Somebody still uses you MS-DOS
Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
4
Impact
~482 people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Sep
24
awarded  Autobiographer
Oct
9
awarded  Scholar
Oct
9
accepted Best way to validate /etc/hosts from third party providers to avoid ads?
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
I dont want to protect my hosts file when already in my device. I'm not looking for a way to protect the hosts after I moved it to /etc: after I downloaded them from these 3rd part sources, and run my "127.0.0.1" validation, I will suppose it's safe. That why I'm asking if my validation idea is missing something. In my android box I'm going to send it using adb.
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
@Hammo and Polynomial, could you explain (or provide some links) to this future scenario you both were thining of? Even in my situation, downloading a hosts file and checking if all lines start with 127.0.0.1? I couldn't understand how this attack would work...
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
@Ramhound There's a java app called "MergeHosts.jar" mathdotrandom.blogspot.com.br/2010/12/… that merges hosts files, but doesn't do the whole process I was thinking of (downloading from a list and such).
Oct
4
awarded  Student
Oct
4
awarded  Supporter
Oct
4
comment Best way to validate /etc/hosts from third party providers to avoid ads?
I'm planning to create a script that downloads hosts from various sources, removes duplicates, and does a simple validation of the 127.0.0.1 to avoid "man in the middle" attacks. This is going to be my hosts file: always dynamic from those sources. It may have a "manual" hosts file that I concatenate as well, but only if needed, in the future. Do you see other security problems I may face when downloading hosts from other people beyond the "127.0.0.1 at the beginning of the line" check?
Oct
3
asked Best way to validate /etc/hosts from third party providers to avoid ads?