Hacker fits 537,000 ad-blocking domains onto a $5 ESP32 dongle

A $5 chip that blocks 537,000 ad-serving and tracking domains on your entire network sounds like a hobbyist party trick. It's actually a useful reminder that privacy infrastructure doesn't have to cost much, and that the tools available to small businesses are quietly getting very good.

What Actually Happened

A developer has built an ad-blocking DNS filter (think of it as a bouncer for your internet connection, turning away requests to known ad and tracking servers before they even load) into an ESP32 microcontroller. The ESP32 is a tiny, cheap chip that normally lives inside smart home gadgets and DIY electronics projects. The firmware running on it manages to hold a blocklist of over half a million domains while using roughly 50 kilobytes of RAM, and it can reject a blocked lookup in around 10 milliseconds.

To put that in context: a single tab in Chrome often consumes more RAM than this entire system. The engineering here is genuinely clever, even if the end result looks like a bit of hardware you'd find in a junk drawer.

Why This Is Bigger Than It Looks

The mainstream ad-blocking conversation tends to focus on browser extensions, which only protect one device at a time and can be disabled or bypassed. A network-level DNS filter covers every device that connects to your router, including phones, smart TVs, printers, and anything else that quietly phones home to ad networks or data brokers.

Until recently, setting up something like this required a Raspberry Pi running Pi-hole, a bit of Linux knowledge, and an afternoon you probably didn't have. The fact that something this capable now runs on a $5 chip with minimal configuration overhead changes the accessibility of the whole thing. The barrier to giving your office network a meaningful layer of privacy protection has dropped considerably.

What This Means If You Run a Business

Your network is almost certainly leaking more data than you realise. Every device connected to your office Wi-Fi, every smart speaker, every laptop running a dozen browser tabs, is making constant background requests to analytics platforms, advertising networks, and tracking services. Most of that is benign in isolation, but it represents real data about your team's behaviour, your browsing habits, and your business operations leaving your network.

For freelancers and small business owners, this matters for two reasons. First, there's a genuine privacy case for keeping your network traffic cleaner, particularly if you work with clients in regulated industries. Second, blocking ad and tracking requests at the DNS level can meaningfully speed up browsing and reduce the background noise your devices are generating, which has a modest but real effect on performance.

The deeper point is that hardware innovation is quietly democratising tools that used to require dedicated IT infrastructure. You don't need a server room or a managed network provider to implement sensible defaults.

What To Do About It

1. 1.Audit what's on your network. Before adding any filtering layer, know what devices are connected. Most modern routers have a device list in their admin panel. Anything you don't recognise should be investigated or removed.

1. 1.Look at Pi-hole or AdGuard Home as a starting point. Both are free, well-documented, and run on cheap hardware. They give you a dashboard showing exactly what DNS requests your network is making, which is useful on its own before you block anything.

1. 1.Consider DNS-over-HTTPS for your router. Several consumer routers now support this natively. It encrypts your DNS lookups, meaning your internet provider can't see which domains you're querying. Takes about ten minutes to enable on most modern hardware.

1. 1.Don't rely solely on browser extensions for privacy. Extensions are a decent start but they only cover one browser on one device. Network-level filtering is a better foundation.

1. 1.Check whether your current router firmware is up to date. This is worth doing regardless. Outdated router firmware is one of the more common and more overlooked security gaps in small business setups.