News for hackers. Stuff that matters.
Re:Blocklist Facebook domains by jiaweihli on Tuesday March 20, 2018 @06:28PM (#16633376)
I use Little Snitch[1] (and its sibling Micro Snitch[2]) for filtering connections at the system level. I don't interact with it too often though, because I rarely install new apps.

Not to say /etc/hosts doesn't work, these days I just find I prefer things with better UX.

---

[1] https://www.obdev.at/products/littlesnitch/index.html

[2] https://www.obdev.at/products/microsnitch/index.html

Re:Blocklist Facebook domains by dotsh on Tuesday March 20, 2018 @06:36PM (#16633445)
Using Little Snitch to block all Facebook connections is like using goat to land on moon...
Re:Blocklist Facebook domains by odammit on Tuesday March 20, 2018 @06:50PM (#16633525)
That made me laugh out a boogie.
Re:Blocklist Facebook domains by jiaweihli on Tuesday March 20, 2018 @06:39PM (#16633461)
To clarify, I whitelist my browser entirely in Little Snitch and delegate to uMatrix and other extensions.

I also don't pre-emptively load in rules into Little Snitch - I have it running in active/interrupt mode, so it prompts me whenever it tries to make a new connection I haven't signed off on before. Unsurprisingly, not very many apps try to connect to Facebook.

Re:Blocklist Facebook domains by ReverseCold on Tuesday March 20, 2018 @06:38PM (#16633456)
What a funny example, why is that?
Re:Blocklist Facebook domains by dotsh on Tuesday March 20, 2018 @06:45PM (#16633495)
Because it is completely impractical. I used LS but it's a waste of time to check and block ads servers or malicious domains, which is why most garbage should be blocked from hosts or dnsmasq.
Re:Blocklist Facebook domains by ekovarski on Wednesday March 21, 2018 @12:13PM (#16639460)
The maintenance aspect of LS is definitely on the high side and only really dedicated folks will stick to it; if it were to come with auto-updated maintained lists it would most likely be used more
Re:Blocklist Facebook domains by alcover on Tuesday March 20, 2018 @08:25PM (#16634139)
Little Snitch is for MacOS. As a linux user I desperately looked for an equivalent and found none. Douane was suggested. It's no good. What a sorry state of affair. We need a simple app-level filtering solution.
Re:Blocklist Facebook domains by cyphar on Tuesday March 20, 2018 @11:20PM (#16635098)
There's OpenSnitch[1], though it hasn't been touched in a while. Someone needs to step up and maintain it (maybe I should do that...).

[1]: https://github.com/evilsocket/opensnitch

Re:Blocklist Facebook domains by qwerty456127 on Tuesday March 20, 2018 @09:02PM (#16634353)
Same story. I have always been dreaming of a Linux equivalent for LittleSnitch. More than a decade has passes since I've switched to Linux, still nothing...