Reply to thread

Message

<blockquote data-quote="ForgottenSeer 107474" data-source="post: 1077196">Sorry, mis communication from my side probably.With your static user rules and dynamic easy-medium mode to limit attack surface from third-party domains, you don&#039;t need the uBO malware / phishing blocklists.&nbsp;I mentioned the uBO and abuse.ch url house database (<a href="https://urlhaus.abuse.ch/" target="_blank">link</a>) just as an example (go check them out and you will see you block 95% of them).It is better to do malware blocking at DNS level&nbsp; and add an extension of a security vendor, simply because their blacklists are 1000x larger than the blocklists of uBOWith above approach you already have multiple layers (definitely no need to add a malware/phishing blocklist to your adblocker)<ol>
<li data-xf-list-type="ol">At DNS level (Quad9, NextDNS, Cloudflare 1.1.1.2)</li>
<li data-xf-list-type="ol">Google Safe browsing or Microsoft Smartscreen filter in your browser</li>
<li data-xf-list-type="ol">Extension from a reputable security vendor (Bitdefender, Emsisoft, Netcraft)</li>
<li data-xf-list-type="ol">Most AV-&#039;s have some network filtering or https-scanning module/mechanism</li>
<li data-xf-list-type="ol">a) For URL&#039;s your third-party exposure reduction rules in uBO or AG 
b) For downloads with MOTW - smartscreen again</li>
</ol>Malware and phishing links usually live shorter than 24 hours. The default update frequency of blocklists in adblockers is once a day (or once every 48 hours), which makes them near to useless for short lived malware URL blocking.</blockquote>

[QUOTE="ForgottenSeer 107474, post: 1077196"] Sorry, mis communication from my side probably. With your static user rules and dynamic easy-medium mode to limit attack surface from third-party domains, you don't need the uBO malware / phishing blocklists. I mentioned the uBO and abuse.ch url house database ([URL='https://urlhaus.abuse.ch/']link[/URL]) just as an example (go check them out and you will see you block 95% of them). It is better to do malware blocking at DNS level and add an extension of a security vendor, simply because their blacklists are 1000x larger than the blocklists of uBO With above approach you already have multiple layers (definitely no need to add a malware/phishing blocklist to your adblocker) [LIST=1] [*]At DNS level (Quad9, NextDNS, Cloudflare 1.1.1.2) [*]Google Safe browsing or Microsoft Smartscreen filter in your browser [*]Extension from a reputable security vendor (Bitdefender, Emsisoft, Netcraft) [*]Most AV-'s have some network filtering or https-scanning module/mechanism [*]a) For URL's your third-party exposure reduction rules in uBO or AG b) For downloads with MOTW - smartscreen again [/LIST] Malware and phishing links usually live shorter than 24 hours. The default update frequency of blocklists in adblockers is once a day (or once every 48 hours), which makes them near to useless for short lived malware URL blocking. [/QUOTE]

Verification