotographyanti-subscriptionprivacycreative-tools

With Pocket dead (Mozilla shutdown May 2025) and Omnivore gone, self-hosted alternatives like Wallabag, Karakeep, and Linkwarden are great bookmarkers but poor readers. Users explicitly say these tools lack a comparable native reading experience. The gap is not in saving links but in the distraction-free, cross-device reading UX that made Pocket sticky.

builder note

Don't build another link saver. Build the reader. The moat is in native mobile apps with beautiful typography, offline sync, and text-to-speech. Wallabag proves the self-hosted backend is a solved problem. The unsolved problem is making people want to open your app to read.

landscape (3 existing solutions)

The self-hosted bookmark space is crowded but the self-hosted reading experience space is empty. Every alternative optimizes for organizing and archiving links. Nobody is building the reading experience (typography, pagination, offline native apps, text-to-speech) that made Pocket worth using daily.

Wallabag Grandfather of self-hosted read-later but mobile reading experience is dated and clunky compared to Pocket's polish
Karakeep AI tagging is excellent but it is fundamentally a bookmark manager, not a reader. Reading view is an afterthought.
Readwise Reader Best reading UX available but cloud-only, subscription-based, and not self-hostable
sources (3)
hn https://news.ycombinator.com/item?id=44064987 "I wish Mozilla would open-source Pocket for self-hosting" 2026-03-30
other https://shom.dev/posts/20250629_bookmarking-i-mean-omnivorin... "They all work better for bookmarking than reading" 2025-06-29
other https://beemind.app/blog/best-read-it-later-apps "Pocket shutting down and Omnivore already gone" 2026-03-15
read-laterpocket-alternativeself-hostedreading-uxoffline

People accumulate thousands of files across laptops, external drives, and cloud storage with no organization. AI file sorters exist but all work on a single device and automatically move files without asking. An HN user requested an AI assistant that scans files across multiple devices, proposes an organization plan with before/after preview, and only executes after human approval. The 'undo-friendly' requirement rules out every existing tool.

builder note

The cross-device part is the hard problem. Use Syncthing or a lightweight agent on each device that indexes file metadata (name, type, size, creation date, content hash) without moving anything. The AI proposes an organization plan based on the unified index. The user reviews a before/after tree view and approves. Only then do files move. The approval workflow is what differentiates this from every 'auto-sort' tool that terrifies users who fear losing files.

landscape (4 existing solutions)

AI file organizers in 2026 all work on single devices and single folders. None scans across multiple machines, proposes a unified organization scheme, and waits for human approval before moving anything. The cross-device gap is fundamental: your Downloads folder on your laptop, your project files on your desktop, and your phone photos all need to be organized together, not in isolation. AI File Sorter's preview workflow is the right UX pattern but needs cross-device reach.

AI File Sorter Cross-platform desktop app with preview-based workflows and local AI (LLaVA). Closest to the need with dry-run mode. But single-device only, no cross-device scanning, and no persistent organizational rules that learn from your approvals.
Sorted App Takes a messy folder and organizes it into subfolders. Simple and effective for single folders. But no preview/approval step, no cross-device support, and no content-aware organization beyond file type.
Sparkle Mac-only cleaner and file organizer with AI. Good for finding duplicates and reclaiming storage. But focused on cleanup/deletion, not intelligent organization. No cross-platform support.
Dropbox Smart Sync AI-powered file management within Dropbox's ecosystem. But only works with files already in Dropbox. Cannot organize local files across devices. Requires Dropbox subscription.
sources (2)
other https://github.com/hyperfield/ai-file-sorter "preview-based workflows, and fully user-controlled changes" 2026-02-01
other https://clickup.com/blog/ai-file-organizers/ "8 Best AI File Organizers for Windows and Mac in 2026" 2026-03-01
productivityAIfile-managementlocal-firstcross-platform