Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 750543">Blacklist blocking is akin to plugging a leaky dam with your fingers.Dozens of overlapping extensions are probably only going to cause you more harm than good. Malware/Phishing/Scam sites can change IP&#039;s and domains as fast as they are blacklisted. Even something like Pi-Hole with a dozen+ daily updated blacklists won&#039;t be entirely effective.Even Fortinet, while one of the best web filtration systems, 120 full time analysts watching web page (FGuard) anomalies and validating signature additions, telemetry from FortiSandbox&#039;s, IPS, and millions of FortiClient installs can&#039;t fully keep up.I think where we are heading is a more heuristic web/traffic analysis. Sophos Home Premium and Kaspersky seem to be leaders in that area. Some newer security routers (Like Gryphon) are taking a more proactive approach by watching for &#039;anomolies&#039; from web traffic. Trend Micro&#039;s TDS backend and AiProtection is doing fairly well in that after you visit a site it can&#039;t quantify, the TDS backend goes and scans the site and if necessary blacklists it automatically.While I respect lists, and systems that implement them, like Pi-Hole, uBlock, etc. I think we&#039;re losing the battle with those technologies.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 750543"] Blacklist blocking is akin to plugging a leaky dam with your fingers. Dozens of overlapping extensions are probably only going to cause you more harm than good. Malware/Phishing/Scam sites can change IP's and domains as fast as they are blacklisted. Even something like Pi-Hole with a dozen+ daily updated blacklists won't be entirely effective. Even Fortinet, while one of the best web filtration systems, 120 full time analysts watching web page (FGuard) anomalies and validating signature additions, telemetry from FortiSandbox's, IPS, and millions of FortiClient installs can't fully keep up. I think where we are heading is a more heuristic web/traffic analysis. Sophos Home Premium and Kaspersky seem to be leaders in that area. Some newer security routers (Like Gryphon) are taking a more proactive approach by watching for 'anomolies' from web traffic. Trend Micro's TDS backend and AiProtection is doing fairly well in that after you visit a site it can't quantify, the TDS backend goes and scans the site and if necessary blacklists it automatically. While I respect lists, and systems that implement them, like Pi-Hole, uBlock, etc. I think we're losing the battle with those technologies. [/QUOTE]

Verification