Hacker News new | ask | show | jobs
by leeoniya 3771 days ago
be _very_ careful about copy-pasting an enormous hosts file with one found on the internet, especially one served over http. such a thing is ripe for phishing injection.

it takes one malicious entry in the list of 10k which doesnt loop back to your own machine for me to present you with a legit-looking and secure "capitolone.com" home page.

1 comments

the solution is to use something like:

curl --silent http://someonewhocares.org/hosts/hosts | grep '^127.0.0.1' > /etc/hosts