MVPS Hosts

I am curious and lacking (in knowledge) in this area, would anyone have any input on the usefulness and effectiveness of MVPS Hosts install/input as it pertains to W8.1.1 64Bit
Does it increase security, speed up Browsing etc?

Generally with 8.1 you are looking at a small speed overhead. But, MS now has its own black list so it is not really required. By the way I have never used that

I have never used the HOSTS file, with avast, MBAM, firefox (safe browsing), firefox - AdBlockPlus (Malware Domains filter) so I don’t feel I need that overhead.

I’ve also never used a Host file to block sites or increase security.
I’ve got enough protection. There comes a time when adding one more
chain in the protection link makes that chain too heavy.

The valid question here is how much “overlapping security” do you actually need?
The difference is the MVPS HOSTS file blocks access to malicious (and ad) sites through ALL mediums (browsers, internet enabled programs, etc) .
It is a choice as your av solution with shields protection etc. should do a likewise job.
For the browser you could incorporate a malware domain blocking into ABP: malware domains from Easylist.
I use Mirage Anti-Bot and RU-Botted and I use block lists only for reference purposes in my malicious website evaluations.

Here there is always the question how much is needed protection and what is overkill to slow the device down or starts to conflict.

polonus

Thanks guys, appreciated.
I also have never used MVPS Hosts and I certainly agree, at some point too much can be too much.
Was curious is all :slight_smile:

Adguard works pretty well for me :slight_smile:

I do use the MVPS hosts file, and have never encountered a slowdown as a result on either Win7 or WinXP. It’s an extra layer of protection for those web programs that don’t have the protection of AdBlock Plus with Malware Domains filterset. It won’t slow down the browsing anyway, since ADP will have already blocked most malware domains.

I use a custom hosts file mainly to block ads (on XP): MVPS Hosts + a few of my own additions. In conjunction with a browser’s pop-up blocker function, I rarely see any ads. I find this method less taxing to my system than a third party add-on (e.g. an AdBlocker variety) or program (e.g. PrivDog).

Appreciate the input. :slight_smile:

I use a modified HOSTS file that includes mvps hosts and other sources as well as numerous entries that I have personally added over the last few years.

In my opinion it’s sometimes better to block access to unwanted domains rather than rely on a multitude of other software to block or intercept anything dodgy. In other words if connection to a domain is blocked by the hosts file then the firewall/ security software doesn’t need to go into overdrive or display a message aimed at the user.

Additionally you can block whatever domains you like even if they’re not covered by other security solutions.

It does improve browsing speed.

Downsides:

Blank spaces appear where content is blocked unless you use additional software to replace the blank spaces with images.
Using a large Hosts file can cause slowdown unless you disable Client DNS Service.
Updating, de-duplicating, un-commenting and optimizing a large hosts file takes time.

Currently I have around 780000 entries from 8 update sources.

Wow, I don’t know if that’s dedication or obsession, But way to "high maintenance for me. ;D

@ Callender
If it makes you feel safer, go for it.
For me, that’s going way overboard.
My computer is supposed to be something I can enjoy not a full time job. :slight_smile:

If high maintenance means spending 20 to 30 minutes updating your Hosts File every month or two then so be it!

When I said it takes time I meant that it will take a while for the Hosts File update software to go through that many entries when an update is needed. Thankfully that’s not often. I only ever manually add an entry when something unwanted is detected which is a rare event.

All the best!

Appreciate your time
Thanks for the info.

HOSTS does not slow down browsing. It speeds it up since Windows system TCP/IP protocols handle it. So the browser is not forced to resolve links nor load stuff from a multitude of links on a site and it’s a “global” setting for all applications, so should there be a trojan in your favorite.exe and the IP of the site is redirected back at you, no harm done.
MVPS site suggests disabling DNS client service. I’ve done it years ago on XP and recently on Win7 since it’s not needed.
Someone here mentioned a 20-minute maintenance once a month. That’s preposterous.
I use HostMan on demand when new HOSTS is issued. Takes maybe 10 seconds.
Even download, set rights, replace the file can’t possibly take 20 minutes.
Remember-HOSTS is loaded when the computer boots, just once.
You can speed up lookup of avast forum or any favorite site if their IP is static.
Always reboot after updating or making manual changes.
Some AV and firewall products prohibit changes to HOSTS for security reason, so sometimes turning off said protection temporarily is needed.
My experience is from XP and Win7 as well as a Android tablet.
http://support.microsoft.com/kb/172218
http://www.bleepingcomputer.com/tutorials/hosts-files-explained/

Just my 5 cents :slight_smile:

Just some pondering thoughts from christopherw about the decreasing usefulness of blocklists: http://chriswoods.co.uk/2010/12/the-decreasing-usefulnesss-of-blocklists/
And when this was written in 2010 we can extrapolate the situation to the present.
With avast! shields implemented, Google Safebrowsing both in firefox and Chrome, BitdefenderTrafficLight and DrWeb;s URLChecker who wants additional malware blocklists. Well I have some listing inside ABP.

polonus

That’s not how I understand it, which is:
Hosts file use is the earliest process Windows uses for connections.
HOSTS redirection prevents an application from going there and prevents browser from connecting to extraneous sites to load the unwanted stuff.
So things like AdBlockPlus and similar don’t even get to see the attempted loads.
They are neat additions if HOSTS doesn’t have everything out there. As was PeerGuardian for p2p people.
If outgoing, SYSTEM grabs it so a connection not possible.

Bottom line: Makes less work for the browser and less work for the anti-ad, anti-crapware applications, and malware can’t call home if its IP is redirected back to your computer.

Thanks for your input Cooby,
I have a better understanding from the info provided.