Blocklist Facebook domains(github.com)

1,349 pointsby z0a8 tahun yang lalu348 comments

https://github.com/jmdugan/blocklists/blob/master/corporations/facebook/all

348 comments

jiaweihli8 tahun yang lalu

I highly recommend using uMatrix[1][2] if you're very privacy-conscious. It's the full-blown everything-at-your-fingertips console.

By default, it blocks third-party scripts/cookies/XHRs/frames (with an additional explicit blacklist). You then manually whitelist on a matrix which types of requests from which domains you want to allow. Your preferences are saved.

It is a bit annoying the first time you visit any new domain, because you need to go through a bootstrapping whitelist process to make it work. After a while I find I do it almost automatically though.

I use it in conjunction with uBlock Origin and Disconnect, and it still catches the vast majority of things. As a nice side-effect, I find I keep pretty up-to-date with new SAAS companies coming out!

---

[1] https://chrome.google.com/webstore/detail/umatrix/ogfcmafjal...

[2] https://addons.mozilla.org/en-US/firefox/addon/umatrix/

Digital-Citizen8 tahun yang lalu

Yet again, software freedom fighters got there years ago.

Free Software Foundation got there earlier. From publishing https://www.fsf.org/facebook published on on Dec 20, 2010. FSF & GNU Project founder Richard Stallman has been rightly objecting to Facebook for years in his talks and on his personal website at https://stallman.org/facebook.html.

Long-time former FSF lawyer Eben Moglen rightly called Facebook "a monstrous surveillance engine" and pointed out the ugliness of Facebook's endless surveillance (at length in http://snowdenandthefuture.info/PartIII.html but in other places in the same lecture series as well). See http://snowdenandthefuture.info/ for the entire series of talks.

alcover8 tahun yang lalu

I wonder how Facebook devs feel when they read such posts. Do they feel rejected ? shameful ? Does their salary really outweigh this collective disapproval of their peers ?

lwhsiao8 tahun yang lalu

Pi-Hole [1] is another nice way to filter domains at the DNS level network wide, if you want a wider reaching solution that supports wildcards. Great way to use an extra Pi if you have one sitting around.

---

[1] https://pi-hole.net/

bhauer8 tahun yang lalu

Looks like this is already covered by the "Social" add-on to StevenBlack's hosts:

https://github.com/StevenBlack/hosts/blob/master/extensions/...

tartrate8 tahun yang lalu

Is it really any use trying to enumerate all variants under *.facebook.com and similar?

The counts:

    307 facebook.com
    295 fbcdn.net
    250 tfbnw.net
     12 whatsapp.com
      9 instagram.com
      3 fb.com
      3 edgesuite.net
      2 metrix.net
      2 fbsbx.com
      2 fbcdn.com
      2 facebook.net
      2 edgekey.net
      2 cdninstagram.com
      2 akamaihd.net
      1 fb.me
      1 appspot.com

rawland8 tahun yang lalu

Let's put this in global context:

    Adblocking is a non-trivial task, but there are trivial solutions.
    
    1.) Install hosts-gen from http://git.r-36.net/hosts-gen/
    
    % git clone http://git.r-36.net/hosts-gen
    % cd hosts-gen
    % sudo make install
    
        # Make sure all your custom configuration from your current /etc/hosts is
        # preserved in a file in /etc/hosts.d. The files have to begin with a
        # number, a minus and then the name.
    
    % sudo hosts-gen
    
    2.) Install the zerohosts script.
    
    # In the above directory.
    % sudo cp examples/gethostszero /bin
    % sudo chmod 775 /bin/gethostszero
    % sudo /bin/gethostszero
    % sudo hosts-gen

Add a cron job, and enjoy your faster and adfree-er internet. Further, you can add your custom (this FB) block to the local files in /etc/hosts.d, which then will be concatenated automatically.

[source]: https://surf.suckless.org/files/adblock-hosts/

rvshchwl8 tahun yang lalu

This is a good thing to enable, but I think that smartphones contribute exponentially more data to Facebook services than laptops and browsers do. Smartphones give easy access to location, background running services, microphone. Even if you block these permissions to the app, Facebook gets the data from their data providers that use Facebook ads.

dontchooseanick8 tahun yang lalu

I advocate for iptables instead of DNS filtering.

Process of enumerating and rejecting facebook IPs :

* Query the RAD http://radb.net/query/ , search for AS32934

* Enumerate ip ranges by http://radb.net/query/?advanced_query=1

* Check inverse query by origin, use AS32934

* Grep the response route and route6 CIDR ranges

* Build a netfilter script with REJECT

Gives those scripts for iptables (updated once in a while) :

* https://cdn.rawgit.com/smigniot/mu/ea0f32867907b855063c56ae8...

* https://cdn.rawgit.com/smigniot/mu/ea0f32867907b855063c56ae8...

* https://cdn.rawgit.com/smigniot/mu/ea0f32867907b855063c56ae8...

* https://cdn.rawgit.com/smigniot/mu/ea0f32867907b855063c56ae8...

To enable :

* iptables -I OUTPUT -j no_facebook_out

* iptables -I INPUT -j no_facebook_in

* ip6tables -I OUTPUT -j no_facebook_out

* ip6tables -I INPUT -j no_facebook_in

By design, instagram and connect-with-facebook get muted too.

frawley8 tahun yang lalu

I don't see https://messenger.com or https://m.me (which also leads to messenger)

source998 tahun yang lalu

Its actually quite annoying to block all of facebook. There are a lot of innocuous sites that have at least some small reliability on facebook and blocking all of facebook makes using these sites a tad bit difficult / poor UX.

epiapp8 tahun yang lalu

For anyone who's interested, I also maintain a tracking protection list for Internet Explorer. It's based originally on the Ghostery and Disconnect lists, but I now update it independently. It's designed to be concise and speedy, yet also comprehensive. Note, however, that due to the limitations of tracking protection lists in IE, it can't block everything. You may need to supplement it with a small hosts file. Check it out here: https://github.com/amtopel/tpl

angadsg8 tahun yang lalu

Created a pi-hole friendly blocklist https://gist.githubusercontent.com/angad/3db2da1cb50a4432c9e...

reustle8 tahun yang lalu

It's a shame /etc/hosts doesn't support wildcards

0.0.0.0 *.facebook.com

digitalbase8 tahun yang lalu

Someone should start a business for this:

Provide people that care about privacy with a public DNS server they can use that auto blocks those domains (and update's its lists). I would pay for it (few dollars a month)

Feature suggestion: allow people to add their own entries so I can purposely block reddit or hacker news to reduce distractions.

Pretty sure I would set this DNS server on both my phone and desktop.

thetruthseeker18 tahun yang lalu

Can somebody elaborate why this link from 2016 is gaining steam here? Is it because Cambridge Analytica misused FB data? May be I am missing something, do we know if facebook was wittingly complicit?

nielsbjerg8 tahun yang lalu

The whole conversation, without having read into everything here in absolute detail, seem to be very tool oriented. Am I the only one here overwhelmed by the sheer amount of domains involved?

yorby8 tahun yang lalu

block all of Google's IP addresses: https://support.google.com/a/answer/60764?hl=en (note: your internet (the web) will stop working properly if you do block all of those IPs, which is a big problem)

malloreon8 tahun yang lalu

does this include instagram, messenger, and whatsapp domains too? I'm not sure if these services use their own domains.

'fb' itself will eventually be, if it's not already, just a data holding company for these and other acquisitions.

paxy8 tahun yang lalu

I wish it were that easy. Good start, but Facebook will still:

1. Get your data from other websites/apps that you allow

2. Get your data through your friends that use Facebook

heckanoobs8 tahun yang lalu

Why would you block all the domains but still keep your account that you would no longer be able to access? The account is the problem not the domains. You would have to block the domains on every device you use. Just kill the problem at the source and delete your entire surveillance account with facebook.

knowThySelfx8 tahun yang lalu

Why only Facebook? All companies which store data are suspect.

walrus018 tahun yang lalu

Similar solution to blocking things at your local recursive DNS resolver, assuming you have a captive pool of devices, let's say in 10.240.0.0/24) in a LAN, all of which are given DHCP addresses and DHCP-assigned DNS resolvers, and you're in control of a bind9 server that's on the same LAN.

Not going to prevent people with admin rights on their workstations from using another DNS resolver (or VPN, or whatever), but a fairly low effort solution.

https://community.jisc.ac.uk/library/janet-services-document...

mockindignant8 tahun yang lalu

There is more coverage of this topic here: https://news.ycombinator.com/item?id=11791052

throwaway847428 tahun yang lalu

Does anyone have this for Google ads domains and/or YouTube?

odammit8 tahun yang lalu

Man, that person put in some effort. That’s a lot of good lists.

Scrolling through them it’s really interesting to see the other sites companies own.

I always forget WhatsApp is Facebook.

RickS8 tahun yang lalu

This list presumably updates/moves around often.

Is there a service that, say, subscribes to a live list of this domain set (like adblock consumes easylist) and updates my hostfile automatically?

If not, that is a piece of software that I would find useful and worth paying for (with the ability to audit the software's ability to phone home about the rest of my hosts file)

[deleted]8 tahun yang lalu

stirner8 tahun yang lalu

I wrote a small tool that translates AdBlock Plus filter lists into hosts file format [1]. It can only translate simple domain-name rules but might be of interest to people in this thread.

[1] https://github.com/wwalexander/hostsblock

Pete_D8 tahun yang lalu

A lot of commenters mention dnsmasq. I wrote some scripts a while ago to help minimize a dnsmasq config that had been generated from a hosts file. People in this thread might find them useful.

https://petedeas.co.uk/dnsmasq/