113 reputation
4
bio website
location
age
visits member for 2 years, 1 month
seen Sep 9 at 7:07

Just kidding. MS-DOS, you broke my heart. No more.


Sep
24
awarded  Autobiographer
Oct
9
awarded  Scholar
Oct
9
accepted Best way to validate /etc/hosts from third party providers to avoid ads?
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
I dont want to protect my hosts file when already in my device. I'm not looking for a way to protect the hosts after I moved it to /etc: after I downloaded them from these 3rd part sources, and run my "127.0.0.1" validation, I will suppose it's safe. That why I'm asking if my validation idea is missing something. In my android box I'm going to send it using adb.
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
@Hammo and Polynomial, could you explain (or provide some links) to this future scenario you both were thining of? Even in my situation, downloading a hosts file and checking if all lines start with 127.0.0.1? I couldn't understand how this attack would work...
Oct
5
comment Best way to validate /etc/hosts from third party providers to avoid ads?
@Ramhound There's a java app called "MergeHosts.jar" mathdotrandom.blogspot.com.br/2010/12/… that merges hosts files, but doesn't do the whole process I was thinking of (downloading from a list and such).
Oct
4
awarded  Student
Oct
4
awarded  Supporter
Oct
4
comment Best way to validate /etc/hosts from third party providers to avoid ads?
I'm planning to create a script that downloads hosts from various sources, removes duplicates, and does a simple validation of the 127.0.0.1 to avoid "man in the middle" attacks. This is going to be my hosts file: always dynamic from those sources. It may have a "manual" hosts file that I concatenate as well, but only if needed, in the future. Do you see other security problems I may face when downloading hosts from other people beyond the "127.0.0.1 at the beginning of the line" check?
Oct
3
asked Best way to validate /etc/hosts from third party providers to avoid ads?