[Privacy-Blockers] - Application / OS / Lists

[valvaris]

Hello to all,

I would like to start off with why this post emerged and should be part of a security setup.

>>><<<>>>DISCLAIMER-START<<<>>><<<
For all Posted Applications and Lists
1. I am not responsible for damaged Hardware / Software of any kind
2. I do not own or am affiliated to the company / developers linked here
3. This is not a sponsored thread and do this as part of my hobby
4. Have fun and share your findings / experiences
>>><<<>>>DISCLAIMER-END<<<>>><<<​

There are things out there that blow my mind on how much effort was stuck to a project and how it developed.

====-------------------------------------------------------====
No Browser Extensions are mentioned here!
====-------------------------------------------------------====​

Here are a few that I know of and what they do in short:

Application / OS	Spectrum
Adguard Desktop (Licensed Software)	System-wide
Adlock Desktop (Licensed Software)	System-wide
eBlocker Project (NEW->Open-Source)	Network-wide
upribox (Open-Source)	Network-wide
Trutzbox (Licensed Hardware / Software) (Partial Open-Sourced)	Network-wide
RATtrap (Licensed Hardware)	Network-wide
Pi-hole (Open-Source)	Network-wide
Adguard Home (Open-Source)	Network-wide
more incoming...

So what is what?

Adguard and Adlock

Are OS System-wide Ad/Privacy Blockers that means on the installed OS (Windows) the complete OS is protected! Both have build in HTTPs Inspection with build in CA (Certificate) Install. The Protection is made from Blocklists in the Easylist pattern format - In terms of Adguard they are public and can be viewed here: Adguard Documentation

Pi-hole

Is a to make it simple a local DNS Server with Black- and Whitelists. So it blocks things already at the DNS Level... and that is it!

eBlocker

eBlocker is a total different monkey it is a Network-wide (Privacy-Blocker). Just imagine Adguard Desktop but for all devices including IoT - The other part it does all that without the need to install a extension in the browser. It is compatible to DNS Domain-Lists (Black and Whitelists), Easylist Patterns, Squid-ACL-List and more... (HTTPs Inspection with exclusion List Preloaded) and lots more features... --------- WARNING about eBlocker on Amazon.de ----------- Please do not buy eBlocker Products on the Amazon Site: ASIN B01LZZLYAC ASIN B071S8RZDK ASIN B01M0B5WAL ASIN B074RYY67N ASIN B074S2ST2R maybe more... The reason is that the Subscriptions Provided are "NOT VALID"! I am sorry not to research on Amazon.com - The reason for this update is to protect "YOU" not the Company behind eBlocker or the sellers!

Trutzbox

I try to test this next month coz the cost is harsh...

Rattrap

What is RATtrap’s speed rating? While we make every effort to keep your speed operating at optimal capacity, it is important to know that if you have a 300 Mbps (Megabits per second) or greater service speed tier with your Internet provider, you will see a decrease in throughput. RATtrap’s default security protection processes between 150-180 Mbps. We do offer a “Speed Boost” option in RATtrap’s Device Settings and in general we can process between 250 – 270 Mbps on average.If this is a limiting factor for you, please reach out to us at hello@iotdef.com and let us know. We would like to keep you informed on any upcoming hardware revisions that provider higher capability as that is the current limiting factor. Link to Rattrap FAQ -> Faq – RATtrap

All other Projects that are not mentioned is that I really could not find the time to test them and share my experience with you all.

Here are my Lists that I use:

Domain-Lists

Project: The Block List Project https://blocklist.site/app/dl/ads https://blocklist.site/app/dl/porn https://blocklist.site/app/dl/youtube https://blocklist.site/app/dl/tracking https://blocklist.site/app/dl/piracy https://blocklist.site/app/dl/malware Project: austinheap/sophos-xg-block-lists https://github.com/austinheap/sophos-xg-block-lists/ Project: Geoffrey Frogeye's block list of https://hostfiles.frogeye.fr/ Project: Blocklist Collection by WaLLy3K https://firebog.net/

Pattern-Lists

https://filters.adtidy.org/extension/chromium/filters/2.txt https://filters.adtidy.org/extension/chromium/filters/3.txt https://filters.adtidy.org/extension/chromium/filters/4.txt https://filters.adtidy.org/extension/chromium/filters/6.txt https://easylist.to/easylist/easylist.txt https://easylist.to/easylistgermany/easylistgermany.txt https://easylist.to/easylist/fanboy-annoyance.txt https://easylist.to/easylist/fanboy-social.txt https://easylist-downloads.adblockplus.org/antiadblockfilters.txt https://easylist-downloads.adblockplus.org/malwaredomains_full.txt

Please be fair and if you like a project buy or donate to it!

Credit goes to the following Users that help out to build this Topic:

@Azure @Sampei Nihira @HarborFront @security123

Best regards
Val.

 

[ForgottenSeer 823865]

eBlocker look nice.

 

[valvaris]

eBlocker look nice.

Happy to have found something you like @Umbra ^^

Sincerely
Val.

P.s. If you need help to set it up I am glad to be of assistance. ^^

 

[ForgottenSeer 823865]

Happy to have found something you like @Umbra ^^

You are welcome, it is quite rare those days for me to find something attractive...

 

[oldschool]

eBlocker looks interesting indeed.

 

[Azure]

There's also Adguard Home

AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that.

adguard.com

 

[valvaris]

@oldschool l @Umbra and MalwareTips Members,

if so requested I can post a few tips and tricks to setup eblocker since I have this currently in use right now and makes creating screenshots super easy.

For example:

Initial Setup (eblocker) goes to a very specific mode that injects itself to the network by default:
(eblocker only filters over IPv4 Protocol!) - Please do not forget to switch off IPv6 already at the Router!

For more just give me some feedback.

Best regards
Val.

 

[valvaris]

There's also Adguard Home

AdGuard Home | Network-wide software for any OS: Windows, macOS, Linux

AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it’ll cover ALL your home devices, and you don’t need any client-side software for that.

adguard.com

Thanks for the heads up about Adguard Home!
I know that product very well and sadly it is very similar to Pi-Hole in terms of functions and only filters at the DNS Level.
Gona add this to the list ^^ @Azure

Many thanks again
Val.

----------- Can not update top-level topic --------------

Application / OS	Spectrum
Adguard Desktop (Licensed Software)	System-wide
Adlock Desktop (Licensed Software)	System-wide
eBlocker Project (NEW->Open-Source)	Network-wide
upribox (Open-Source)	Network-wide
Trutzbox (Licensed Hardware / Software) (Partial Open-Sourced)	Network-wide
RATtrap (Licensed Hardware)	Network-wide
Pi-hole (Open-Source)	Network-wide
Adguard Home (Open-Source)	Network-wide

 

[oldschool]

Thanks for the offer @valvaris. I'll have to look into this. Raspberry 4 are hard to come by right now because they are so popular.

I am impressed that these folks are so dedicated to the concept that they've taken it open-source. From my vantage point, it looks as if these things happen more outside the U.S. - taking a bankrupt company open-source to continue a project, make a living but not necessarily make a real killing $$$$ doing it. I just don't see it happening here as much.

/Edit: I've bookmarked your post.

 

[Sampei Nihira]

No specific lists to stop encryption in the browser, as far as I can see.
If you insert the "crypto" tag in the FilterList, you will find 8 pages of specific lists.

 

[valvaris]

No specific lists to stop encryption in the browser, as far as I can see.
If you insert the "crypto" tag in the FilterList, you will find 8 pages of specific lists.

For the reason of "Crypto Currency" Filtering - I do not see a point on adding that for specific reasons:
- Best way to block something like that is User-Behavior and Script-Blockers.
- The other part is how the code gets injected to the browser. Cleaning out the cache or use a closed environment that resets itself like Windows Application Guard.

Of course other weak-points are possible. That is why a User should always lookout for strange behavior in the network-side of things.

For last but not least I do not understand what you try to say about "stop encryption in the browser" - So im sorry for misunderstanding your statement.

Best regards
Val.

 

[Sampei Nihira]

For the reason of "Crypto Currency" Filtering - I do not see a point on adding that for specific reasons:
- Best way to block something like that is User-Behavior and Script-Blockers.
- The other part is how the code gets injected to the browser. Cleaning out the cache or use a closed environment that resets itself like Windows Application Guard.

Of course other weak-points are possible. That is why a User should always lookout for strange behavior in the network-side of things.

For last but not least I do not understand what you try to say about "stop encryption in the browser" - So im sorry for misunderstanding your statement.

Best regards
Val.

Look at Nocoin:

GitHub - austinheap/sophos-xg-block-lists: Extending & consolidating hosts files from a variety of sources, specifically for Sophos XG.

Extending & consolidating hosts files from a variety of sources, specifically for Sophos XG. - austinheap/sophos-xg-block-lists

github.com

 

[valvaris]

Look at Nocoin:

GitHub - austinheap/sophos-xg-block-lists: Extending & consolidating hosts files from a variety of sources, specifically for Sophos XG.

Extending & consolidating hosts files from a variety of sources, specifically for Sophos XG. - austinheap/sophos-xg-block-lists

github.com

That is exactly what I try to say if even one of the NoCoin (Crypto Currency) got active. Something already happened! In terms already too late because something got infected.

But thanks for the list since I use a Sophos XG Firewall

@all I’ll try to get in touch with a mod like this I can update the first topic with links to lists.

Best regards
Val.

 

[HarborFront]

eBlocker looks like undergoing bankruptcy proceedings. Read here

Best Ad Blockers in 2024 to Secure ALL Your Devices

Online ads track your activity, record your browsing, and can even install malware on your devices. Here are the best ad blockers.

restoreprivacy.com

and RATtrap which sits between the modem and router will limit your surfing speed

 

[valvaris]

eBlocker looks like undergoing bankruptcy proceedings. Read here

Best Ad Blockers in 2024 to Secure ALL Your Devices

Online ads track your activity, record your browsing, and can even install malware on your devices. Here are the best ad blockers.

restoreprivacy.com

Old News...

That is the reason they went Open-Source... -> View Link plz

 

[HarborFront]

Old News...

That is the reason they went Open-Source... -> View Link plz

I'm not sure how their fund flow is going to be like in the long run if they are asking for donations.

How about the speed limitation of RATtrap device?

Quote

What is RATtrap’s speed rating?
While we make every effort to keep your speed operating at optimal capacity, it is important to know that if you have a 300 Mbps (Megabits per second) or greater service speed tier with your Internet provider, you will see a decrease in throughput. RATtrap’s default security protection processes between 150-180 Mbps. We do offer a “Speed Boost” option in RATtrap’s Device Settings and in general we can process between 250 – 270 Mbps on average.If this is a limiting factor for you, please reach out to us at hello@iotdef.com and let us know. We would like to keep you informed on any upcoming hardware revisions that provider higher capability as that is the current limiting factor.

Unquote

Faq – RATtrap

www.myrattrap.com

 

[valvaris]

------- TOPIC UPDATES -------
Thanks to the MalwareTips Admin. / Mods - I am now able to update the First Topic - Time to get to work!

Thanks again @MalwareTips-Staff
Val.

 

[Sampei Nihira]

Also this list I think is interesting:

Geoffrey Frogeye's block list of first-party trackers

hostfiles.frogeye.fr

 

[valvaris]

Topic Update - Highlighted - The No Browser Extension part...
====-------------------------------------------------------====
No Browser Extensions are mentioned here!
====-------------------------------------------------------====
It is my fault to not make it more clear.

I want to thank @Sampei Nihira for understanding

Sincerely
Val.

 

[valvaris]

I am a simple person but still I like a challenge.

What is this about?
I already approached Pi-Hole and they seem not to be interested to combine efforts with the dev.-team of eBlocker.

So what?
The idea behind it is to have eblocker do the pattern blocking and Pi-Hole the the recursive DNSSEC with the extension unbound.

Redirecting...

docs.pi-hole.net

What does that mean?
eBlocker has HTTPs inspection and pattern files that look inside packet for things that match. Pi-Hole can secure your DNS query and be the first point of contact. For the DNSSec chain...

Is it not redundant?
It is not because eBlocker only supports Uplink DNS - So we use this to our advantage and forward that to the Pi-Hole -> That does a recursive DNSSec query and accepts trusted responses from the Root-DNS-Servers.

What should that accomplish?
Mainly getting rid of Uplink DNS Servers (Never know who to trust!) - Plus traffic can be intercepted since it uses old DNS Protocol (eblocker)

Feedback will come in soon - My new Raspberry Pi 4 is incoming. ^^

Best regards
Val.