Well, it looks like I need to ressurect the #infosecfail tag.
For the past week, I've had bunches of ads leaking through, even though my pi-hole is working fine.
Turns out I had been tinkering in DD-WRT a while back, and I had accidentally changed a setting that allowed DNS requests to bypass the pi-hole. Not only that, I was allowing Firefox to send DoH requests, creating yet another bypass.
I throw myself at the mercy of the court.
#cososec
Mine:
I am at sisters house, waiting for the cable guy to install high speed internet, over coax.
Cable guy: so that's all set then, now all I need is a password.
Sister: Ah.... some password, ah... ok give me a minute.
Cable guy: done, let me write down the password...
"somepassword"
I did change it, but man did we laugh about it.
^ For those who don't remember, I suggested the #infosecfail tag were we can publicly air embarrassing #infosec mistakes.
I'm sure even the pros here have them. Let's hear it. Change names to protect the guilty, etc.