Blocklist of all Facebook domains • Hacker News Board

Re: Blocklist of all Facebook domains

#11

Post by curiousgal » Sat, May 28, 2016, 10:44 AM UTC

hallatore wrote: post #10

Isn't Ghostery a better solution for something like this? If we are talking about browsers that is.

This uses less system resources.

Re: Blocklist of all Facebook domains

#12

Post by curiousgal » Sat, May 28, 2016, 10:45 AM UTC

Namidairo wrote: post #7

curiousgal wrote: post #4

>On Windows 7, the default AV security scan will try to remove the # facebook.com entry Wat?

I'm guessing some sort of crude malware tried to MitM Facebook logins so they started cleaning host files?

Interesting thought. I wonder if it does that to email domains as well.

Re: Blocklist of all Facebook domains

#13

Post by rochacon » Sat, May 28, 2016, 10:45 AM UTC

mfo wrote: post #2

I just want to say "Privacy matters, thanks you" (even more when FB decided to leverage their like/share button for a global ad netwotk) :-) non tech saavy guys may love a simple .sh / .bat to automatically add those entries to the /etc/hosts on windows & unix

    curl https://raw.githubusercontent.com/jmdugan/blocklists/master/corporations/facebook/all | sudo tee -a /etc/hosts

Re: Blocklist of all Facebook domains

#14

Post by Namidairo » Sat, May 28, 2016, 10:48 AM UTC

maaaats wrote: post #9

Would wildcard support in hosts files be too heavy for the performance needed? Most of these are subdomains that *.facebook.com would have blocked.

My first impression when I saw it was something along the lines of "this would be so much cleaner if one were writing this as a dnsmasq config"

Re: Blocklist of all Facebook domains

#15

Post by marios » Sat, May 28, 2016, 10:49 AM UTC

Not the way I'd do it, since you can easily miss on some new domain that belongs to facebook (or perhaps some server that does not look like it belongs to facebook in the first place, but it is sitting in their assigned subnets).

If you really want to block all traffic from/to facebook, lookup the IP prefixes associated with their AS number(AS32934), and setup your firewall to block those. If you are using PF, tables are your friend. With netfilter, consider using ipset.

Re: Blocklist of all Facebook domains

#16

Post by marios » Sat, May 28, 2016, 10:50 AM UTC

midgetjones wrote: post #5

It is faintly terrifying just how long the list is.

Considering the infrastructure Facebook is running, it's really not IMHO.

Re: Blocklist of all Facebook domains

#17

Post by avree » Sat, May 28, 2016, 10:59 AM UTC

If you're blocking Instagram, shouldn't you be blocking the Oculus Rift site (and any subdomains) too?

Re: Blocklist of all Facebook domains

#18

Post by stardogg » Sat, May 28, 2016, 11:02 AM UTC

I'm wondering ... what's the best approach to automatically collect all domains of a company?

Re: Blocklist of all Facebook domains

#19

Post by punnerud » Sat, May 28, 2016, 11:03 AM UTC

This does just the same: .facebook.com .facebook.com .fbcdn.com .fbcdn.net .facebook.com.edgekey.net .facebook.com.edgesuite.net .instagram.com .instagramstatic-a.akamaihd.net .instagramstatic-a.akamaihd.net.edgesuite.net .cdninstagram.com .tfbnw.net .whatsapp.com .fbsbx.com facebook-web-clients.appspot.com .fb.me fbcdn-profile-a.akamaihd.net h-ct-m-fbx.fbsbx.com.online-metrix.net ac-h-ct-m-fbx.fbsbx.com.online-metrix.net

Re: Blocklist of all Facebook domains

#20

Post by cm2187 » Sat, May 28, 2016, 11:05 AM UTC

I can understand the multiplication of sub domains, to be able to use multiple connections. But what's the rationale for the multiplication of domain names? Ad blocker avoidance?