HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
StevenBlack
hosts
Python2013–2026
StevenBlack / hosts

hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

168Distinct people
244Mentions
5Explicit recommenders
31.5KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

GitHub

Where it is used

The last source check was inconclusive. This does not establish whether a product uses it.

What people are saying

I am in the exact same boat. And lately it's the same sort of shit... My dad will get a text message on Facebook from a "friend" (usually a dead friend) and it'll say something…

dbg31415 used a recommendation phrase. 6 indexed comments match. This is a phrase match, not a verdict.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 10:01:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year244 dated mentions

Observed mentions: 2013-02-22 16:12:14 UTC to 2026-10-07 09:41:56 UTC.

0102030402013-01-01 00:00:00 UTC to 2014-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments20132014-01-01 00:00:00 UTC to 2015-01-01 00:00:00 UTC (exclusive): 1 mentions; 1 submissions, 0 comments2015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 4 mentions; 2 submissions, 2 comments2016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 38 mentions; 2 submissions, 36 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 18 mentions; 2 submissions, 16 comments2018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 28 mentions; 1 submissions, 27 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 41 mentions; 2 submissions, 39 comments20192020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 27 mentions; 2 submissions, 25 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 21 mentions; 2 submissions, 19 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 19 mentions; 4 submissions, 15 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 22 mentions; 3 submissions, 19 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 7 mentions; 0 submissions, 7 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 11 mentions; 0 submissions, 11 comments2026-01-01 00:00:00 UTC to 2027-01-01 00:00:00 UTC (exclusive): 6 mentions; 0 submissions, 6 comments. Incomplete calendar period.2026*

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20132013-01-01 00:00:00 UTC2014-01-01 00:00:00 UTC101
20142014-01-01 00:00:00 UTC2015-01-01 00:00:00 UTC110
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC422
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC38236
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC18216
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC28127
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC41239
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC27225
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC21219
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC19415
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC22319
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC707
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC11011
2026 (partial)2026-01-01 00:00:00 UTC2027-01-01 00:00:00 UTC606

What Hacker News says

19 sources
dbg31415¡Dec 18, 2022Recommendation phrase
I really liked Windows 10. Like I honestly felt like Microsoft had gotten their head out of their ass and started trying to build a good product again. Sure, you had to use O&O ShutUp (1) and block ads via hosts table (2) and turn off DNS Caching (3) or it would take like 10 minutes to find your internet connection again every time you re-booted... but I felt like they were going in the right direction, and I could mute all the crap I hated. And then Windows 11 came out. And it has zilch in the way of any new features, and they keep pushing more and more of the annoying crap. Like a "search" button that forces Bing, and weather than forces Bing, and "online" that forces Teams and whatever else. And you can turn stuff off, for the most part... But I just feel like they're constantly trying to find new ways to spam their crap on me, and fo
Read the rest
rce their other products or services -- many of which I've already told them numerous times I hate. I hate Bing. I hate Teams. I hate all that schlock they're peddling. And they keep making it more pervasive, and harder to turn off. And look, there's no UX improvements I enjoy, there's no features I need... Windows 11, and all of Microsoft's new features for Windows are just garbage. And it was hard to install, I had to do some hacky stuff to get my motherboard to spoof some settings so I could even put Windows 11 on what was at the time a 2-year-old computer. If I had one wish for Microsoft, it would be to stop trying to sell me things via the OS. Just build a good OS, and stop all the other crap. It's not making me say, "Gosh, I love all your new features!" It's making me actively look for alternatives. (1) https://www.oo-software.com/en/shutup10 (2) https://github.com/StevenBlack/hosts (3) https://learn.microsoft.com/en-us/answers/questions/47441/ho...
In Windows 11 update added 'Search' label to taskbar search button – how to remove?
Two easy ways to block trackers and ads... without a firewall. Adding blockers to the hosts table still works with Chrome... hope they don't muck with that... https://github.com/StevenBlack/hosts But if they do... there are always DNS solutions you can add to your Router. https://nextdns.io/ I use Firefox, but even things like Windows spams ads at you if you let it. So many things have Google trackers built in too...
In Mozilla reaffirms that Firefox will continue to support current content blockers
In my experience, reporting this is a waste of time. The nodes doing the actual spamming and crawling sites for exploits are far removed from the IP addresses you see in your access logs and in your email headers. The actual abusive nodes are talking to multiple rings of compromised command-and-control hosts a.k.a. C&C hosts. Those hidden command-and-control hosts then control compromised hosts that you are seeing in email headers and access logs. For every one node taken offline there will be a myriad of compromised nodes in their available pool to take over. Blocking nodes is an endless game of whack-a-mole. The people your VPS provider gave your contact info to are likely also victims of bots and would have no idea how to fix the problem. VPS providers are also not going to disable all the compromised VM's as many of those peopl
Read the rest
e will not take responsibility and will instead get upset with the VPS provider and move to a different provider and this has financial ramifications. Most VPS providers don't have the technical resources to track down the command-and-control nodes. This requires a higher level of visibility they do not have. The folks that have this level of visibility will not likely assist with bot noise unless the bots are also being used to steal government secrets or embarrass government officials or attack public infrastructure. There are ways to trick some of the bots into attacking public infrastructure but I would not want to be caught up in that legal quagmire as I am easy to find and bot owners are not. In summary, the best one can do is either configure systems to discard the noise in web logs and block low reputation IP addresses in their mail servers or if one feels the desire to do something, create tarpits/honeypots for the bots to get stuck in. Tarpits have very little impact on bots but if one wanted to feel like they were doing something it's a start. For example, I have numerous nodes that accept email for all the popular domains. Spam bots think they are relaying thousands of emails through my nodes per day but that is a tiny fraction of a tiny fraction of the spam that people will receive. I am not even making a tiny dent in the problem. As a side note, there are ways to block some of these bots if you control your web and email servers but that is another topic all together and if too many people implemented such techniques then the bot developers would evolve around it. Apologies if this sounds defeatist. Some use blocklists [1][2] to reduce the noise on their web servers and RBL/RSL [3][4][5] servers to reduce the noise on their mail servers but this has limited efficacy and I think it just takes up memory by increasing the routing table or takes up CPU by making large ipset lists for iptables. [1] - https://github.com/firehol/blocklist-ipsets [2] - https://github.com/StevenBlack/hosts [3] - https://www.uceprotect.net/en/index.php?m=6&s=0 [4] - https://www.spamcop.net/fom-serve/cache/291.html [5] - https://www.spamhaus.org/zen/
In Ask HN: Is it pointless to report hosting Abuse?
memorable¡Jun 2, 2022Submission

Show HN: Simple and self-hosted URL shortener

Hi HN! For the past 3 days, I have been actively working on a URL shortener called FlyURL. It started as a project to help me learn Python and Flask, but now has grown into a pretty big project. Some main differences between FlyURL and other self-hosted URL shorteners (like Pckd[0] or Shlink[1]): - FlyURL is ONLY compatible with SQLite (Unlike Pckd) - FlyURL has NO API or CLI (Unlike Shlink) - FlyURL has really basic tracking (Only by clicks), while Pckd and Shlink features more robust tracking (This is something on working) - FlyURL has a clean and basic UI (Influenced by is.gd[2], and thanks to Lit[3]) - FlyURL requires NO logins (Influenced by chilp.it[6]) - FlyURL uses blacklist from Steven Black's hosts[4] and its in-house URL shortener service list[5] to block harmful websites and prevent creating a "chain" of URLs (Influenced by is
Read the rest
.gd) (I'm not sure if Pckd or Shlink do the same, but it's likely they do) - FlyURL is built with Python and Flask (Shlink is built with PHP, and Pckd is built with React) If you want a URL shortener that just works, then FlyURL may fit for you. If you want more features and more robust, then Shlink and Pckd are better choices. [0]: https://github.com/PckdHQ/Pckd [1]: https://shlink.io/ [2]: https://is.gd [3]: https://ajusa.github.io/lit/docs/lit.html [4]: https://github.com/StevenBlack/hosts [5]: https://gist.github.com/HoangTuan110/e6eb412ed32657c841fcc2c... [6]: https://chilp.it
1 points ¡ Open discussion

Showing the 15 most recent of 19 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.