Ask HN: Ban All ByteDance and Tencent Domains | Hacker News Reader

Ask HN: Ban All ByteDance and Tencent Domains

13 pointsseethishat4 comments

Some U.S. states have passed laws that ban apps and websites developed by ByteDance or Tencent Holdings on state devices and networks. Yet, none of them provide a list of domains to block. If you were asked to implement this block on your network, how would you do it? And, how would you create a list of domains owned by these companies? How would you keep it up2date and accurate?

View on HN

> If you were asked to implement this block on your network, how would you do it?

Depends. Do I want to do a good job, or do I want to comply?

If I just want to comply, I will ask them what to block, and block exactly that, and not care what makes it through. I'm in the network connection business, not the network blocking business, so not my problem if I did what you asked.

If I'm trying to block the service, then watch dns and other traffic on an otherwise clean phone, and block things that are obviously related. If the service still works, start blocking other stuff. Check with other services to make sure they still work. You'll need to test frequently in case they try to avoid blocks.

Sooner or later, you'll have to make hard decisions about collateral damage.

Here's a good starting list of TikTok hosts, of which overlaps a few of ByteDance's domains: https://github.com/blocklistproject/Lists/blob/master/tiktok...

https://github.com/BourgeoisBear/nicsearch

    nicsearch 'na bytedance +'
    nicsearch 'na tencent +'

Also, add a cron job to update nicsearch's database from the RIRs:

    nicsearch -download

Maybe start compiling in a Notion doc.

Reply on news.ycombinator.com