News for hackers. Stuff that matters.
Re:The Guardian Is Being Swamped with 'Dark Traffic' by jacquesm on Tuesday November 04, 2014 @08:22AM (#8556340)
At a guess, by doing a match first on a substring using a hashtable. That way if something is a 'candidate' you can hit a more expensive datastructure to figure out if you really have a hit without burning a lot of cycles.
Re:The Guardian Is Being Swamped with 'Dark Traffic' by agumonkey on Tuesday November 04, 2014 @08:49AM (#8556441)
This kind of long blacklists seems so fitting for Tries. I should grep *nix kernels (I wish I had windows >Xp source too) I guess.

Linux (well, glibc, from http://unix.stackexchange.com/questions/81979/how-does-etc-h...):

http://repo.or.cz/w/glibc.git/blob/HEAD:/nss/nss_files/files...

Windows :

#tbd