3 ms·
It's actually not better than nothing. It's worse than nothing, because it gives a false sense of security. Bypassing DNS blocking is easy. You can access my n
by lightedman 7y ago
It's actually not better than nothing. It's worse than nothing, because it gives a false sense of security.
Bypassing DNS blocking is easy. You can access my normal site, block ads by DNS, but I can just serve everything up over plain IP address without the domain name being required, now you're loaded with ads/trackers/scripts anyways and your security just got bypassed.
This trick is literally as old as HOSTs. It has been proven time and time again that DNS-based blocking only works when everything uses domain names as pointers to resources, instead of using IP addresses to do the same.
It feels like APK has suddenly arrived on HN. Not a surprise since we just had him banned off Slashdot.