editing the hosts file requires admin privileges doesn't it? Doing it in the browser means it works for everybody that can launch arbitrary executables.