Slashdot Mirror

← Back to Stories (view on slashdot.org)

Rewards of Up to $500,000 Offered for FreeBSD, OpenBSD, NetBSD, Linux Zero-Days (bleepingcomputer.com)

Posted by msmash on from the there-is-a-reward dept.

Exploit broker Zerodium is offering rewards of up to $500,000 for zero-days in UNIX-based operating systems like OpenBSD, FreeBSD, NetBSD, but also for Linux distros such as Ubuntu, CentOS, Debian, and Tails. From a report: The offer, first advertised via Twitter earlier this week, is available as part of the company's latest zero-day acquisition drive. Zerodium is known for buying zero-days and selling them to government agencies and law enforcement. The company runs a regular zero-day acquisition program through its website, but it often holds special drives with more substantial rewards when it needs zero-days of a specific category. The US-based company held a previous drive with increased rewards for Linux zero-days in February, with rewards going as high as $45,000. In another zero-day acquisition drive announced on Twitter this week, the company said it was looking again for Linux zero-days, but also for exploits targeting BSD systems. This time around, rewards can go up to $500,000, for the right exploit.

91 comments

  1. Meanwhile... by Joce640k · · Score: 3, Funny

    Meanwhile: Windows exploits are still only worth $2.

    --
    No sig today...
    1. Re:Meanwhile... by Anonymous Coward · · Score: 1

      Based on the table embedded in the article, they are more expensive than the Linux ones.

    2. Re:Meanwhile... by Anonymous Coward · · Score: 0

      > Meanwhile: Windows exploits are still only worth $2.

      So what you're saying is that Windows exploits don't get you very far, and $2 is about all the worth of the information said exploit is expected to yield to a bad guy who's ready to pay for it.

      Is that what you meant?

    3. Re:Meanwhile... by Anonymous Coward · · Score: 0

      Don't be a twat the post was suggesting that because of the relationship between SUPPLY and DEMAND that the windows exploits were much cheaper.

    4. Re:Meanwhile... by Anonymous Coward · · Score: 0

      The AC that you were responding to is a Russian. Russians don't understand supply and demand, which is why they failed at being capitalists.

    5. Re:Meanwhile... by Joce640k · · Score: 1

      Full credit to Microsoft though, they used to be Ten-a-Penny.

      (And before that they were free: Outlook used to simply execute any code that arrived in your inbox)

      --
      No sig today...
  2. In other words by Opportunist · · Score: 1

    We already have more than enough for Windows and MacOS, no need to pay for anything there.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:In other words by gweihir · · Score: 3, Insightful

      Pretty much this. Nobody would pay _this_ much for exploits for anything that was easy to attack. There is a good chance they will not actually get many exploits and probably nothing at all in the higher classes. Otherwise they would not offer this much.

      It is funny however, how some completely clueless morons here think this somehow says these OSes are inferior or that exploits in this price-range will ever be used for mass-attacks.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    2. Re:In other words by Anonymous Coward · · Score: 0

      Nothing new there. Remember NSA and the tainted random number generator Dual_EC_DRBG.

    3. Re:In other words by Anonymous Coward · · Score: 0

      I went out to *BSD's grave on Decoration Day. The old forgotten cemetery is by the dark woods beyond the edge of town. There within olfactory distance of the municipal treatment plant you will find *BSD's final resting place.

      *BSD's tombstone was shrouded by thick mosses and knots of noxious ivy. I gently pulled aside the tangled twists of thorns, and cleaned the decaying marker the best I could. My melancholy thoughts pondered that this indeed was *BSD's figurative charnel house of which so many have plaintively spoken.

      Nothing is so pitiful as an untended grave, a loved one now forgotten. The short sad life of this doomed and fated OS makes us realize that there but for the grace of God go all of us.

      I planted some wilting marigolds which I had found discarded behind Bud's Garden Center. By some miracle perhaps they will take root and bring a modicum of cheer to BSD's God forsaken plot. My fervent hope is that the torpid colored boy who carelessly mows the cemetery doesn't slice them down, inadvertently mirroring *BSD's own doomed encounter with death's irresistible scythe.

      Funny how things work out. Linux, that brilliant novam stellam, now runs the Internet and the world's fastest computers, while *BSD lies moldering within its forgotten crypt. Let the barren silence of *BSD's tomb be a mute reminder that hubris and braggadocio were no defense on that woeful day when the Angel of Death's bleak umbra was cast upon *BSD.

    4. Re:In other words by mnemotronic · · Score: 1

      You say "BSD" more than my preacher says "God" or "Jesus" or "Blessed Virgin Mary" combined. Almost as much as he says "I need a fu*king drink" or "get them pants off, boy". Not that it matters. I'm just sayin...

      --
      The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
    5. Re:In other words by OrangeTide · · Score: 1

      BSD. the one true religion

      --
      “Common sense is not so common.” — Voltaire
    6. Re:In other words by zwarte+piet · · Score: 1

      But programming a vulnerability yourself is easy enough

  3. open source isn't worth the time investment by Anonymous Coward · · Score: 2, Insightful

    This makes me sad. People working on open source projects get nothing. Sometimes they get some money. Sometimes they get some fame. People who don't build anything, but find a hole, they are heroes, they get prizes, they are worshiped.

    If there is a commonly used open source library without hackable bugs, you won't even hear about the author who committed his/her own time to build reliable software.

    If someone finds a bug, then she will get some prize, and will be invited to a conference. And the library author will be publicly bashed as an idiot.

    Sometimes open source people don't even get mentions.

    I was working on a patch for a huge open source project once. I spent hours on that. Two other people helped me, they also spent some significant time on that. And we managed to implement this. Who was mentioned in the release changelog? The person who committed that. Then I stopped spending my precious time on such things like giving someone the credits for my work. I love programming, I work on my own projects instead.

    And all that makes me sad.

    1. Re:open source isn't worth the time investment by Anonymous Coward · · Score: 0

      Your comment it is kind of sad. The idea is to support OSS is because you like to contribute and love programming, not only because you want recognition. If you need retribution maybe you need to do something else. Don't blame the open source model, it is just a model without a soul or hear. Maybe you have have to blame the people that take credit for your development.

    2. Re:open source isn't worth the time investment by Anonymous Coward · · Score: 0

      Over 90% of the Linux kernel contributors get paid to write nothing but Linux kernel code. Your ignorance makes me sad.

      numbnuts

  4. Wow are they really that interested... by Anonymous Coward · · Score: 0

    ...in compromising the comps of the 8 people in the world using Unix?

    1. Re:Wow are they really that interested... by Anonymous Coward · · Score: 0

      You just used a unix system to post your comment.

    2. Re:Wow are they really that interested... by Anonymous Coward · · Score: 0

      Probably better ROI than compromising the nine people in the world running Windows.

    3. Re:Wow are they really that interested... by Anonymous Coward · · Score: 0

      Three years ago I would have agreed with you. Then Microsoft added malware bordering on sabotage to their own operating system.

  5. The scary part by Anonymous Coward · · Score: 5, Insightful

    Being OSS systems, there's now real incentive for bad actors to try to INSERT "Zero day" exploits in to mainline code, putting yet even more pressure maintainers to try and keep them.

    1. Re:The scary part by Camel+Pilot · · Score: 1

      Yes.... Reminds me of Dilbert where the PHB announces a new bug bounty program and the software developers leave the meeting commenting that they need to get going as they were gonna write up a new car over the weekend.

    2. Re:The scary part by Anonymous Coward · · Score: 0

      Being OSS systems, there's now real incentive for bad actors to try to INSERT "Zero day" exploits in to mainline code, putting yet even more pressure maintainers to try and keep them.

      Other than the fuckload of money or utility they’d get from it?

    3. Re:The scary part by Anonymous Coward · · Score: 0

      https://en.wikipedia.org/wiki/Cobra_effect

  6. So, a new market emerges by what+about · · Score: 1

    Creating a zero day so obscure that nobody notices and then you sell it.
    Wondering if the price is the same even if you write the bug...

    now... let me see the quality of systemd code...

  7. NETCRAFT CONFIRMS IT... by Anonymous Coward · · Score: 0

    ...BSD is dying!!!

    1. Re:NETCRAFT CONFIRMS IT... by Anonymous Coward · · Score: 0

      ...BSD is dying!!!

      But at least they have a great code of ethics, that must be more important.

  8. Nope. by Anonymous Coward · · Score: 0

    I snail-mailed in my comment.

  9. Poettering says security isn't their job by raymorris · · Score: 3, Informative

    > now... let me see the quality of systemd code

    That's where I would go looking. Lennart Poettering has been pretty clear that his perspective is that it's not his job, or the job of the systemd developers, to write secure, robust code. It's the job of the annoying security people to point out the security issues and then convince him that the problem is so bad it absolutely must be fixed - even though that takes up time that could instead be used to make systemd bigger and more comprehensive.

    The last time I saw a similarly bad attitude about security was WordPress about 12 years ago. The leadership at WordPress got a better attitude after the media reported widespread exploits of exactly the kinds of exposures I had warned them about a couple years before.

    1. Re:Poettering says security isn't their job by Anonymous Coward · · Score: 0

      What a coincidence, running systemd is not my job.

    2. Re:Poettering says security isn't their job by Anonymous Coward · · Score: 0

      $ systemctl enable zero_day
      $ systemctl start zero_day

    3. Re:Poettering says security isn't their job by Miser · · Score: 1

      even though that takes up time that could instead be used to make systemd bigger and more comprehensive

      Bigger and more invasive you mean..... :)

    4. Re:Poettering says security isn't their job by Anonymous Coward · · Score: 0

      I said I don't run systemd, did you mean to reply to one of the other posts?

  10. That is too much. by Anonymous Coward · · Score: 0

    They are going to break the world.

  11. Finally explains how Poettering earns an income by Anonymous Coward · · Score: 1

    Step 1) Create an init system riddled with vulnerabilities and bad code
    Step 2) ?
    Step 3) Profit!

    And now we know that step 2 is to sell them to Zerodium

  12. sell to government agencies and law enforcement? by Anonymous Coward · · Score: 0

    Not a good idea, unless they are also released to the public for their self defense against the authorities.

  13. Comment removed by account_deleted · · Score: 5, Funny

    Comment removed based on user account deletion

  14. $20 for OS/2 Warp Zero-Days by martiniturbide · · Score: 2

    Here goes my bid !!!

  15. Pwnie award for "lamest vendor" by raymorris · · Score: 4, Informative

    This article has several links to Poettering responding to security bugs, and what he what he's (not) going to do to fix problems, or note any fixes in the changelings or commit messages. This is why he won the Pwnie award for lamest vendor response to security issues.

    https://www.theregister.co.uk/...

  16. Eat shit and die, Zerodium by Anonymous Coward · · Score: 0

    Firstly, it would have made a hell of a lot more sense to spell it "Zerodiem". Somebody probably took the dot-com already.

    Secondly, buying exploits only to turn around and sell them to actors of questionable intent is pretty scummy. In fact, it's downright shitty. Shame on you.

    1. Re:Eat shit and die, Zerodium by Anonymous Coward · · Score: 0

      Agree. They're some really awful fuckers.

    2. Re:Eat shit and die, Zerodium by Anonymous Coward · · Score: 0

      Secondly, buying exploits only to turn around and sell them to actors of questionable intent is pretty scummy. In fact, it's downright shitty. Shame on you.

      Zerodium are a front for the CIA, shaming them is futile.

  17. Yeah sure by jens_n · · Score: 1

    0-day exploit in OpenBSD? Hahahaha

    1. Re:Yeah sure by Anonymous Coward · · Score: 2, Insightful

      0-day exploit in OpenBSD?

      Hahahaha

      I suppose the reason why OpenBSD has the record it has is that they don't laugh at questions like that.

    2. Re: Yeah sure by Anonymous Coward · · Score: 0

      They exist. Situations like this where there is a reward will just make them harder to find, because the knowledge will be diverted away from the public good towards the government, who intends to militarize it.

    3. Re: Yeah sure by Anonymous Coward · · Score: 0

      To my knowledge there never was a 0-day vulnerability affecting the OpenBSD source code.

    4. Re: Yeah sure by Anonymous Coward · · Score: 0

      To your knowledge, do some googling.

  18. Re:Theo de Raadt is a buttlicking homo! by Anonymous Coward · · Score: 0

    If Linux gets pwned then all of the shitty windows systems surfing the web are about to get pwned too.

  19. Re: Stop payload sources of exploits used by Anonymous Coward · · Score: 0

    I wonder if apk hosts file engine is exploitable?

  20. Re: Stop payload sources of exploits used by Anonymous Coward · · Score: 0

    At 12,000 lines for something that consolidates existing host files it probably is.

  21. CentOS? by Anonymous Coward · · Score: 0

    So by extension, also RedHat Enterprise Linux, Scientific Linux, and Oracle Linux?

  22. Re:Stop payload sources of exploits used by Anonymous Coward · · Score: 0

    And today Alexander Peter Kowalski decides to prove that he is the biggest fucking retard to ever walk the planet. His software does nothing to protect against these types of attacks. At best his software will stop your computer from doing a DNS lookup of a host that was maybe making use of one of these exploits long after a patch was available and long after that host started utilizing that exploit. Too bad for him that there are measures that provide real security some of which actually stand a chance of protecting from unknown attacks. This is something that APK's work can never do as it only makes a feeble easily circumvented attempt to stop well known hosts that may make use of an exploit.

    Maybe APK should instead state that his work is:
    The least efficient, most naive way of trying to provide security.
    At least then he would be telling the truth.

  23. Impersonating me again ADVERTISERS? by Anonymous Coward · · Score: 0

    You advertisers FEAR my hosts program blocking ads that infect/track/slow us & you try CENSORSHIP hiding my posts downmodbombing 'em (I run you DRY of 'em in the end every single time)!!

    * You'll ALWAYS fail vs. me & you know it - give up - you have NO POWER over me (you know - the thing "your kind" CRAVES because you've always been powerless whimps, lol)

    (HOWEVER - I quite CLEARLY have POWER over you - FEAR, proven by you STALKING ME constantly via your UNIDENTIFIABLE anonymous posts proving you DO indeed, FEAR me...)

    MORE PROOF that "your kind" FEARS my program AND me:

    You VAINLY tried to "downmod hide" THIS post last time I posted it https://tech.slashdot.org/comm...

    (No matter - I nullify your MULTIPLE SOCKPUPPET farmed "downmodpoint" EFFETE useless 'weapon' EASILY since I have UNLIMITED posting ability vs. most AC posters - you LOSE again as ALWAYS as I run you DRY of your "downmodpoints" inevitably by REPOSTING... lol!)

    APK

    P.S.=> THANK YOU Jesus for keeping WEEZILS like him on the low end of the food chain since God HELP us if "your kind" (the 'not-men' UNIDENTIFIABLE anonymous DO-NOTHING "ne'er-do-well" JEALOUS "Lil' Jowies" (lol) in LIFE) ever DO get power - you're the WRONG KIND to have it - as you ABUSE it since you've NEVER had it or responsibility that COMES w/ it & you never will & you KNOW it (vainly seeking it online & there you FAIL too & I'm the PROOF thereof))... apk

  24. LOL! Wrong... apk by Anonymous Coward · · Score: 0

    Hosts BLOCK sources of malscript (faster vs. slower usermode parse in NoScript), malware, botnet C&C's that USE such exploits the article alludes to FAR more efficiently on resources used (less moving parts bloating RAM/CPU use + opening doors for EXPLOIT (see Tavis Ormandy on AntiVirus & DNS redirect poisoning) + do more for FAR less vs. ANY 1 competing method, natively & aren't 'souled-out' like AdBlock (ADVERTISER BRIBED to not do the 1 job it has by DEFAULT most users won't change as they don't dig into setttings) w/ it's usermode slow (vs. kernelmode cpu time precedence Ring 0 speed hosts has) & messagepass + RAM bloat onto usermode slow browser when addons are stack OR parsing slow!

    * CAN'T BE HARMED BY WHAT YOU CAN'T TOUCH & thus it can NEVER harm you!

    APK

    P.S.=> Go away ADVERTISER (you fear me & WHY) https://it.slashdot.org/commen...

    1. Re:LOL! Wrong... apk by Anonymous Coward · · Score: 0

      Retard Alexander Peter Kowalski is mad that he got called out and can't defend his position. Here he proves to the world that he doesn't understand how these types of attacks happen. Because he is a retard he thinks that these unknown zero-days will happen from someone visiting some shitty website. What retard APK fails to understand is that the direction of these attacks is likely inbound which means a hosts file does nothing. He also seems to still believe in the false premise that blacklists provide security when they have been proven not to.

      I guess APK really does like to ensure that everyone knows he is a retard and apparently he wants people who missed him getting destroyed on Tuesday have a chance to watch it happen again. Lets see if APK can actually not lose every point he tries to make, actually defend his points with real verifiable facts from reliable authoritative sources, and not deflect or attempt to change the subject. This also means your wild speculation is out, as are out of context quotes from slashdot users.

  25. Re:Theo de Raadt is a buttlicking homo! by Anonymous Coward · · Score: 0

    Cool story, bro. You Linturds are in for some serious hurt. The butthurt unleashed when the floodgates open on Linux exploits is gonna be amazing to experience first-hand.

  26. Registered /.ers review of the Win64 model by Anonymous Coward · · Score: 0

    Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017

    his hosts program is actually pretty good by xenotransplant August 10 2015

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015

    I like your host file system by Karmashock September 09 2015

    I do use APK's host file on all my systems at home by OrangeTide December 01 2017

    APK I know people give you a lot of shit regarding hosts but please don't ever stop nasredin June 12 2015

    I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017

    * Best part = Linux 64-bit model's faster/more efficient (2x the work in 1/2 the time)

    APK

    P.S.=> For a faster/safer/more reliable internet... apk

  27. How is this not illegal by Anonymous Coward · · Score: 0

    Selling them to the government. And they buying it? If I did it, they would put me in prison for it.

  28. Imagine you found a zero-day by Anonymous Coward · · Score: 0

    Are you going to be an asshole and sellout to this company? Or will you do the right thing? I'd sell it to them, collect their dirty money, and then publicly notify the right people. Then maybe disappear for a while, heheheh!

    1. Re:Imagine you found a zero-day by OrangeTide · · Score: 1

      I'd sell it to them, collect their dirty money, and then publicly notify the right people.

      Depends on the government I guess. If it was sold to the Russian government then waking up with polonium poisoning is not worth $500k.

      Then maybe disappear for a while, heheheh!

      Spies and KGB agents that have defected still die of mysterious deaths sometimes years later, you'd think they would be experts in this. Russia's need for revenge is strong, Ramón Mercader found Leon Trotsky 10 years after his exile and put an ice axe into his head.

      --
      “Common sense is not so common.” — Voltaire
    2. Re:Imagine you found a zero-day by Anonymous Coward · · Score: 0

      They know the spies and KGB that have defected and they know lots of details about them. They don't know a ghost. The trick is keeping your ego and your footprint small. Oh, and getting paid, of course.

    3. Re:Imagine you found a zero-day by OrangeTide · · Score: 1

      Seems like a risky game to play and I wouldn't do it. There are easier ways to make money.

      --
      “Common sense is not so common.” — Voltaire
  29. Re:Registered /.ers review of the Win64 model by OrangeTide · · Score: 1

    I do use APK's host file on all my systems at home by OrangeTide December 01 2017

    I've terminated my use of APK hosts. Too much spam from the creator.

    --
    “Common sense is not so common.” — Voltaire
  30. No bug found yet in Win32/64 OR Linux vers by Anonymous Coward · · Score: 0

    See subject: By users (12,000 single space lines) & why I chose Object Pascal for it (length built-in 4 strings & works on strings) vs. C++ my other fav per https://apple.slashdot.org/com... + Pascal's/Delphi's outperforms C++ by MORE than DOUBLE in the past tests in MATH & STRING work (which EVERY program does mind you).

    * IF someone were to FIND such a bug I'd correct it fast too! I wrote ALL of its code from scratch/by hand into a SINGLE 'stand-alone' TRUE executable file & NO external dependences (other than OS & IP stack API).

    APK

    P.S.=> Hasn't happened YET in either Win32/64 OR Linux versions (after 6++ yrs. of this current codebases PUBLIC release (1st was in 2001, no bugs found there either))... apk

  31. No bug EVER found (Win32/64 OR Linux vers) by Anonymous Coward · · Score: 0

    See subject: By users (12,000 single space lines) & why I chose Object Pascal for it (length built-in 4 strings & works on strings) vs. C++ my other fav per https://apple.slashdot.org/com... + Pascal's/Delphi's outperforms C++ by MORE than DOUBLE in the past tests in MATH & STRING work (which EVERY program does mind you).

    * IF someone were to FIND such a bug I'd correct it fast too! I wrote ALL of its code from scratch/by hand into a SINGLE 'stand-alone' TRUE executable file & NO external dependences (other than OS & IP stack API).

    APK

    P.S.=> Hasn't happened YET to date in either Win32/64 OR Linux versions (after 6++ yrs. of this current codebases PUBLIC release (1st was in 2001, no bugs found there either))... apk

  32. Stop exploit payload download sources by Anonymous Coward · · Score: 0

    See subject & APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).

    Yields more security/speed/reliability/anonymity vs. any SINGLE solution (99% of threats = hostnames vs. IP address that most firewalls use) more efficiently/FASTER + NATIVELY 4 less!

    (Vs. "Bolt on 'MoAr' illogic-logic" competitors slowing you, hosts speed you up 2 ways (adblocks + hardcodes u spend most time @) vs. competition loaded w/ security bugs (DNS/AntiVir) + overheads (messagepass ('souled-out' to advertiser addons) + filtering drivers) & their complexity leads to exploitation).

    * ONLY 1 of its kind in GUI on Linux!

    Better vs. Windows model in speed/efficiency/merge.

    APK

    P.S.=> What you can't touch can't hurt you... apk

  33. Registered /.ers review of a Win64 model by Anonymous Coward · · Score: 0

    Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017

    his hosts program is actually pretty good by xenotransplant August 10 2015

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015

    I like your host file system by Karmashock September 09 2015

    I do use APK's host file on all my systems at home by OrangeTide December 01 2017

    I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017

    * Best part = Linux 64-bit model's faster/more efficient (2x the work in 1/2 the time)

    APK

    P.S.=> For a faster/safer/more reliable internet... apk

  34. WRONG... apk by Anonymous Coward · · Score: 0

    Anyone's free to read what I wrote will know you're full of crap as usual ya UNIDENTIFIABLE anonymous troll that STALKS me like a psycho you are.

    APK

    P.S.=> Long ways on this thread for one of your POST BURIALS you try by "forums sliding" lol, & I also see I've RUN YOU DRY of your "downmodpoins" you MULTIPLE SOCKPUPPET farm to abuse to downmodbomb me too, lol - you're all outta ammo (I never am & just repost until you + your many sockpuppets are & I win, always).... apk

    1. Re:WRONG... apk by Anonymous Coward · · Score: 0

      Got it retard Alexander Peter Kowalski you can't actually defend your work and instead attempt to change the subject and whine.

  35. disgusting people by Anonymous Coward · · Score: 0

    This crap company is disgusting and should be nuked off the face of this earth and so should the shady people sub-human garbage behind this shit company

  36. Oh well... apk by Anonymous Coward · · Score: 0

    See subject, says it all & sad to see you go was nice while it lasted!

    * ... but @ least I'm on topic (stalling zero-day malware payloads) - you're not - I also keep another quote from you on how hosts files stall ads even in video streams too!

    (... & now? It's "Miller Time" on a HOT summer night on my deck w/ some pals soon this evening under the stars playing chess, cards & drinking beers & having a cookout (chicken & burgers))

    APK

    P.S.=> "Onwards & UPWARDS"... apk

    1. Re: Oh well... apk by Anonymous Coward · · Score: 0

      Sounds like you've strayed off topic.

    2. Re:Oh well... apk by OrangeTide · · Score: 1

      * ... but @ least I'm on topic (stalling zero-day malware payloads) - you're not - I also keep another quote from you on how hosts files stall ads even in video streams too!

      Used to be effective with YouTube ads, but not any more. More due as a quirk with how YouTube/Google set up their content distribution than due to any special magic of hosts file.

      --
      “Common sense is not so common.” — Voltaire
  37. Re:Stop payload sources of exploits used by Anonymous Coward · · Score: 0

    You are clearly a fake APK
    Everyone knows that the real APK sucks gigantic moose cock, not goat cock.

  38. Re:Impersonating me again ADVERTISERS? by Anonymous Coward · · Score: 0

    Why would an advertiser need to impersonate you? You do more damage to your own brand than they could do if they tried.

  39. Re:Stop exploit payload download sources by Anonymous Coward · · Score: 0

    Unfortuantly APK is not functional or well. Since is work is so inconsequential he needs to spam and be obnoxious so that he can feel like he matters.

  40. I don't have to: Registered /.ers do for me by Anonymous Coward · · Score: 0

    I don't have to: Registered /.ers do for me https://it.slashdot.org/commen... but not 4u JEALOUS "Lil' Jowie" (lol) the do-NOTHING "Ne'er-Do-Well" who STALKS ME by UNIDENTIFIABLE anonymous posts!

    * RoTfLmAo!

    APK

    P.S.=> I go easy next time I TEAR YOU & YOUR easily dismantled 'points' apart (since you made THIS so easy to do) https://it.slashdot.org/commen... where you FAILED vs. ME & your security issue riddled, crippled, buggy, inefficient, SLOWER & LESS capable "so-called 'solutions'" FAIL vs. hosts ... apk

  41. If THIS is "damage"? I'll take it... apk by Anonymous Coward · · Score: 0

    Your software is just fine - well written, functional... I'm going to continue using the Host File Engine by mmell February 17, 2017

    his hosts program is actually pretty good by xenotransplant August 10 2015

    his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg September 25 2015

    I like your host file system by Karmashock September 09 2015

    I do use APK's host file on all my systems at home by OrangeTide December 01 2017

    I personally use a HOSTS file blocker produced from a genius called APK by 110010001000 October 27 2017

    * Best part = Linux 64-bit model's faster/more efficient (2x the work in 1/2 the time)

    APK

    P.S.=> See subject: ONLY THING THAT'S DAMAGED HERE IS YOUR LIMITED BRAIN (lol)... apk

  42. Really? I find the opposite... apk by Anonymous Coward · · Score: 0

    The past few days, 1 source of hosts data I use intercepts s0.2mdn.net & gets in the way of TONS of music videos' ads (but makes me reload 2x to get them to play).

    * You have to understand, OrangeTide, that I MYSELF don't do the blocking (other than my OWN searches or findings on MY PERSONAL HOSTS FILE here on my system) - my sources, do!

    (Hence, my app allows you to EDIT in/out what you wish OR put an exception into its filters (only currently possible on Linux model, Windows one is hardcoded BUT SAME EXACT LIST...)).

    APK

    P.S.=> However, I also know you KNOW all this already - why you're doing what you are now, I have no idea... apk

    1. Re:Really? I find the opposite... apk by OrangeTide · · Score: 1

      Like I said, it doesn't work. There isn't really a way out with the latest YouTube architecture. I'm sure your hosts can block other video ads, especially on websites using a third party ad service. But there are several other hosts files that accomplish the same thing without using your specifically. The mechanism is pretty widely understood, and not significantly different than the RBL I use for spam filtering. (although that is distributed through DNS rather than through a file, but it's the same sort of data)

      I guess my complaints are: it's not a panacea (which is not a fair complaint, so sorry about that), your hosts file is not the only one out there.

      --
      “Common sense is not so common.” — Voltaire
  43. Says my UNIDENTIFIABLE anonymous stalker by Anonymous Coward · · Score: 0

    Says my UNIDENTIFIABLE anonymous STALKER full of such "integrity" (not) & "courage" (especially not in fear of me obviously) + "ne'er-do-well" bs as he has NOTHING to show for himself yet vainly TRIES to "put down" my work others like & use... lol!

    APK

    P.S.=> I must've REALLY "got your goat" @ some point SO BADLY that you WASTE YOUR TIME (in your obviously WASTED life) STALKING ME by UNIDENTIFIABLE anonymous posts - which you MOST likely started trying to "take me on" & I SHOT YOU TO PIECES (beneath 1 of your many SOCKPUPPETS accounts "your kind", the 'not-men' as I call you, use to farm 'downmodpoints' I always RUN YOU DRY of easily nullifying your 1 effete useless weapon too) & you're QUITE OBVIOUSLY still "butthurt" your FRAGILE EGO couldn't take it - clue: Don't start things YOU can't finish - since YOU certainly CAN'T FINISH ME, lol - I'm way too STRONG for WEEZILS like you... apk