FINDING · DEFENSE

Static /etc/hosts bindings that hardcode correct IPs (e.g. 140.82.113.3 for github.com, 185.199.108.153 for assets-cdn.github.com) bypass DNS-injection blocking entirely, but the blog warns that GitHub IP addresses change and the file must be updated periodically to remain effective.

From 2026-anon-6-github-dns — 全网最全！6种方法解决 GitHub 国内由于 DNS 污染导致无法访问的问题 | 二毛 · §1 手动修改 Hosts 文件 · 2026 · ermao.net (Chinese-language circumvention blog)

Implications

Tools that embed hardcoded IP fallbacks for bootstrap domains must implement an automated refresh mechanism, since static IPs become stale and create a persistent maintenance burden.
Treat /etc/hosts bypasses as a fragile last resort: they fail if the censor adds IP-level blocking on top of DNS poisoning.

Static /etc/hosts bindings that hardcode correct IPs (e.g. 140.82.113.3 for github.com, 185.199.108.153 for assets-cdn.github.com) bypass DNS-injection blocking entirely, but the blog warns that GitHub IP addresses change and the file must be updated periodically to remain effective.

Implications

Tags