duckhunt VS hosts

The cheapest way is a solution that monitors for high-speed keystroke injection, which is what the rubber ducky is generally used for. One such project is https://github.com/pmsosa/duckhunt (I have no affiliation with this project. It appears to have been updated about 2.5 years ago)

(Found some code that does it, but I'm not sure if it's the same one that first I saw a while back)

If it acts as a keyboard, then it is a fast one and can be prevented. https://github.com/pmsosa/duckhunt

If you worry about badusb use this https://github.com/pmsosa/duckhunt it blocks keyboard input when detected too fast typing.

Looks like it doesn't even run on Linux. https://github.com/pmsosa/duckhunt#todo

It depends on the sophistication of the attack. You could for example try to detect it based on the manufacturer. That is your best option to prevent the attack by blocking it to act as a keyboard. If spoofed, or you don't have such a measure, you can try to detect it and then stop it. Typically, by focusing on the behavior from the keyboard. E.g., connected and tying without pause, monitoring the actual first commands from the keyboard,.. Have a look at https://github.com/pmsosa/duckhunt for example.

Not by default but a blocklist can be found here https://github.com/StevenBlack/hosts

While it is now unblocked, the Steven Black list has been blocking a lot of innocent CDNs.

jQuery: https://github.com/StevenBlack/hosts/issues/2520

How does this compare to using a hosts file with known ad servers?

like: https://github.com/StevenBlack/hosts

I use the Hosts file to block a ton of ads and that works really well. https://github.com/StevenBlack/hosts Something worth considering if your ad blocker isn't working well.

The no-tracking project used by RaspAP is shutting down, so we took the opportunity to search for open source blocklist alternatives. Among the best is Steven Black's hosts list: https://github.com/StevenBlack/hosts

No idea, api.radar.io is on the block list since January 2020.

The commit's comment is "major update from adaway.org"

https://github.com/stevenblack/hosts/commit/4fa0470

You can also use a declarative adblocker like uBlock Origin Lite [1], which only provides the browser with a list of elements to filter, but doesn't have any permissions to read content or perform requests. Or simply use your hosts file to apply OS-wide filtering with no browser add-ons needed: https://github.com/StevenBlack/hosts

Be aware that if you use these "passive" blocking methods, there are some sites like YouTube where you will see ads, because in these cases it's necessary to actually manipulate page content to hide them. What you can do is use a traditional adblocker but enable it only for these few sites where the declarative approach is not enough, take a look at [2] for more details.

[1] https://github.com/uBlockOrigin/uBOL-home

[2] https://seirdy.one/posts/2022/06/04/layered-content-blocking...

https://github.com/StevenBlack/hosts if you want to do it on your PC.

When I select my custom hosts file, it basically breaks internet. However, if I choose a custom hosts file that is a copy of the dev's default, or if I just add a few lines to it, it will work. If I add too many lines, or use a different hosts file altogether (like the ones recommended by the dev), all connectivity breaks. Of course the latest official LetMeBlock is installed and mDNSResponder killed/restarted. I'm using Dopamine on A12+.