search

StevenBlack / hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
MIT License
26.56k stars 2.2k forks source link

s-usc1c-nss-262.firebaseio.com is needed and is used by all Firebase Cloud Platform clients (thousands of companies) & apps. #1249

Closed johnozbay closed 4 years ago

johnozbay commented 4 years ago

Hey there @StevenBlack & @jawz101 👋🏻

This week we've started receiving support messages from tons of users telling us that they can't access our service while using PiHole, AdAway and others using these lists.

Looks like the hosts file has : s-usc1c-nss-262.firebaseio.com on line 8419

Similar to #1132 – This domain is a general domain used by all Firebase platform customers. Firebase dynamically moves platform customers between subdomains to handle scaling. Here's an official explanation from a Firebase staff member on their forums (source) :

Q:

... Would the service the clients connect to behind the scenes s-usc1c-nss-122.firebaseio.com be constant for a database "projectXYZ.firebaseio.com" or is this subject to change as well?

Staff Answer:

It is subject to change. You can be moved to a different server (the nss-### part of that URL) at any point and shouldn't rely on that for anything.

--

I believe that this week my service/app Cryptee, an open-source on-device encrypted, privacy advocating, productivity tools service, which relies on Firebase (for things like websockets as a part of our real-time productivity tools, as well as fallback for censorship circumvention), got moved onto the s-usc1c-nss-262.firebaseio.com server to handle the load. And now users of these hosts lists are having issues accessing our platform.

Having this domain blocked also means, other Firebase clients are (or will be) impacted by this as well, some of which include : NYTimes Interactive, HackerNews API, occasionally Mozilla Firefox itself and companies like NPR News, Lyft, Shazam, and more according to some quick search on the internet.

I can at least speak on behalf of my platform, Cryptee, where we don't have any ads, tracking, or anything alike. Sadly, our customer support team (incl myself) are working overtime to handle this service-is-not-accessible situation right now. 😅

If possible, it would be great if you could remove s-usc1c-nss-262.firebaseio.com from the lists as soon as possible. (and for future, all domains following the same nss-### pattern are a part of the same platform)

If you know which specific service/company is using this domain for serving malicious content / ads, I'd be more than happy to take the lead and reach out to Firebase team to have it taken down altogether, so that others who use the cloud platform for good purposes can continue to do so.

Many thanks both ✌🏻

welcome[bot] commented 4 years ago

Hello! Thank you for opening your first issue in this repo. It’s people like you who make these host files better!

johnozbay commented 4 years ago

P.S. Seems like the same thing's happening to RoamResearch and users have been talking about it on their reddit as well.

StevenBlack commented 4 years ago

Thanks John!

Ping @jawz101.

johnozbay commented 4 years ago

Thanks a million for the quick response Steven! 🙏🏻 Deeply appreciated!

jawz101 commented 4 years ago

removed. thank you

johnozbay commented 4 years ago

Many thanks for the quick turnaround time both 🙏🏻 Stay safe and well ✌🏻

StevenBlack commented 4 years ago

Thanks everybody. This is live and online in the latest release.

johnozbay commented 4 years ago

Massive thanks for this & the quick fix-time!