dl.dropboxusercontent.com is in the blocklist: impossible to download file from dropbox web UI

Hello,

dl.dropboxusercontent.com has been added to the blocklist and this block downloading any file from the dropbox ui.

I’m pretty sure this is a little too much to block the whole dropbox service.

[StevenBlack]

Not everyone is into Google or Chrome Dan @dnmTX.

Remember when CoinBlockerList listed every crypto exchange one day? Then it took awhile to get that resolved? I don’t want to replay that.

Listing dl.dropboxusercontent.com, that’s not a little thing. That’s not a common false-positive. That’s a major fuckup. I just need to know, how did THAT happen? Maybe it’s an innocent mistake and, if so, that’s fine; I get it. But we don’t know that.

Here’s how I see it: I set the bar. Listing dl.dropboxusercontent.com is way below the bar. I need to make sure everyone understands, to be on this list, you gotta bring your A-game. I trust curator judgment, and I trust my judgment too: no way is this list blocking dl.dropboxusercontent.com.

Until that’s resolved, and I’m reassured the A-game is back, then we’ll talk about restoring that source.

[Belphemur]

Also, there is a danger with URL based Domain blocklist.

Since they have an automatic process where they take a given URL and transform into domain, this can lead to a lot of false positives.

It’s not because a URL on the domain is malicious that the whole domain is.

Nonetheless, I’ve also reported the false positive to their github repo.

edit: I found the commit that added the domain: https://github.com/davidonzo/Threat-Intel/commit/839cb78e9c9fc7d87d02fee96243ae8bfa55c59c#diff-584b778eee6df7f24575bd58b786e970f1bae3e419248381bb4fbd456b6d3907

Their automatic process extracts the domain from the URL. This isn’t a good way to build a domain blocklist.

Edit2: In the past, they even blocked Bitbucket: https://github.com/davidonzo/Threat-Intel/issues/20

I would recommend keeping this list out of this blocklist.