Yahoo Stops Honoring 'Do-Not-Track' Settings
An anonymous reader writes "When web browsers started implementing 'do-not-track' settings, Yahoo got some respect for being the first of the huge tech companies to honor those settings. Unfortunately, that respect has now gone out the door. As of this week, Yahoo will no longer alter their data collection if a user doesn't want to be tracked. They say there are two reasons for this. First, they want to provide a personalized web-browsing experience, which isn't possible using do-not-track. Second, they don't think do-not-track is viable. They say, '[W]e've been at the heart of conversations surrounding how to develop the most user-friendly standard. However, we have yet to see a single standard emerge that is effective, easy to use and has been adopted by the broader tech industry.' It looks like this is another blow to privacy on the web."
Horrible decision, a standard isn't being honored "EVERYWHERE" so you decide to undermine it entirely without replacement? What's the REAL reason, money?
Sell your assets and gtfo!
That is corporate speak for, "we decided we could make more money this way, so here is a bs reason for us to change, when we really just want more money."
Anyone savvy enough to care about this issue stop using Yahoo long ago anyway.
Has it ever been a surprise to anyone that a measure that service-providers must voluntarily follow would not be followed? I mean, if by not following the measure you can generate more cash than by following it then why would you choose to do it, especially if no one else does it either? No, do-not-track was doomed all the way from the beginning.
Yahoo stops using "Do-Not-Track" and in response people who care about it implement "Do-Not-Yahoo". These things tend to work themselves out over time.
Appended to the end of comments you post. 120 chars.
I am fine with sacrificing user friendliness for my privacy. Do not track me or I won't use your services. I have two yahoo emails which incidentally are used as account/spam dumps. I won't even use them for that if this is how Yahoo has chosen to do things.
>'we have yet to see a single standard emerge that is effective, easy to use and has been adopted by the broader tech industry.'
Here is my 'standard'; NoScript and AdBlock Plus.
First, they want to provide a personalized web-browsing experience, which isn't possible using do-not-track.
But the user clearly does not want a personalised web-browsing experience.
Ghostery, Secret Agent, CS Lite and NoScript are essential today, and nobody should EVER go online without those, or some equivalent. Let them personalise that.
The Web has been hijacked and is now fundamentally broken. It is being transformed into a locked-in content delivery platform, something like cable TV with a camera that records your every movement. It needs to be handled with gloves and goggles, like you would when accessing a chemical weapons research facility.
We'll need to develop another Internet, this one has been taken over by marketroids and is beyond saving.
The problem with "do not track" is that it was entirely up to the website to honour the browsing session. Most don't. And the ones that you'd reallywant to not have track you are the ones that really ignore it. It's therefore useless.
It's like a system of street privacy that relies on people being trusted to close their eyes when you walk by. Just because you ask them nicely. People will look, and you can't stop them.
If you want privacy you have to be the one in control of what is being revealed. You can't rely on others to keep your privacy for you.
Their excuse for not following it is 'no one follows it'?
What's the industry-standard code for not wanting a personalized web-browsing experience?
"Visit a service that does honor 'do-not-track', unlike Yahoo"
I "opted out" about 10 seconds after seeing that message on a Yahoo site.
The thing is, I strenuously avoid Yahoo. After the latest Firefox update, though, typing a search in the address field doesn't go to my preferred (in settings) search engine, but instead to Yahoo.
Yahoo search results are terrible, but most of the screen is filled with jumping icons a million other things I was not searching for.
Fortunately, there is little or no loss to the modern day internet user experience by ignoring Yahoo completely, either.
We should learn what we need to know about issues, before we decide what we need to feel about them.
The techie response is to look at "do not track". Remark that, "It's a trap!", and install ghostery and no script.
Way to go, Yahoo! Not only are you screwing people up but, in addition, you are treating them as idiots. So you need to do that to deliver a personalized experience, right? What if I don't want a personalized experience? Or if I want to personalize it myself?
Why don't you just tell the truth, to wit, that you are doing this because you want to make more money? You would still screw up people but, at least, you would not piss them off by treating them like retards.
You guys sure live up to the company name.
Internet connectivity is about ease of accessing information. Google, Yahoo, JStor etc are about monetizing the access to that information.
See: Arron Swartz
First, they want to provide a personalized web-browsing experience, which isn't possible using do-not-track.
This is one of the phrases and behaviors that annoy me the most about various sites, especially search sites. I search for both personal and work related things, don't want searches tailored to anything other than the specific thing for which I'm searching at that time. I generally don't care what I searched for 24h ago (looking at you Google side-bar).
In a related rant, I can't stand the Google side-bar, Instant and Suggestions and make every attempt to disable and or strip them out (using Proxomitron) though now that Google has switched to HTTPS, that makes things more difficult for me - sigh.
Dear Providers, Don't "help" me unless I ask for it.
It must have been something you assimilated. . . .
IIRC yahoo is worth less than nothing at the moment. Re: www.bloombergview.com/articles/2014-03-17/is-yahoo-s-business-worth-less-than-nothing
Why would I listen to a company with such outstanding performance?
Ever notice that Cobra Commander sounds an awful lot like Star scream?
I can't imagine why I would ever go near a Yahoo site. Yahoo Answers? Seriously? Didn't Stack Exchange demolish that nonsense? Yahoo email? With the `win tickets to the World Cup` spammy sigfiles a good 8 months after the World Cup finished? What do they offer than other companies don't offer, better, and without the lack of respect?
You want bullies stopped...
http://news.slashdot.org/story/14/04/16/0243257/student-records-kids-who-bully-him-then-gets-threatened-with-wiretapping-charge
But you don't want any of YOUR information about going to Buzzfeed tracks. I see.
How's that hero of the Soviet Union working for you? Snowden. You still mad at him for have the NSA getting a copy the info Verizon, Yahoo, Mastercard, Google and and Samsung have on your pizza order?
You can't have it both ways. Well they want to on Fox News. but here in science land, you can't have it both ways.
You are a hypocrite.
They took away a long list of popular features from yahoo mail, yahoo answers, flickr, etc, and put a new unuseable interface on top of everything that eats up bandwidth and memory like crazy. They ignored hundreds of thousands of complaints. And now you need a verified cell number to sign up, so they've slammed the door on any new users. And for what? What is the point of ruining websites that people enjoy? If your income is from advertising wouldn't you want more people looking at your website? Not less? The whole thing is wacky.
Slashdot Stops Honoring 'No Beta' Settings.
There's a headline for ya..
Noscript, only per session cookies, and surfing trough a proxy.
We stopped tracking Yahoo a long time ago.
I can't say I'm surprised. Do not track settings that are optional on the part of the sites you're visiting are simply never going to work - the ones that'd honour it are also the sites you wouldn't be particularly worried about in the first place. Targeted advertising and profiling is big business, and the big revenue stream for the 'free' content providers. It really comes as no surprise - pretty fundamentally you get what you pay for. If you're paying nothing in monetary terms, then you'll be paying in privacy instead.
"However, we have yet to see a single standard emerge that is effective, easy to use and has been adopted by the broader tech industry.' It looks like this is another blow to privacy on the web."
I don't know about you, but I can think of one fairly effective and extremely easy to use "standard"... AdBlock.
Why does anyone use Yahoo? You can't get an email without giving up your cell number, their "answers" section is absurd, they really have nothing to offer IMO.
There are far better choices, it seems like a recently beheaded chicken, still running around on autonomic pilot.
"If any question why we died, Tell them because our fathers lied."
Our best defence.
I do not care for their "enhanced experience".
Maybe it's time for the legal system to get involved. If entities won't honor privacy, maybe we need the equivalent of the "Do Not Call" list for telephones implemented for the internet. Of course companies like Google and Yahoo will then just alter their service agreements to state that you do in fact agree to be tracked.
> But the user clearly does not want a personalised web-browsing experience.
Until MSIE started lying about the user's preferences. The standard specifies what should be sent if the user has not expressed a preference. IE 10 lies and says the user requested a uncustomized version when they didn't. That makes the whole thing useless when browsers lie about what preferences the user expressed.
Yahoo! Groups is bloated with spam that can't be blocked by its admins.
Yahoo! Messenger is so fraught with bugs and bloatware that users are fleeing in droves.
The main Yahoo! website is dated and mindless.
Yahoo! Mail is an abomination of unusable kludges and missteps.
Lastly, who uses Yahoo! to search for anything anymore, anyway?
Put a wooden stake in it, this thing is dead.
*** Don't be dull.***
At least they're being honest about it.
If we had been honest about it, we would have screamed and shouted about what BS the "do not track" option was in the first place. It was never more than an pretend solution devised by marketers to allow them to go about their business without having to take flack from privacy advocates.
Instead we praised and demonized browser developers for defaulting (or not defaulting) do not track settings. Like it even meant something.
Who's really to blame here?
Yahoo is a mess.
It won't be around as a business much longer because Yahoo is
bleeding cash and that cannot continue.
The DNT standard specifies what should be sent under three conditions:
a) The user expresses that they DO want customization
b) The user expresses that they do NOT want customization
c) The user doesn't express any preference
IE 10 lies and says b when the truth is c. That makes it impossible to know who actually chose DNT. The whole thing is useless now that it doesn't to indicate the user's stated preference.
Does Slashdot get all its news stories from FARK.com?
I read most of the current crop there first.
"I believe in Karma. That means I can do bad things to people all day long and I assume they deserve it." : Dogbert
We don't want your idea of a personalized web experience, and call it what it is, hard-sell advertising...
Welcome to my HOSTS file, Yahoo.
...oh wait
huh
Anyone working or have a easy to use program that writes a false browsing track? Let the trackers try to make sense out of compromised data. The "easy to use" is what I want.
Passionately Indifferent
"Why have you intercepted me?" - The Mysterious Mr. 7 FROM Star Trek The Original Series Episode "Assignment Earth"
I'm already here (several times):
http://tech.slashdot.org/comme...
http://tech.slashdot.org/comme...
http://tech.slashdot.org/comme...
http://tech.slashdot.org/comme...
http://tech.slashdot.org/comme...
* :)
APK
P.S.=> To quote Mr. 7 again (as I leave after making this post and 'certain parties' would LOVE to be able to stop me, i.e.-> to the Moderators/Admins here?) "I know Isis - but we'll be gone before they get here...
... apk
And this is why I don't feel bad in the least for using ad and script blockers to improve my experience, even though it deprives them of revenue. Don't count on me to respect your revenue stream when you can't be bothered to respect my privacy.
I am glad that I only sparingly use Yahoosers. Have E-mail address for site logins, but that is about it In my book, Yahoo, Marisa Meyer and Google are basically one large groupie.
The current web browsers leak info enough for identification without anyone using cookies or other obvious means. Is there a way for me to see when a website attempts to identify me by Javascript requesting the lists of fonts and extensions from my browser? This would be quite interesting as most of the usual trackers are blocked by Adblock Plus and Ghostery.
Do we need to start filtering and spoofing the answers to those the Javascript requests?
Good day for the EFF to release the alpha of privacy badger that blocks tracking cookies http://www.pcworld.com/article... https://www.eff.org/privacybad...
They promised me a better search engine.
They didn't say IT would be better at searching ME.
Imagine if all this power were being used to help people find what they wanted, instead of helping sell crap.
We didn't need Google, to help themselves to us.
We needed librarians, to help us.
Damn straight!
?nobeta=1 isn't supposed to be a randomize flag.
"First Be Evil" is the motto of Google.
And now Yahoo is doing it.
Wonder where their CEO worked before?
"Lean In" my foot. More like "Steal Muchly".
-- Tigger warning: This post may contain tiggers! --
Any standard that's effective and easy to use will not be accepted by the advertising industry, so making the "success" of a standard contingent on that last is nonsense. The DNT standard does serve one useful purpose whether or not it's accepted: it provides a single, easy-to-interpret, unambiguous indication to advertisers as to whether or not the user has consented to tracking. It removes their ability to say "Well, they didn't say otherwise so we assumed they're OK with it.". It does that whether or not they honor it, and it gives us a good talking point when it comes to policy and regulatory discussions: "The DNT standard exists. It's in use. It's easy to interpret on their side. They're the only ones sticking their fingers in their ears going "Na Na Na Can't hear you!".". That makes regulation an easier sell.
Hi /.,
I'm a developer for an advertising platform. Our product is basically visitor targeting: the best we are at profiling visitors, the more money we will make.
We do respect Do-Not-Track. I know this because I have seen the code that checks for it, and stops processing if it's set. (Unless your user agent matches IE10.)
I have no idea what policy other advertisers follow, however.
I would like to add that, all those additive adds, adds up to a lot of adds!
Translation - Do Not Track costs us advertising income.
For certain types of product, it's effective marketing. Some people buy a lot of shoes or books or video games. If you buy food online, chances are you will need to buy food again at some point in the future.
For durable goods like cars and washing machines, not so much.
The interesting thing is that the industry realizes that ad hangover is problem and is trying to solve it in various ways. Your eyeballs are more valuable to advertisers who are selling something you might want to buy, and everybody spending or making money in this space - from the ad buyer to the agency to the ad platform to the target website - everybody understands that.
Strap a bigger engine to it all you want, but hosts is as robust as a go-kart compared to the finely-tuned machines that comprise modern filtering software. The number of CPU ticks you're saving by processing a block list lower on the network stack stopped being non-trivial about fifteen years ago. Get with the times, man.
The proposal you linked to was voted down several years ago. The last call standard is:
Key to that notion of expression is that the signal sent must reflect the user's preference, not the choice of some vendor, institution, site, or network-imposed mechanism ..
A user agent must have a default tracking preference of unset (not enabled)
See
> That's not lieing anymore than telling the server that you've opted in when you haven't.
Both of those would be a lie, which is why neither are allowed under the standard. ... the user has not yet made a choice for a specific preference".
The standard says that the browser "must not send a tracking preference expression if a tracking preference is not enabled. This means that no expression is sent for each of the following cases:
See:
http://www.w3.org/TR/2014/WD-t...
Exactly, we shouldn't be tracked regardless of the do-no-track setting. Who wants to willingly be e-stalked and data mined? They are stealing our info without permission and without compensation.
To disprove 17 points of facthosts give users in added speed, security, reliability, & anonymity enumerated @ its download link -> http://start64.com/index.php?o...
* Good luck - you'll NEED it (more like a miracle)...
I work with what you have, natively (& I don't "BOLT ON" more b.s., like you obviously do... & what's in my 'p.s.' below can prove that much, easily!)
APK
P.S.=> Now, CPU ticks? Ok - load a few browser addons in FireFox & see what happens (lmao - talk about CONSUMING excessive CPU cycles in messagepassing overheads - that is a KNOWN issue with browser addons, that also don't do a FRACTION of what custom hosts files can for end users noted above)... apk
I find it odd that people still think of yahoo as a prime web site - they are so full of crap its been years since I did anything yahoo-related.
Ever since I realized they sell your email the second you register I opined that they were going downhill thereon.
Pity the suckers who still think Yahoo is big game.
> the consensus is that opt-in is the correct choice in pretty much all cases. By default, users should always be opted out of things that infringe their privacy.
You might be right about that*. That's a different topic than the DNT RFC, though. The DNT header tells which preference the user specifically asked for. DNT does NOT specify anything about what a site should do - what cookies they should set or not set, etc. Let me quote from the DNT RFC for you "this document does not define site behavior for complying with a user's expressed tracking preference".
The DNT header is a way for the user to communicate their preferences to the server. What the server does by default, in the absence of any instructions from the user, is a separate issue entirely. It's not what DNT is about. Perhaps the following discussion will make it more clear.
* About defaults, what a site should do when a user doesn't express a preference (and when they do). It's my opinion that the default behavior, when the user hasn't made any selection, should normally be somewhere in the giant middle area between the two extremes. Here's an example or two.
Case1 - No preference chosen:
There are a lot of things that a site should NOT do by default. Let's just call one example "long-term advertising tracking". For our purposes today, there's no need to define exactly what that means.
There are some things the site SHOULD set a cookie for, or otherwise remember. Suppose I load Slashdot and I'm shown Beta. I click on the "Fuck Beta, give me the classic interface" button. Ten minutes later, I load Slashdot again. I'd prefer that Slashdot not give me beta again, by setting a "beta=no" cookie. Maybe that cookie will expire in a day, a week, or a month, but it would be good for Slashdot to recognize that "whoever this is, he doesn't like beta". So they track that preference, and I'm happy.
So by default, Slashdot could reasonably track some things and not others.
Case 2 - User specifically requested DNT:
If I've specifically requested privacy, the site should act similarly to the way the browser does in "incognito mode" - pretty much don't set any cookies, for example. Slashdot should NOT set a cookie to remember that you hate beta, if you ask them not to remember anything. On sites like Youtube and Craigslist with a "safe search" or "possible adult content" confirmation page SHOULD keep popping up that warning. That user has explicitly requested that the site not remember that they want safe search off.
Case 3 - User specifically requests "a customized experience" (DNT off)
If the user specifically says they want maximum customization, the site SHOULD remember that I hate beta and not show it to me again.
Safesearch should default to whatever I set it too - I've asked the site to remember my preferences. Ebay.com should, since I requested it, show me good deals on items I've been searching for recently.
The key here is that the best thing for a site to do is different between case 1 and case 2. If explicitly you ask that Slashdot NOT set any cookies, it should not set a "NoBeta" cookie. If you haven't expressed any preference, setting a "NoBeta" cookie is probably a good thing. Lying, saying that the user has explicitly requested no tracking when they haven't done so, means you can't respect the user's wishes. If you honor IE's bogus DNT header, everybody keeps getting sent to beta. If you disregard it, people who have actually set DNT get tracked after they've asked not to be. Nothing that the site can do with IE DNT would be right, because the site don't know whether the user actually wants their expressed preferences forgotten or not.
I always attach a hidden EULA to all my HTTP requests, so if the web site tracks me, they have violated my license and I can sue them for breech of contract and millions of dollars.
> Do I want to constantly see ads for XYZ just because I once searched for XYZ or once visited the XYZ website?
I understand that point. For me, if I search for X a lot, I'd actually rather see ads for X than for fungal cream, but that's personal preference.
Let me ask you about something else, though. You said:
> anyone else talking about a "personalized web-browsing experience"
Suppose an interactive site like Slashdot or Yahoo Mail is rolling out a new design. By default, they send people to the new version of the site *cough beta cough*, but they have a button labeled "screw this, show me the classic version". You click on the button. Ten minutes later, you load the site again. Which should the site do:
A) Take you back to beta, even though a few minutes ago you clicked the "fuck beta" button.
B) Set a "NoBeta" cookie that lasts 60 days, so you won't see beta again for at least 60 days.
That's a bit tougher. That may be a case where a "personalized web-browsing experience" makes the site a lot better.
What do you think?
IE has been garbage since active x was introduced.
Anyone who thinks their Internet activity is private...is deluding themselves. If the NSA couldn't keep their activities private, what makes you think YOU can?
As far as I understand the law here in the UK, the Office of the Data Protection Commissioner will probably be having a word with Yahoo shortly...
Calm down APK, I've already lost count of the amount of spam posts you made on this article (which use points I have already refuted long ago).
Change is certain; progress is not obligatory.
Many sites probably would have defaulted to lower privacy than some would like, but the DNT standard is NOT about what sites do. DNT allows the user to say "I opt in to customization", "I opt out", or neither. What sites do when the user doesn't choose, or when they do choose, is not part of the standard. The standard only specifies HOW the user can communicate their preference - not what affect that preference has.
The browsers ~could~ have done a much better job here. See this from the draft specifications:
8.4. Response Header RECOMMENDED
In responding to a request that includes a Do Not Track header, a
third-party server that complies with Do Not Track SHOULD echo the
request header.
If the browsers wanted to do better by the user, they could have done the following:
1. If DNT was set, but not echoed back, notify the user that their DNT preference was being ignored.
2. Allow the user to block future requests to each third-party server.
The CORS protocol supports pre-flight requests. If DNT had supported such pre-flight, the browser could validate that DNT was properly supported before sending the initial request.
Obviously, the server could lie and say it would not track you; but at that point they are not simply ignoring a preference; they are blatantly lying about how they will use your data. Such fraud would certainly qualify as a suitable offense.
I think that we would also see a lot more honest web sites with this implementation. If a site's revenue model requires tracking, they could simply echo that they do NOT support DNT; or take the user to a DNT-specific landing page that explains that DNT must be disabled to use their site. The user would either accept that fact or browse elsewhere. If the content is interesting enough, many users will allow a DNT exception.
You sound like you're a marketer, advertiser, salesperson or manager.
Please get into a car accident on the way home today. You are a shitbag.
"If you don't want to be tracked, you need to take steps to make it happen yourself." - by nmb3000 (741169) on Friday May 02, 2014 @11:51AM (#46899859) Homepage
By programming this application: APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization).
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apkdo more w/ less
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
"If you want privacy you have to be the one in control of what is being revealed. You can't rely on others to keep your privacy for you." - by gsslay (807818) on Friday May 02, 2014 @11:41AM (#46899747)
By programming this (far better than browser addons) - APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization).
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
Remember this? Sure you do http://slashdot.org/comments.p...
* :)
(You're MORE THAN WELCOME to disprove 17 points of enumerated FACTS in favor of custom hosts files I list here that give end-users of them more SPEED, SECURITY, RELIABLITY, & even ANONYMITY -> http://start64.com/index.php?o...
APK
P.S.=> Which I know (and you know, as would anyone reading here) you CAN'T DO, since it's impossible to do (& you know it, & you'll "Run, Forrest: RUN!!! from that challenge as per your usual, you zero accomplishment in coding little troll... lmao!
... apk
In fact, IF you'd like PROOF of that much? Malwarebytes' Steven Burn (hpHosts) can verify that much!
(He's seen my sourcecode, & checked it + helped me get 4 "false positives" removed by AntiVirus vendors (4 of roughly 80 or so) on the JOTTI & VirusTotal online scans - those being McAfee/Intel, Comodo, ArcaVir, Symantec/Norton).
Mr. Burn can be contacted by email, here (& he answers all mails) -> http://hosts-file.net/?s=Downl...
As to the rest of your post? IF my doing a ware for free that gives you a LOT MORE than browser addons noted is "crazy" etc.?? Then I am clearly SANE in a crazy world...
(One populated by trolls such as yourself!)
APK
P.S.=> IF you don't like more added SPEED, SECURITY, RELIABILITY, & ANONYMITY online? Then, simply don't use it (or don't bother to read my posts) - it's YOUR MONEY, TIME, & PRIVACY + SECURITY is all... apk
How? Add these to your hosts file, & don't take a cookie here (ac posting in other words - it's THAT, or burning your cookie as a "registered 'luser'' I would guess (I don't do those so, there you are)):
216.34.181.45 slashdot.org
216.34.181.45 beta.slashdot.org
216.34.181.48 news.slashdot.org
216.34.181.48 developers.slashdot.org
216.34.181.48 hardware.slashdot.org
216.34.181.48 ask.slashdot.org
216.34.181.48 it.slashdot.org
216.34.181.48 linux.slashdot.org
216.34.181.48 tech.slashdot.org
216.34.181.48 yro.slashdot.org
216.34.181.48 science.slashdot.org
216.34.181.48 2idle.slashdot.org
216.34.181.48 apple.slashdot.org
216.34.181.48 books.slashdot.org
216.34.181.48 games.slashdot.org
216.34.181.48 interviews.slashdot.org
216.34.181.48 mobile.slashdot.org
* The BOLDED one above's THE "important one" really...
(THAT, along with any others like say, beta.mobile.slashdot.org which you'd equate to 216.34.181.48 , like mobile.slashdot.org, the std. site for that section of this place, is...)
It works - NO BETA for me, period!
APK
P.S.=> Yes - They *tried* to 'force it' on me too - this is HOW I get around it (overriding DNS via hosts & /. redirection too, easily)... apk
Disprove the 17 points of fact hosts give users of them in added speed, security, reliability (especially vs. DNS security redirection flaws & being abused by FastFlux + Dynamic DNS using botnets along with their rogue dns servers), & anonymity (vs. DNS request logs or skirting DNSBL's you don't agree with). You use MORE POWER, cpu cycles, RAM, + other forms of I/O by STUPIDLY "piling on more" when a native part of the OS itself (hosts & the IP stack) can do the job MORE than adequately for all of the benefits noted above (that you can't disprove AND YOU KNOW IT, lol).
"I don't need to respond when you prove my case." - by Ash-Fox (726320) on Saturday May 03, 2014 @02:08PM (#46908877)
Yes idiot - you do: See my subject-line & face that challenge: PROVE my points on hosts wrong... you can't!
---
"I tried your hosts file solution, which in turn generated multi-GB text file to do the equiv of a wildcard block on a domain for your preferred platform (Windows) and it broke windows services preventing DNS resolution from working. Not simply 'just working' ." - by Ash-Fox (726320) on Saturday May 03, 2014 @02:08PM (#46908877)
HEY STUPID: It's widely KNOWN & DOCUMENTED that with LARGE hosts files you MUST turn off the local USERMODE SLOW dns clientside cache service in Windows...
I said THAT to you too, dumbo... funny you "conveniently" omit that... see http://winhelp2002.mvps.org/ho... they even tell you THAT much...
APK
P.S.=> Using more complexity in a CLEARLY FAULTY IN SECURITY "solution" in DNS? Stupid... of course, you're more than welcome per my subject-line above to PROVE ME WRONG (& you can't, bullshitter that you are)...
... apk
So, if I search for commercial ad blockers, I should expect targeted ads for better commercial ad blockers?
Yes, please. How do I adjust Ghostery and Ad-Block to allow this?
--
I'd like to set up a wireless ethernet, but I can't find any wireless cable.
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> * "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
** "Less is more" = GOOD engineering!
*** "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apkspeed
I thought anybody could adjust the HOSTS file, why do they need to download something specific?
What's wrong with using both of them and / or Privacy Badger from EFF?
Using both of them has a couple of downsides:
1. The suggestion to replace Ghostery was based on the knowledge that its devs are willing to work *with* scumbag advertisers, which puts them on the wrong side of privacy concerns. Using both doesn't remove the untrusted extension.
2. Both (all 3) apps do the same thing. Ignoring the possibility of Ghostery "whitewashing" their own lists for pay (a legitimate concern given #1), they're likely using the same (or near enough) lists, so you're just adding overhead and slowdowns to every page load.
That said, I wasn't aware of badger, having changed to Disconnect when I learned about Ghostery going bad. I'll have to check it out, to see if it's better than Disconnect.
"Exactly, because it breaks it.' - by Ash-Fox (726320) on Sunday May 04, 2014 @04:00PM (#46914717)
I've told you of it before too & you still messed up -> http://slashdot.org/comments.p... and complained of it, forgetting the fix used (that saves CPU cycles, RAM, & other forms of I/O wasted on a service that uses a fix-sized small limited datastructure that can't HANDLE large hosts files: Funny that LINUX HAS NO SUCH ISSUES WITH LARGE HOSTS FILES & funnier still I had to point this ALL OUT TO YOU...
APK
P.S.=> You're trying to tell us that adding "more" to a system rather than using its native parts by "bolting on" an ENTIRE DNS SERVER PROGRAM locally & adding complexity + moving parts for breakdown) is good?
It's stupid...
Especially in adding a tool KNOWN for massive security issues in redirection (Kaminsky) as well as being exploited DAILY ALMOST by "fastflux" &/or dynDNS using botnets as well as being subject to helping DDoS in DNS Amplificaiton Attacks?? That's smart to add?? No, it's stupid... like you!
... apk
There are a dozen++ sources of custom hosts data. Not all catch the exact SAME known "bad" sites-servers/hosts-domains that serve up exploits of various kinds. It's WHY I created my tool to 'stream in' that data from 12 reputable & reliable sources for said custom hosts file data, from the security community itself.
Trust me on this: YOU do NOT want to even *try* to remove duplicates "by hand alone" from a hosts file spanning 1,000's to MILLIONS of lines - let alone removing the "bloat" in comments & such that many sources of hosts file data leave in (slowing program load).
APK
P.S.=> And, "there ya go": & IF you try my program? Enjoy - it's a 100% freebie, no strings attached (or tracking etc. either) that does the job in creating a custom hosts file that is ABSOLUTELY "lean mean" as possible & that contains data to protect you from threats online, giving you more added SPEED, SECURITY, RELIABILITY, & even ANONYMITY online...
... apk
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization).
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> Currently adding 2 features to it:
1.) 'Shearing away' trackers you CAN'T see, via code techniques that emulate a netstat -ano albeit on an automated timer to do so, as I did here on slashdot (much like how "PEERBLOCK" operates, but, not using ADDED COMPLEXITY laying in a filtering driver, but instead, using the native Windows firewall, creating rulesets for that much too)
AND
2.) Making it FASTER on its slowest part (Convert & Filter) by breaking the file into 100 parts (which process FASTER already than doing the single large intake I do currently) by August!
... apk
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?o...
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/commen...
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comme... w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization).
* Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see) - Addons slowdown SLOWER usermode browsers layering on MORE: I work w/ what you have in kernelmode, via hosts ( A tightly integrated PART of the IP stack itself )
APK
P.S.=> Currently adding 2 features to it:
1.) 'Shearing away' trackers you CAN'T see, via code techniques that emulate a netstat -ano albeit on an automated timer to do so, as I did here on slashdot (much like how "PEERBLOCK" operates, but, not using ADDED COMPLEXITY laying in a filtering driver, but instead, using the native Windows firewall, creating rulesets for that much too)
AND
2.) Making it FASTER on its slowest part (Convert & Filter) by breaking the file into 100 parts (which process FASTER already than doing the single large intake I do currently) by August!
... apk
"I've come across plenty of malware on other people's machines that modified the hosts file on Windows XP, Vista and 7 " - by Ash-Fox (726320) on Tuesday May 06, 2014 @03:22PM (#46932375)
See subject & WRONG: My app LOCKS hosts against that (& when it makes the hosts file, it does so from a PRISTINE backup).
* :)
(You're going to have to accept 1 thing: I have you OUTTHOUGHT, outsmarted, outskilled, & clearly OUTGUNNED on ALL fronts... way ahead of time!)
APK
P.S.=> That "default service" was one I confronted Microsoft on YEARS ago - it's not MY fault they don't fix it!
E.G.-> Linux has no such issues, for example, with LARGE hosts files!
HOWEVER:
I DID COME UP WITH A WAY TO FIX IT THAT WORKS!
Simply by tuning off the local FAULTY & USERMODE SLOW dnscache service (saving the CPU cycles, RAM, & other forms of I/O wasted on it, since it's faulty with large hosts)... apk
These facts in turn will do the rest & seal your coffin - here we go:
"I have seen enough apps mark the hosts file as read only and modify by SYSTEM only through malware protection software like spybot. Doesn't help against the more vicious malware." - by Ash-Fox (726320) on Wednesday May 07, 2014 @05:47PM (#46943783)
I don't just mark it once - it's kept up by a hi-res timer (thus not locking the OS out of reads of hosts): FACT! NOTHING CAN WRITE THE FILE WHEN I DO THAT LEVEL & TYPE OF PROTECTION: Nothing...
---
"I don't see what moving/copying files has to do with this discussion." - by Ash-Fox (726320) on Wednesday May 07, 2014 @05:47PM (#46943783)
IF my original hosts were SOMEHOW to get 'poisoned' is what (not that it can, see above)!
I.E.-> I keep a backup of its data in a pristine state to MAKE the latest/greatest/newest hosts on updates is what, dimwit.
---
"I just don't think a good solution is one that involves breaking services on Windows" - by Ash-Fox (726320) on Wednesday May 07, 2014 @05:47PM (#46943783)
It's a GREAT SOLUTION (better than toying with the faulty local USERMODE SLOW dnscache service TTL) since that service IS BROKEN WITH LARGER HOSTS FILES!
So, turning it off since it won't WORK with large hosts files saves its CPU cycles, RAM, & other forms of I/O for other processes running - AND, it gets rid of the "lag" that faulty with larger hosts files usermode SLOW dnscache has too - bonus!
---
"and the only way to get around it is to give up things like DNS caching." - by Ash-Fox (726320) on Wednesday May 07, 2014 @05:47PM (#46943783)
Ahem: What I "gave up" was a HUGE LAG (i.e. - I FIXED IT)
I also saved RAM, CPU cycles, & other forms of I/O wasted on a BROKEN service! Bonus...
(& I make up indexing by placing my fav. sites @ the TOP of hosts which equates to 2-3 million indexed entries, cached into RAM now by a FASTER SUBSYSTEM IN KERNELMODE - diskcache!)
APK
P.S.=> You FAIL... apk
"I resolved that problem years ago by setting the preference for resolution over TCP." - by Ash-Fox (726320) on Tuesday May 06, 2014 @03:22PM (#46932375)
THAT usage of TCP (vs. UDP) introduced callback overheads udp doesn't have!
The REST of "sealing your coffin" is here -> http://tech.slashdot.org/comme... (I save CPU cycles, RAM, & other forms of I/O wasted on a broken service that MY TECHNIQUE FIXES)
and here too before it -> http://tech.slashdot.org/comme... (my app locks hosts vs. write corruption hijack).
APK
P.S.=> Every SINGLE ONE of your "objections" = overcome & DESTROYED easily, by "yours truly"... but YOURS are still @ issue in using DNS (full of security holes in Kaminsky flaw redirection, & being ABUSED DAILY BY "fastflux" &/or "dynDNS" using botnets & also recursion dangers AND OVERHEADS as well + more...) - you FAIL, yet again, vs. myself...
... apk
"I already countered this non-sense." - by Ash-Fox (726320) on Thursday May 08, 2014 @03:10PM (#46952303)
Per my subject: HOW did you "counter" for the FACT my app locks hosts against hijack? YOU ARE SO FULL OF SHIT YOU LITTLE MOTHERFUCKING WORM, it's not funny!
THIS I have to hear, lol (since you can't & didn't).
---
"But pretty much resolves the security issue, instead of risking that your hosts file might not have the address in question." - by Ash-Fox (726320) on Thursday May 08, 2014 @03:10PM (#46952303)
You still introduced overheads - Thus, your "fix" != efficient. Mine for dnscache is saving CPU cycles, RAM, & other forms of i/O wasted on a FAULTY service (with large hosts files).
APK
P.S.=> You are SO FULL OF SHIT, you're pifitul... apk
"What... If you're going to have an application running in the background, why not just use a write lock? Your method sounds like it's wasting a lot of CPU cycles." - by Ash-Fox (726320) on Thursday May 08, 2014 @02:43PM (#46951975)
That can be undone IF I don't keep it up, & yes, my method works. FAR BETTER THAN YOUR USE OF TCP TO *try* TO SECURE AGAINST RECURSION WEAKNESSES IN DNS YOU USE STUPIDLY LOCALLY "BOLTING ON MORE" PARTS WASTING CPU cycles, RAM, & other forms of i/O using a local DNS server.
FACT:
---
DNS = FULL OF SECURITY ISSUES in:
1.) Kaminsky flaw redirects
2.) Abuse by "FastFlux" botnets
3.) Abuse by Dynamic DNS using botnets
4.) Abuse in DNS amplificaiton attacks.
---
* YOU have to be STUPID to use something so full of holes in security!
(AS WELL AS "bolting on more moving parts" to waste electricity, cpu cycles, RAM, & other forms of I/O locally, when hosts can do the job in combination with a remote SECURE dns (actually secure, OpenDNS = DNSSEC + updated vs. Kaminsky too, unlike you)).
APK
P.S.=> For ANYONE to have a hosts as large as mine would take 15++ yrs. (that's how long it took me) - most folks won't even have a 2-3mb sized one, since I supply them with CURRENT ATTACK DATA only (last 6++ months or so) - however: IF you want to build one up (reason I do is because of "fastflux" botnets recycling/reusing domain names they paid for over & over again), you can with my program though (I do, for example, for the reasons noted above) - perfectly protected vs. those threats (the worst ARE fastflux &/or dynDNS botnets)... apk
CPU cycles it wastes, RAM, & other I/O too - You introduce overheads (DOUBLE in fact, as TCP is double the calls of UDP, & 2 way, UDP = 1 way outbound broadcast only). I break NOTHING & fix a problem... you "fix it" alright (lol, by introducing FAR MORE overheads, double in fact!).
I fix it more EFFICIENTLY, you do not (AND I WROTE MY OWN, unlike a puny ,b>mere "user" of the work of others like you...)
APK
P.S.=> Lastly - You miss a lookup? YOU GO INTO RECURSION too, & THAT introduces problems as well as slowness overheads (are your upstream updaters DNSSEC secured? If not, there you go...)
... apk
You can't hijack my hosts file (it's CONSTANTLY protected & I save slow usermode FAULTY dnscache problems too - bonus - saving the CPU cycles, RAM, & other forms of I/O it was wasting).
YOU ON THE OTHER HAND LITERALLY DOUBLED YOUR OVERHEADS using TCP vs. UDP... period!
&
You also "bolt on more" complexity AND ROOM FOR BREAKDOWN!
( & there's NO QUESTION dns has security issues galore in Kaminsky flaw redirect, DNS Amplification attacks, & abuse by "fastflux" + "dynDNS" using botnets. )
Lastly: ANYTHING ANY ROOTKIT CAN DO TO HOSTS CAN BE DONE TO A DNS SERVER PROGRAM PAL - so your SINGLE "point"?
Works against YOU TOO, stupid.
APK
P.S.=> You "bolt on more" stupidly, & stuff that's KNOWN to have security issues - &, I don't...
(In fact, I got RID of a known issue as efficiently as possible - you didn't & MADE IT WORSE, lol (so any overheads I *may* introduce? Moot & made up for by my disabling usermode SLOW faulty dnscache)... apk
Are you trying to tell us rootkits can't affect DNS too?
I don't "break" anything: I literally FIX A PROBLEM AS EFFICIENTLY AS POSSIBLE by saving CPU cycles, RAM, & other forms of I/O wasted on a FAULTY SLOW USERMODE service (dnscache).
I even make up for indexing lost... bonus!
By way of comparison - what did YOU do? YOU DOUBLE OVERHEADS ON DNS faulty & security issue riddled as it is in recursion + vs. botnets that abuse it as well as DNS Amplifiaiton attacks... by going from UDP to TCP, you literally doubled your overhead, literallly!
"Real efficient that" (not).
APK
P.S.=> Answer that - it's going to be YOUR undoing (since I can direct it RIGHT BACK AT YA easily) & you KNOW it... lol!
... apk
You're *trying* to tell us DNS = "rootkit proof"?
That's YOUR puny SINGLE line of attack on me... answer it. It's now being used against you & there IS NO DEFENSE (according to of ALL people, you... lol!).
APK
P.S.=> You fail - you doubled overheads on DNS using TCP vs. UDP where by comparison using hosts I save CPU cycles, RAM, & other forms of I/O on a SLOW usermode faulty + limited Windows' dnscache service ( & you're "bolting on more moving parts + complexity" to do it - I don't & lessen THAT too) - LESS IS MORE = GOOD ENGINEERING...
... apk
"Not very efficient if you have to manually maintain that stuff honestly." - by Ash-Fox (726320) on Friday May 09, 2014 @10:37AM (#46959171)
My app http://start64.com/index.php?o... does automatically on a timed basis (if users wish).
I don't 'break' a thing: I fix it! (faulty slow usermode dnscache in Windows - Linux has NO SUCH ISSUE though), using hosts AND IT ALSO FIXES REDIRECT PROBLEMS IN DNS, it's biggest problem.
---
"Indeed and it's not vulnerable"" - by Ash-Fox (726320) on Friday May 09, 2014 @10:37AM (#46959171)
No? You keep avoiding this (& YOU USED IT 1st on me or tried to, but I lock hosts vs. hijack): YOU TRYING TO TELL US DNS = "rootkit proof"?
Answer that.
APK
P.S.=> "Real smart" of you (not) - DOUBLING OVERHEADS ON DNS (vs. me fixing my problems efficiently saving CPU cycles, RAM, & other forms of I/O wasted on a slow usermode faulty service, dnscache)
"Real smart" of you (not) using "more moving parts" conplexity + ROOM FOR BREAKDOWN too!
(Especially with all of DNS' known security issues in redirect, & vs. DNS Amplification attacks, + "fastflux" & "dynDNS" using botnets)
"Real smart" of you (not) wasting MORE POWER too, as well as RAM, CPU cycles, & other forms of I/O as well (where I don't DO that stupid wasting - you do)...
... apk
Bwah - I can't GET a rootkit or any threat as I block them BEFORE they can get me!
I do that, by using hosts (2.4++ MILLION worth since 1996 here in fact... why? The VERY THINGS that adversely affect & abuse DNS - "fastflux" &/or "dynDNS" botnets!).
There you go!
You also AVOID answering your "single line of attack" on rootkits!
* QUESTION - CAN A DNS SERVER BY ATTACKED BY A ROOTKIT?
(YES or NO will do...)
---
People using my app would literally take as many years as it took me to collect the SIZE of hosts data I use... most of the time, they will only have 1-3mb sized hosts, tops. Current data (the most important really) vs. bad sites/servers... BUT, you can do what I did for the reasons I did (vs. fastflux & dynDNS botnets, the BANE of DNS).
APK
P.S.=> It has been a REAL PLEASURE annihilating you... apk
"Maybe, but I don't even notice the difference' - by Ash-Fox (726320) on Friday May 09, 2014 @10:59AM (#46959381)
TCP has literally TWICE the amount overhead UDP has - period, fact.
LOL, my roommate just said:
"Was your mother just a 'LITTLE BIT PREGNANT' maybe?"
Hell... even HE sees I am using less to do MORE vs. YOU doing MORE to do the same as myself inefficiently!
(You're doing it FAR less efficiently with MORE MOVING PARTS complexity & room for breakdown + consumption of RAM, CPU, & other types of I/O than I use - especially with a KNOWN FAULTY SYSTEM in DNS vs. botnets, dns amplication attacks, etc.).
You fail!
APK
P.S.=> There is NO "maybe' about you doubling overheads and no "maybe" about you FAILED... oh, & I notice you won't say if DNS CAN BE ATTACKED BY ROOTKITS? Why's that?? Maybe since I used what YOU TRIED TO USE ON ME, against you??? Absolutely... apk
"I'm saying the likelyhood of that being an avenue to be exploited seems really unlikely and the fact that I have never seen this done against a DNS server, but I have with hosts files." -
No? WTF do "fastflux" &/or "dynDNS" botnet doing to DNS? They can EASILY deliver anything they want (especially with faults in it, just like any program).
WTF is a DNS amplification attack doing to DNS??
"NO ABUSE THERE" (yea, right...)
So, HOW's DNS more "proof" to rootkit attack than PC's are? Answer = THEY'RE NOT, period. See subject-line...
---
"I countered other points just fine." - by Ash-Fox (726320) on Friday May 09, 2014 @11:13AM (#46959525)
BWAHAHAHA: "Riiiggghhhtt" - BY DOUBLING YOUR OVERHEADS ON DNS USING TCP vs. UDP?
Real EFFICIENT that, lol... not.
Less security with hosts? Ok - I have every known possible threat added to hosts daily - I can't even GET A ROOTKIT BECAUSE OF THAT FACT, stupid!
(I update by the hour if I want even vs. such threats)
QUESTION: How's that less secure than DNS (with all of its security faults vs. Kaminsky flaw, dynDNS & fastflux botnets, DNS amplification attacks)?
APK
P.S.=> No, as usual, I've "floored you" as I have before, ,b>using YOUR OWN MEDICINE against you in rootkits too, easily... better luck next time!
... apk