search

Ultimate-Hosts-Blacklist / Ultimate.Hosts.Blacklist

The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
MIT License
1.23k stars 156 forks source link

🚸 Remove false positive (www.)ip-api.com #638

Closed thomasmerz closed 2 years ago

thomasmerz commented 2 years ago

This PR removes (www.)ip-api.com which is a false positive and fixes #637

It has been also removed from other major blocklists: https://blocklist-tools.developerdan.com/entries/search?q=ip-api.com

I will also inform the owners of the remaining lists to remove this domain(s).

spirillen commented 2 years ago

This domain is used in many apps to track your were about https://mypdns.org/my-privacy-dns/matrix/-/issues/967390

funilrys commented 2 years ago

This won't actually help.

funilrys commented 2 years ago

It must be added to Ultimate-Hosts-Blacklist/whitelist - too

spirillen commented 2 years ago

This won't actually help.

Then why did you merge it, and why do you suggest to whitelist a well know in app tracker?

funilrys commented 2 years ago

Because I'm in control and I know that this won't do anything for the time being. In fact, it was whitelisted for less than 1h before our automation recollected all datasets.

Actually, by blocking the main page you are also blocking those who are using them for threat analytic. For example, I work I do a lot of threat analytic and ip-api.com (the main domain) is a trustworthy source to get information about an IP.

Let's be fair about the tracking thing. Since when is your public IP private ? That's probably the reason behind the usage of VPN/Proxy and other methods. You only hide your real location. But a public IP will still be used for the communication and traffic.

I'm sure most of us have access log with no anonymised IP address stored in it. Since GPDR, it's a blackbox, but it's still a thing for private blog or project websites. So we all know that our public IP will leave trace somewhere.

What their service can do is literally to put an org/isp name to an IP. I do understand that there is fear around privacy but it's still a helpful site for threat analytic. Alone the last 2 weeks I used that thing to get information about the physical location of threats against dozen of servers...

thomasmerz commented 2 years ago

I totally agree with @funilrys - the advantages outweigh the disadvantages. 👍🏻

thomasmerz commented 2 years ago

It must be added to Ultimate-Hosts-Blacklist/whitelist - too

https://github.com/Ultimate-Hosts-Blacklist/whitelist/pull/184 😁