Slashdot Mirror

← Back to Stories (view on slashdot.org)

'StrongPity' Malware Infects Users Through Legitimate WinRAR and TrueCrypt Installers (neowin.net)

Posted by msmash on from the security-blues dept.

Kaspersky Labs has revealed a new strain of malware -- named 'StrongPity' which targets users looking for two popular applications - WinRaR and TrueCrypt. The malware contains components that not only has the ability to give attackers complete control on the victim's computer, but also steal disk contents and download other software that the cybercriminals need. From a Neowin report: To be able to gather victims, the attackers have built special fake websites that supposedly host the two programs. One instance that was discovered by the researchers is that the criminals transposed two letters in a domain name, in order to fool the potential victim into thinking that the program was a legitimate WinRAR installer website.

105 comments

  1. Title smells like bullshit by truedfx · · Score: 5, Insightful

    "through legitimate WinRAR and TrueCrypt installers"? By what logic are those installers legitimate?

    1. Re:Title smells like bullshit by urbster1 · · Score: 1

      came here to post this

    2. Re:Title smells like bullshit by omnichad · · Score: 2

      Bad writing, but I'm sure the meaning is that it also legitimately installs the actual intended software. Might even be the exact same installer but with a modified payload.

    3. Re:Title smells like bullshit by Anonymous Coward · · Score: 0

      It is called "yellow journalism," and slashdot is very good at it.

    4. Re:Title smells like bullshit by richy+freeway · · Score: 2

      Isn't that precisely how malware has been spreading since day one?

    5. Re:Title smells like bullshit by SumDog · · Score: 1

      Yea, I was expecting to see something in the article where they somehow injected their malware without changing the MD5 or SHA sums and put them back in the official mirrors. That would have been way more impressive.

    6. Re:Title smells like bullshit by Lumpy · · Score: 2

      not legitimate... It is horrible writing and freaking fearmongering FUD crap that is the norm for slashdot now days.

      These are MODIFIED installers, the article needs to be corrected

      --
      Do not look at laser with remaining good eye.
    7. Re:Title smells like bullshit by Anonymous Coward · · Score: 0

      The contrasting version of this play would be a pure malware installer, something that doesn't install the intended application and only installs the virus.

      In old-school terms, a "dropper".

      The action described here is a true Trojan, something that appears to have the intended affect (installing a legitimate application) and also has a hidden mal-affect (installing a virus).

      The reason to have a visible beneficial affect is to not raise the victim's suspicions. "WinRAR installed, it runs fine, looks legit to me." Meanwhile, the virus is climin' in yo Windows, snatchin' yo files up, tryin' to rape yo computah, and you don't even notice because of the GLORY OF WINRAR and the glow of success.

    8. Re:Title smells like bullshit by AHuxley · · Score: 1

      The user seeks out the real crypto software solution.
      Looking at some site, the user then finds some site GUI with a swapped out download that offers poor crypto but has the look and feel of the real crypto software.
      "On the StrongPity Waterhole Attacks Targeting Italian and Belgian Encryption Users" (October 3, 2016)
      https://securelist.com/blog/re...
      "Adding in their creative waterholing and poisoned installer tactics, we describe the StrongPity APT as not only determined and well-resourced, but fairly reckless and innovative as well."

      --
      Domestic spying is now "Benign Information Gathering"
    9. Re:Title smells like bullshit by viperidaenz · · Score: 1

      Yellow journalism, or the yellow press, is a type of journalism that presents little or no legitimate well-researched news and instead uses eye-catching headlines to sell more newspapers. Techniques may include exaggerations of news events, scandal-mongering, or sensationalism.

      That pretty much describes every media outlet around these days.

  2. Legitimate by dejitaru · · Score: 3, Insightful

    If it's malware infected, it's not legitimate.

    1. Re:Legitimate by green1 · · Score: 1

      In this case, you're right. But conversely, just because it's legitimate, does not mean it's malware free.

      Of course this makes for clickbait, because legitimate installers installing malware are rare, whereas fake installers installing malware is an every day occurrence.

  3. Legitimate Installers by Anonymous Coward · · Score: 1

    ... no. How could the malware being served qualify as a legitimate installer?

  4. Slashdot check your editing by Anonymous Coward · · Score: 0

    It isn't. Slashdot editors stink.

  5. sounds like by Anonymous Coward · · Score: 1

    someone just downloaded an .exe off a website and ran it.

    If I can get someone to do that, you don't need winrar as part of the equation anymore.

  6. Actual source by Anonymous Coward · · Score: 5, Informative

    Nothing like an ad-infested news page with referral program links to the original source. Here is the actual article, with a sanitized URL:

    http://usa.kaspersky.com/about-us/press-center/press-releases/2016/Kaspersky_Lab_Reveals_Advanced_Persistent_Threat_StrongPity

    1. Re:Actual source by houstonbofh · · Score: 1

      I hate wrapper websites. And why does everyone share the website that just has a youtube video embedded with a dozen adds on it instead of sharing the youtube video?

    2. Re:Actual source by Anonymous Coward · · Score: 0

      [$(100)$]

  7. Fake installers have malware by Anonymous Coward · · Score: 0

    Fake installers have malware
    Headline is wrong, and contradicted by the summary
    News at 11

  8. Wait.. by Anonymous Coward · · Score: 0

    Who actively look to install WinRAR in this day and age, other than maybe some old person who has no clue what the hell they are doing and just getting whatever crap they were using 15 years ago...

    1. Re:Wait.. by Anonymous Coward · · Score: 0

      Got something that does the job better? WinACE is dead, StuffIt Deluxe hasn't seen any work on it in a year, and has some nasty glitches. I don't know of any programs that can compress, deduplicate, add error correction, recovery volumes, as well as provide decent encryption. Well, you could use tar, gz, gpg, and PAR2, but WinRAR has proven itself quite useful. I've recovered data over fifteen years with it, using it to split large data among a number of CD-Rs, with recovery volumes if one went bad.

    2. Re:Wait.. by SumDog · · Score: 2

      7zip is open source and I'm pretty sure it handles rar/zip/gzip too.

    3. Re:Wait.. by NotAPK · · Score: 3, Interesting

      7-zip decompresses RAR files, and makes 7z (LMZA and LMZA2) files which are smaller, "better"* (support multi threaded compression/decompression and AES encryption) and is multi-platform and open source. Absolutely no reason why it shouldn't be your compression format of choice.

    4. Re:Wait.. by youngone · · Score: 1
      From my experience, every dodgy construction company in China uses the same pirated version of WinRAR.

      Except for the one construction supplies company who sent infected .rars to several of my users. (To be fair that was about 8 years ago. Things may have got better but I wouldn't hold my breathe).

    5. Re:Wait.. by Anonymous Coward · · Score: 0

      us old people are the only ones who remember rar. kids these days just click on shit at random and then start crying if it doesn't work.

    6. Re: Wait.. by Anonymous Coward · · Score: 0

      I'm running both 7zip and WinRAR. 7zip has some cons:
      - decompression can lead to disk fragmentation
      - sometimes RAR files do not decompress without errors (seldom)
      - no integrated recovery option (I think?)

    7. Re: Wait.. by NotAPK · · Score: 1

      Cheers, I haven't seen disk fragmentation myself, but I'll look out for it from now on.

      And yes, I think you're correct, I don't think 7zip has any recovery or repair mode, but it does make a "best effort" and in my experience will partially recover damaged archives. Of course, since it will depend enormously on the exact file structure, archive structure, and level of damage, this should be regarded more as an anecdote than advice.

    8. Re:Wait.. by A+Friendly+Troll · · Score: 1

      7-Zip has no recovery options. If you're doing backups, but note testing them (which is a classic home scenario), RAR and it's extra recovery data can save you.

  9. What about TrueCrypt... by HBI · · Score: 1, Insightful

    Why are people still using something that the authors of same apparently think is compromised?

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    1. Re:What about TrueCrypt... by Anonymous Coward · · Score: 0

      Why are people still using something that the authors of same apparently think is compromised?

      this exact same question can be asked over and over and over again for just about every known system

    2. Re:What about TrueCrypt... by Bob+the+Super+Hamste · · Score: 1

      I thought it came out that the authors basically got sick of supporting it and went all scorched earth. That said people should have moved on from TrueCrypt when this was disclosed last year. The VeraCrypt project has that fix as well as taking care of what was found during the limited TrueCrypt audit.

      --
      Time to offend someone
    3. Re:What about TrueCrypt... by HBI · · Score: 2

      I saw something about the "tired of supporting it" bs, but the assumption at the time was that it was a warrant canary of sorts.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    4. Re:What about TrueCrypt... by Anonymous Coward · · Score: 0

      That particular issue applies only to servers with multiple users and is not a bug with truecrypt encryption itself. There is no known serious vulnerability to truecrypt volumes at rest.

    5. Re:What about TrueCrypt... by Anonymous Coward · · Score: 0

      Why are people still using something that the authors of same apparently think is compromised?

      1. I have an ancient copy of Truecrypt.
      2. There's no way I'll trust some new maintainer who forked Truecrypt.

      tl;dr: An old copy of Truecrypt is still more trustworthy than Veracrypt, IMO.

    6. Re:What about TrueCrypt... by Kjella · · Score: 2

      Why are people still using something that the authors of same apparently think is compromised?

      Because if they really found a serious bug they'd either patch it or tell people where it is and why it needs fixing. The whole "there's a problem here, but I won't tell you what it is", "trust Microsoft, switch to Bitlocker" and so on was just screaming "there's something we can't tell you". It's designed to ruin their credibility so that nobody would trust another Truecrypt release. Why would they do that? The only logical explanation I can think of is that somebody was trying to force them to add a backdoor and this was their way to permanently refuse. That makes the 7.1a the last good version, not one you should throw away. And nobody's found this alleged compromise, so what... they found something extremely cleverly hidden backdoor but decided to not give the slightest hint? Nothing they said makes any sense, which I think was exactly the point. It's nonsense and shouldn't be trusted at all.

      --
      Live today, because you never know what tomorrow brings
    7. Re:What about TrueCrypt... by HBI · · Score: 1

      One could also interpret this differently, as saying they inserted a back door in a previous release. In which case 7.1a is compromised as well.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
  10. Once-legitimate, hosted on a different domain.... by Anonymous Coward · · Score: 0

    Words have meaning, but only if you subscribe to the theory that meaning has meaning.

  11. Why is this here? by thegarbz · · Score: 3, Insightful

    Hasn't this been done 1000 times before? What's new here? Why is this newsworthy?

    1. Re:Why is this here? by omnichad · · Score: 1

      They're going as far as creating lookalike web sites to host it. I haven't seen this exact thing before personally.

    2. Re:Why is this here? by green1 · · Score: 4, Informative

      The headline stated something rare (legitimate installers of popular programs being infested by malware)

      Of course the headline was nothing to do with reality, the article, or even the summary, which is all about the every day occurrence of fake installers being used to try to trick people in to installing malware, which is not new at all.

    3. Re:Why is this here? by Anonymous Coward · · Score: 1

      Why do people feel the need to post "why is this news?" comments? This actually may interest some people. Maybe _you_ already knew it, but there are new people on the site every day. It's pretty egotistical to think that only things that interest you is news. The better question is "why are you posting this?"

    4. Re:Why is this here? by Anonymous Coward · · Score: 0

      the LEGIT installers for rar are digitally signed.. so i dunno how these malware guys are doing that, unless they've also hacked a certificate authority or otherwise conned one into issuing certificates in someone else's name.

    5. Re: Why is this here? by bestweasel · · Score: 1

      I wondered that. The link below mentions unusual and fake certificates.

      The malware first appeared on tamindir.com at the end of 2015 redirecting mainly Turkish users to a clone of the truecrypt site then last month links were put on winrar.it and winrar.be to point to copies of the winrar site which affected mainly Italian and Belgian users respectively. The malware was after details of encryption and passwords.

      There's no word on how the attackers put links to the malware on legitimate sites.

      I'd guess it's an espionage group for hire rather than a state actor or the usual economic criminals.

      https://securelist.com/blog/re...

      "When visiting sites and downloading encryption-enabled software, it has become necessary to verify the validity of the distribution site and the integrity of the downloaded file itself. Download sites not using PGP or strong digital code signing certificates need to re-examine the necessity of doing so for their own customers. "

  12. Neowin headline error by Anonymous Coward · · Score: 0

    I saw this on Neowin earlier today. The headline should have read illegitimate. I'm surprised that they never fixed it as it's wrong the way it's worded. I'm more surprised that Slashdot passed on the error without thinking how stupid it sounded.

    1. Re:Neowin headline error by green1 · · Score: 1

      I'm more surprised that Slashdot passed on the error without thinking how stupid it sounded.

      You must be new here.

    2. Re:Neowin headline error by houstonbofh · · Score: 1

      Clickbait is not an error. It is intentional. You clicked...

  13. Malware controls victim's Windows computer by khz6955 · · Score: 1

    "The malware contains components that not only has the ability to give attackers complete control on the victim's computer"

    Msmash forgot to mention that this malware is only effective on Microsoft Windows. Go here for an alternative to the Microsoft industry standard.

    1. Re:Malware controls victim's Windows computer by houstonbofh · · Score: 1

      To be fair, not a lot of people install WinRAR on Linux.

    2. Re:Malware controls victim's Windows computer by cfalcon · · Score: 1

      I'm pretty sure you can in WINE. And Truecrypt has Linux versions for sure.

    3. Re:Malware controls victim's Windows computer by Anonymous Coward · · Score: 0

      "The malware contains components that not only has the ability to give attackers complete control on the victim's computer"

      The components also apparently HAS the ability to mix up singular and plural.

    4. Re:Malware controls victim's Windows computer by AHuxley · · Score: 1

      The "compromised" issues if finally been understood from the small developer to huge US brands crypto perspective and as junk international "standards".
      Other code might be security service friendly by design as a small front company, gov fronted start up or via developers who had to make deals or had cash offers made by govs or got trapped under a US NSL at work.
      Its hard to find good crypto that works. Look at the help the security services got over everyday crypto by big US brands under PRISM or VPV security under BULLRUN, Dual_EC_DRBG issues
      Microsoft helped Prism decrypt your emails and Skype, says report (July 12, 2013)
      http://www.techradar.com/news/...
      BULLRUN https://en.wikipedia.org/wiki/...
      https://securelist.com/blog/re...
      "key loggers and additional data stealers." and "effectively steal disk contents"

      --
      Domestic spying is now "Benign Information Gathering"
  14. Simple to stop via hosts files... apk by Anonymous Coward · · Score: 0

    See subject: Add the bogus domains it uses as blocked to hosts, e.g.:

    0.0.0.0 gezginler.net
    0.0.0.0 tamindir.com
    0.0.0.0 www.true-crypt.com
    0.0.0.0 true-crypt.com

    * ... & "voila", there ya go - SOURCE = https://securelist.com/blog/research/76147/on-the-strongpity-waterhole-attacks-targeting-italian-and-belgian-encryption-users/

    (You CANNOT be infected/infested by WHAT YOU CANNOT ACCESS/TOUCH in the 1st place)

    APK

    P.S.=> It's THAT simple to stall either getting this bogus machination from its hosting sources (or even having it "talk back to mama" should it do that by adding those servers as well)... apk

    1. Re:Simple to stop via hosts files... apk by Anonymous Coward · · Score: 0

      apk for president.

    2. Re:Simple to stop via hosts files... apk by houstonbofh · · Score: 1

      Are you going to list every possible misspelling of the websites? Enumerating badness does not work. Has not for a long time... http://www.ranum.com/security/...

    3. Re:Simple to stop via hosts files... apk by Anonymous Coward · · Score: 0

      I say we take off and nuke the entire website from orbit. It's the only way to be sure.

  15. There's more from the same source... apk by Anonymous Coward · · Score: 0

    0.0.0.0 ralrab.com
    0.0.0.0 www.winrar.it
    0.0.0.0 winrar.it

    * Along w/ the others from my original post https://tech.slashdot.org/comments.pl?sid=9759361&cid=53057377/ that SHOULD do it...

    APK

    P.S.=> You couldn't PAY me enough to WANT to be president - why? What I'd do would get me SHOT (by those profiting by the shenanigans going on politically & in the corporate world, the TRUE masters of puppets pulling the strings in gov't.) but, I guarantee it'd fix the messes we have - I'd have posted all this information sooner, but the JACKASS that now runs this site puts all kinds of effete wannabe blocks on me (so talk to him on it)... apk

    1. Re:There's more from the same source... apk by Anonymous Coward · · Score: 0

      ...but the JACKASS that now runs this site puts all kinds of effete wannabe blocks on me... apk

      cue Nelson "HAha" laugh in 3... 2... 1...

  16. So NOT legitimate, then by wonkey_monkey · · Score: 1

    'StrongPity' Malware Infects Users Through Legitimate WinRAR and TrueCrypt Installers

    in order to fool the potential victim into thinking that the program was a legitimate WinRAR installer website.

    It certainly fooled whoever submitted the story.

    Now, will someone at Slashdot bother to fix it?

    --
    systemd is Roko's Basilisk.
    1. Re:So NOT legitimate, then by Anonymous Coward · · Score: 0

      I was sure you were going to say "Now, will someone at Slashbot bother to fix it?" slashbot.ua as a link ;)

    2. Re:So NOT legitimate, then by Anonymous Coward · · Score: 0

      Now, will someone at Slashdot bother to fix it?

      AAAAHAHAHAHAHAHAA. Nice one.

  17. Two Letters Transposed by Anonymous Coward · · Score: 0

    But surely if the site was WinARR.com you'd be suspecting pirates.

  18. On ./ by Anonymous Coward · · Score: 0

    They found the links for it on DotSlash.

    1. Re:On ./ by campuscodi · · Score: 2

      I'll just leave this here: "The owner of dotslash.org is offering it for sale for an asking price of 10000 USD!"

  19. Re:Works for me & 1,000's of others by Anonymous Coward · · Score: 0

    Stop with the spamming already! Somebody get this guy outta here!

  20. ZIPmagic is Better! by zipmagic · · Score: 0

    Use ZIPmagic instead. It's faster than WinRAR and also does disk compression, which no other tool does. A nice way to payback for the clickbait too!

  21. Why use WinRAR? by nuckfuts · · Score: 1

    Why do people even download WinRAR? For the odd occasion I need to extract a WinRAR archive, the free and open source 7-zip works fine. It also handles a number of other formats, and is fast. (For example, it is MUCH faster at extracting ZIP archives than Windows Explorer).

  22. Considering removing slashdot from favourites by just+another+AC · · Score: 1

    This is supposedly a tech news site.
    There is no way that editing can accidentally be that shit. Malware in "Legitimate installer" - wow that is news. Click through to standard bullshit.

    Things like this are a good way to drive away the readership. Only reason I still visit is that the community is still large enough to have interesting discussions around the articles (although the trolling etc is getting worse as time goes on)

    (Just wish a few other alternatives would get more active communities)

    1. Re:Considering removing slashdot from favourites by Anonymous Coward · · Score: 0

      Note the Editor. manishs/msmash, (Manish Singh), screws up like this every single fucking day. But then again, he was the Editor outsourced to India. (The first time I wrote this a while back, I was just making a little joke. But it's actually true.)

  23. Ok, folks, where is the story? by Opportunist · · Score: 1

    First of all, the headline is misleading. For it to be true, you'd have to get infected somehow by installing genuine WinRAR and TrueCrypt software you downloaded from trusted (and trustworthy), genuine sources. Now THAT definitely WOULD be a story!

    But what do we have instead? Malware writers using typosquatting techniques to get people to install genuine looking software. Now, it's been a while that I've left the malware analysis business, but even back then, well over a decade ago, this would not have made the news anymore. Or is it news because that technique is SO ancient that nobody remembers it anymore?

    Damn millennials and their goldfish-dimension long term memory!

    No, but seriously, what the hell is the news here? That malware authors get nostalgic when it comes to distribution? So Retro isn't just for music and games anymore? Are we going to get file infectors again, too? And hand crafted, self-morphing viruses? That would at least be interesting to analyze again.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  24. On topic truth (me) gets last laughs by Anonymous Coward · · Score: 0

    See subject: Note I said "effete wannabe blocks"? It's true - after all, you see me post as much as I like!

    * All he had to ever do was ASK ME POLITELY & I'd have left but "no" he never did & tried to "play smart" instead, vainly as you can plainly see.

    APK

    P.S.=> Nothing stops the truth & nothing stops me (I'm on topic + being helpful w/ a working solution here, not you & "yours" (useless "ne'er-do-well" TROLL losers))... apk

    1. Re: On topic truth (me) gets last laughs by Anonymous Coward · · Score: 0

      IF you acted rational and like this in the first place, you wouldn't be blocked. It's a shame they had to block you first, but you deserved it.

  25. 1st - Get on topic... apk by Anonymous Coward · · Score: 0

    See subject: 2nd - Offer a working solution vs. this threat as I did - lastly, do a better program for it too (again, as I have).

    * You CAN'T on any ground noted & that makes YOU a "ne'er-do-well" troll, nothing more...

    APK

    P.S.=> You're pitiful & useless... apk

    1. Re:1st - Get on topic... apk by Anonymous Coward · · Score: 0

      We're not talking about me, we're talking about you! And you're still a fucking spammer. You are famous for it. You should accept and embrace it.

  26. If they don't clean up? by Anonymous Coward · · Score: 0

    See subject: Eventually they'll be 'sinkholed' by ICANN/IANA etc. (the "internet powers that be", whoever that is nowadays).

    APK

    P.S.=> Until then, "sinkhole" them yourself & nothing does it better vs. modern online threats (since they mostly use host-domain names) than "yours truly"'s APK Hosts File Engine 9.0++ SR-4 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/

    ... apk

  27. Works for me & 1,000's of others by Anonymous Coward · · Score: 0

    See subject: & as far as our source article goes (which I used as reference), it's fine for now - they do more? I block more - yes, it's THAT simple.

    * As far as ranum? Ok - Ask THEM, directly, IF I block sources of these types of machinations (or systems they talk back to as in C&C servers) IF the malware as it presently is architected would work OR be able to be obtained in the 1st place!

    I guarantee they say NO & that I am correct (per the information given by said source article I used).

    APK

    P.S.=> LASTLY & ABOVE ALL ELSE - you "great critics" behind FAKE NAMES online (like you)? Make me laugh - do better than I have regarding programs for security, ala:

    APK Hosts File Engine 9.0++ SR-4 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/APK Hosts File Engine 9.0++ SR-4 32/64-bit

  28. Your irrational effete downmods don't work by Anonymous Coward · · Score: 0

    See subject: Learn to read - I can't BE blocked by ANY means, fool!

    * Drink it in & digest it - it's reality, "phantasyland-boy" troll "ne'er-do-well" that you are... lol!

    (What's it LIKE being MY FOOL? Reduced to using your unjustifiable PUNY "downmods" I can get around easily getting you to RUN DRY of those modpoints? Hohohoho!)

    APK

    P.S.=> Yes, I am LAUGHING @ you & so is anyone reading this seeing me blow you AWAY @ every turn easily... apk

  29. Even title is screwed by Anonymous Coward · · Score: 0

    Guys what kind of editors you have ?
    Even the title is wrong.
    Original article linked in your own green title bar is stating "ILLEGITIMATE" is a big difference compare to your "LEGITIMATE" title.
    This way I consider it as a click-bite.
    What is going on there . Not enough money ?
    Beside bashing Clinton, Trumpie, RNC, DNC (see I am all inclusive ),the "technical" articles are also garbage ?

  30. Incorrect title by Anonymous Coward · · Score: 0

    When you click thru to the story the real page correctly identifies the installers as ILLegitimate, /. needs to update their title!

  31. Working protection/speed speaks 4 itself by Anonymous Coward · · Score: 0

    /.'ers speak 4 it & thus, me:

    his hosts program is actually pretty good by xenotransplant

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg

    I've never tried to belittle (APK's) work, I've flat out said it's good by BronsCon

    take a look at the APK hosts file engine by SuperKendall

    APK is kinda right. I've tried his hosts file generating software. It works by bmo

    APK is totally right on this count. Adblock Plus on Firefox mobile is a dog on older, or lower end, phones. A hostfile based adblocker makes for a much better experience by chihowa

    I like your host file system by Karmashock

    I find your hosts file admirable by vel-ex-tech

    * My code's recommended & hosted by Malwarebytes' hpHosts - Argue w/ #'s (you're outnumbered/outthought etc.)

    APK

    P.S.=> Want more? In the interim "Achilles last stand" Led Zeppelin 'Presence' album https://www.youtube.com/watch?... ... apk

    1. Re:Working protection/speed speaks 4 itself by Anonymous Coward · · Score: 0

      Pure spam! GTFO!

  32. Re:Once-legitimate, hosted on a different domain.. by ACE209 · · Score: 1

    Dont't be mean.

    --
    "we are all atheists about most of the gods that societies have ever believed in. Some of us just go one god further."
  33. Take your own advice, off-topic troll by Anonymous Coward · · Score: 0

    See subject & this link where /. registered peers say QUITE otherwise shutting you down 10++:1 https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/

    * :)

    APK

    P.S.=> I notice you didn't take up my offer of putting out even MORE users here that like my ware, lol - why's that? Oh, WE know... apk

    1. Re:Take your own advice, off-topic troll by Anonymous Coward · · Score: 0

      You're still spamming. Please stop it. We don't want your kind here. Go away!

  34. You're still off-topic trolling & losing (lol) by Anonymous Coward · · Score: 0

    You got your ass kicked by your /. peers (only a partial list) + myself using facts, in a ratio of 10++:1 https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/

    * Face facts - you WISH you were ME...

    APK

    P.S.=> Instead of the no-talent do-nothing "ne'er-do-well" trolling loser you are... apk

  35. Re:You're still off-topic trolling & losing (l by Anonymous Coward · · Score: 0

    You're still spamming! Why do you do it? What kind of weirdo are you?

  36. You're an offtopic trolling "ne'er-do-well" by Anonymous Coward · · Score: 0

    See subject: We know what kind of weirdo you are getting your ass kicked by /. peers https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/ regarding myself, hahahaha.

    * You can't handle the fact that you got destroyed by your own do-nothing stupidity vs. ME getting the job done so it works via hosts...

    APK

    P.S.=> "Your kind" in "ne'er-do-well" unskilled MENIAL trolls never can OR will - & you know it (proof's in that link above + my 1st https://tech.slashdot.org/comments.pl?sid=9759361&cid=53057377/ & 2nd https://tech.slashdot.org/comments.pl?sid=9759361&cid=53057495/ posts showing how to use hosts to nullify this threat easily)... apk

  37. All you give is more spam.. by Anonymous Coward · · Score: 0

    The only things your links prove is that you're a fucking spammer! Go. the. fuck. away! And take all your spammy friends with you!

  38. LMAO - this link shows different... apk by Anonymous Coward · · Score: 0

    See subject - YOU did THIS to yourself & you LOSE (badly) https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/ lol...

    * :)

    (I love making fools like you show your true color - of FAIL!)

    APK

    P.S.=> Thanks for making ME look GOOD & yourself, by way of comparison vs. your peers opinions from ONLY a PARTIAL LIST of what I could put out, well - lol, "not so good" (stupid more like it on YOUR part)... apk

    1. Re:LMAO - this link shows different... apk by Anonymous Coward · · Score: 0

      *sigh* just repetition of the same old spam. What else is there to expect from a moron like you?

  39. Quit cryin' troll: U did this to yourself by Anonymous Coward · · Score: 0

    See subject & your massive SELF-defeat vs.myself + /. peers opinions vs. you https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/

    * I don't NEED anymore than that to put "your kind" away... you do it to yourselves every single time - it's pricelessly hilarious!

    APK

    P.S.=> That's obviously WHY you troll me by unidentifiable ac posts - I've obviously done you in before, having you do YOURSELF in for me (lol) so you use this "tactic" (loser one)... apk

    1. Re:Quit cryin' troll: U did this to yourself by Anonymous Coward · · Score: 0

      you troll me by unidentifiable ac posts

      You are really retarded... You keep on trolling with the same old spam over and over.

  40. Speak for yourself... apk by Anonymous Coward · · Score: 0

    See subject: Continually defeating yourself (w/ help from /.'ers & myself) https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/

    * You did THAT to yourself!

    APK

    P.S.=> Why not be creative & industrious instead like I have been (with a working solution vs. this online threat via hosts too no less) creating something useful as I did in my hosts file generating engine? Oh - that's right: That's BEYOND unskilled unidentifiable ac trolls like yourself... apk

    1. Re:Speak for yourself... apk by Anonymous Coward · · Score: 0

      You're not creative, talented, or anything like that, just repetitious. And you're still spamming as an AC troll yourself.

  41. Quit projecting, off-topic troll by Anonymous Coward · · Score: 0

    See subject: You repetitiously destroy yourself as always, e.g. as you did here vs. me, yet again-> https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/

    * LOL!

    APK

    P.S.=> It's ALWAYS the same w/ you unidentifiable off-topic ac trolls - you trash yourselves EVERY single time vs. me, lmao... apk

  42. In Soviet Slashdot the projector is you! by Anonymous Coward · · Score: 0

    Keep on spammin' babe. It's what you know. It's what you do best. Simple, fact free repetition is all you got.

    AC trolls

    That's almost funny coming from you... You project more that Trump. Are you him?

  43. Keep defeating yourself & losing by Anonymous Coward · · Score: 0

    See subject & this https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/ it says it all!

    * :)

    (Always a pleasure letting others do the talking for me regarding my work...)

    APK

    P.S.=> It's GOT to absolutely suck to be you (which is the WHY of why you post as an unidentifiable ac - you KNOW you're less than nothing)... apk

  44. You're still projecting your own self by Anonymous Coward · · Score: 0

    Yeah! It says you are a dorky spammer. That is what you are. That is all you are. Accept it and embrace it Only then will you find true religion.

    It's GOT to absolutely suck to be you

    Ah, but it doesn't. Life is very good, and you're just jealous.

    you post as an unidentifiable ac

    Exactly like you. See? We're exactly alike, except I'm not a spammer who has been restricted. I still have a working account. Yours has been blocked, quite rightfully. Why? Because you are a spammer and a moronic troll. How simple can it be?

  45. Why not use your registered luser acct? by Anonymous Coward · · Score: 0

    See subject: I know why - you've defeated yourself before like this vs. me (& you know it) MANY times https://tech.slashdot.org/comments.pl?sid=9759361&cid=53064255/ ... so you 'hide' behind unidentifiable ac posts!

    It's SO obvious (makes me laugh).

    * We're NOTHING alike - I come up with a working solution vs. threats like these along with a program others here (& elsewhere by the 100's of 1,000's) use & like (saying so in that link above as a small sampling thereof). A program that does FAR more for FAR less, natively (vs. illogically & stupidly "Bolting on 'MoAr'" that does less yet consumes more).

    APK

    P.S.=> You, by way of comparison = a do-nothing "ne'er-do-well" unskilled MENIAL who trolls me by unidentifiable ac posts (+ projecting YOUR JEALOUSY @ folks like myself who get the job done right) & nothing more - lol, yes I am absolutely correct that it's GOT to SUCK to be "someone like you" (lol)... apk

  46. Yes, why not use your registered luser acct? by Anonymous Coward · · Score: 0

    You do nothing but spam Slashdot with your useless crap. As an AC, of course. Put up or shut up... But you can't, because you are nothing but a spammer. I fart in your general direction, and my farts are more intelligent than you can ever hope to be. They are Shakespeare to your trolliness.

  47. Why don't you use your registered acct? by Anonymous Coward · · Score: 0

    See subject: Answer that. You brag about having one, why not use it? You don't since I defeated you like here https://tech.slashdot.org/comm... many times before & you KNOW I'd toss those many self-defeats of yours RIGHT BACK @ YOU AGAIN, & laugh as I do it (everyone else would also)... lol!

    * ... That's why you stalk me by unidentifiable ac posts, completely off-topic & offering NOTHING of value on your part...

    APK

    P.S.=> Being a slinking weasel's no way to spend a life boy - grow up, get on topic, & do something useful w/ your time as I have... apk

  48. Yes, tell us why you don't use yours? by Anonymous Coward · · Score: 0

    Oh yeah... Because you have been banned for spamming. You are a lousy filthy dirty nasty spammer, nothing else. Well, maybe you're a tranny too. You seem the type, a real fruitcake. You have "defeated" no one and have done nothing useful. You are deluding only yourself. You are the mentally handicapped anencephalic clown that is fun to watch, so you're most likely ugly as sin also. Please don't stop trolling and spamming me now. There's nothing to watch on the TV at this moment. Toodles...