Warning
There are potential issues with web site functionality, ethics, and
breaking your OS if you follow the below steps. Your Mileage May Vary.
If you break something or find yourself in existential anguish over the
moral implications of this recipe (see Ethics, &c. below), they are
totally on you.
Recipe
I take a "defense in-depth" approach to security. While I use ad
blocking add-ons in my web browsers and often use text-only browsers to
reduce the attack surface, they don't help for other apps. Here is how
I keep my hosts file updated for another layer of ad blocking on my
hosts.
First, we need to get the latest version of an ad blocking hosts file.
I get mine from [1]winhelp2002.mvps.org.
cd ~/Downloads
wget
http://winhelp2002.mvps.org/hosts.txt
Then we need to calculate the difference between the system's current
hosts file and the one we downloaded.
diff -ud /etc/hosts hosts.txt > hosts.patch
Let's back up the hosts file including permissions in case we make an
error.
sudo cp -p /etc/hosts hosts.bak
Next, we apply the patch to the hosts file as root.
sudo patch -b /etc/hosts hosts.patch
Finally, we need to refresh the DNS cache to reflect the changes.
sudo killall -HUP mDNSResponder && echo macOS DNS Cache Reset
If you find something is wrong with your host or your soul, you can
revert the change.
sudo cp -p ~/Downloads/hosts.bak /etc/hosts
… and then re-execute the DNS cache refresh command just above.
For Windows hosts, download the hosts.zip file from the above link. It
includes a batch file to automate the process.
For GNU/Linux, BSD, and Unix hosts something similar to the macOS
instructions will work for you.
Ethics, &t.
Many will argue that this type of system-wide ad blocking is unethical
up to and including theft. This is a valid argument. However, I do
subscribe to the sites and services I value the most, such as the New
York Times & Japan Times for home delivery(!), magazines like the
Atlantic, and websites like the Brooks Review.
There are security risks, privacy concerns, and system performance
issues that are equally valid. And some ads (auto-playing videos,
anyone?) consume an inordinate amount of bandwidth at additional cost
to me when I am on a metered network. These tip the scales toward
blocking, in my humble opinion.
Once ad networks and the sites that use them prove their commitment to
effective security practices, exhibit proper security hygiene, and
respect users' privacy by default I will reconsider my approach.
Please feel free to comment constructively. Don't be evil.
Also on:
[2]Twitter [3]Twitter
__________________________________________________________________
My original entry is here: [4]Using the hosts file for system-wide ad
blocking. It posted Mon, 16 Apr 2018 22:00:28 +0000.
Filed under: personal, privacy, tech,
References
1.
http://winhelp2002.mvps.org/hosts.htm
2.
https://twitter.com/prjorgensen/status/986100647220137984
3.
https://twitter.com/TokyoGringo/status/986001457123127302
4.
https://www.prjorgensen.com/?p=999