[English only] Questions about uBlock Origin/AdGuard #4
Comments
|
@Yuki2718 forgot to tag you. |
|
As always that's a trade-off. If you're okay to noop them locally every time, ofc it's better security-wise - but that's too much trouble for people like me who browse various sites so, as you see in my dynamic-rules.txt I nooped them globally. As a matter of the number, majority of threats can still be prevented because they're implemented in uncommon 3p domains, OTOH I have seen cases malicious scripts implemented in 1p or inline where whatever you micro-manage rules it bypasses medium-mode. wp.com can be used to proxy scripts but then there're many more paths for that (amazonaws, cloudfront, etc.). Or if Wix can be abused why Jimdo or Strikingly not? I don't see a reason to take domains you mentioned special. Even with loose rules medium mode gives practically enough protection, but if you want more for peace of mind it's better to plug a hole medium mode natively has - the 1p path. Separating browser profiles when you login or buy something does most part of this. Block unneeded plugins (WordPress, jQuery, etc.) by subscribing good Social and Annoyances lists, it cannot save you from all the problems of plugins but in some cases mitigate damage. No need to ping me as it's my repo. I'll close but am thinking to keep this issue so people like you can ask something about uBO/AdGuard, probably with the title changed once I think of a good one. |
|
thank you so much. take care. |
Yuki2718
changed the title
|
https://www.wilderssecurity.com/threads/ublock-a-lean-and-fast-blocker.365273/page-194#post-2943997 Of note: https://www.wilderssecurity.com/threads/ublock-a-lean-and-fast-blocker.365273/page-192#post-2939831 In addition, the only rule Rasheed needs: |
|
@geddyhub @nicolaasjan @SampeiNihira I'll be appreciated if one of you can tell a Wilders member, rethink, that his issue has got fixed in uBlock filters - Unbreak. All he needs will be Purge all caches -> Update now and remove all the added filters from My filters, if he doesn't use default-deny mode. In this case simple cosmetic is enough, no need to allow anything. I'll later forward this to Greek AdBlock Filter and remove the fix from Unbreak once fixed in the regional list. |
|
@SampeiNihira Thank you for telling him :) |
|
@SampeiNihira Actually |
|
@SampeiNihira I'm feeling sorry to you for all these indirect conversation. Anyway, he can block BOTH css & js of
Can be easily fixed by e.g (Do not add these! -> rethink). Haven't tested but cookie-remover may be another way as the site looks cookie to fire the modal. But there's no reason to use cosmetic and scriptlet unless |
|
@SampeiNihira Can you convey my warning to MT ( Please, DO NOT use queryprune unless you know how to write correct and efficient filters. FilterAutherMode is reserved for filter authors who have such skills. queryprune has been used by built-in lists and a few other lists, it's not something on plan and the only reason FilterAutherMode is required is gorhill doesn't want people to play with this. He has been irritated to see so many people write and share inefficient filters, as a result, he warned he will restrict the option to built-in lists and My filters once he see people abusing this option [1]. [1] |
|
Changing to AG's These are tokenizable in domain part unlike the aforementioned filter, but not ideal to uBO. I'll take it back to discuss with relevant parties. |
|
Pinging @SeriousHoax too. I could be more helpful if it was other staff, but I'm quite uneasy as gorhill has been very quick to do what he warned (searching for the latest example in Reddit but can't find - he restricted something soon after a user didn't respect what is written in documentation of advanced settings). I'm pretty sure he will restrict the access to queryprune once he spotted it. |
|
Lenny Can't you come here to discuss? I don't have MT account but you have GH account. Don't get emotional. It's simple, if gorhill find it he will soon restrict the access - and FilterAuthorMode is Filter Author Mode, it's not meant for everyone to easily turn on. This is the final barrier as uBO can't hide anything as an open source project. There's no centralized documentation about tokenization, your new filters are only better in that |
|
@Yuki2718 what you think about this tracking parameters to be used to clean URLs with AdGuard Stealth mode?(removed from MT forum) __hssc,__hstc,_hsenc,_hsmi,_reqid,_trkparms,ad_bucket,ad_size,ad_slot,adid,adserverid,adserveroptimizedid,adtype,adurl,AffiliateGuid,assetId,assetType,bdref,bstk,c_id,Campaign,campaign_id,campaignId,cid,clickid,client,clkurlenc,cmpid,dclid,elqTrack,elqTrackId,exitPop,fb,fb_action_ids,fb_action_types,fb_ref,fb_source,fbclid,first_visit,ga_content,ga_fc,ga_hid,ga_medium,ga_place,ga_source,ga_vid,gclsrc,glcid,gs_gbg,gs_l,gs_Lcp,gs_mss,gs_rn,gws_rd,hmb_campaign,hmb_medium,hmb_source,hsCtaTracking,ImpressionGuid,itm_campaign,itm_content,itm_medium,itm_source,itm_term,matchid,mbid,mc_cid,mc_eid,mediatadaid,minbid,mkt_tok,nr_email_referer,num_ads,origin,page_referrer,payload,piggiebackcookie,pk_campaign,pk_content,pk_kwd,pk_medium,pk_source,providerid,pubclick,pubid,recipientId,referrer,reftype,revmod,rurl,s_cid,sc_campaign,sc_channel,sc_content,sc_country,sc_geo,sc_medium,sc_outcome,sclient,sei,siteId,sourceid,spJobID,spMailingID,spReportId,spUserID,tldid,trackid,tracking,uact,uid,usegapi,utm_campaign,utm_channel,utm_cid,utm_content,utm_medium,utm_name,utm_place,utm_pubreferrer,utm_reader,utm_referrer,utm_social,utm_social-type,utm_source,utm_swu,utm_term,utm_userid,utm_viz_id,ved,vero_conv,vero_id,zoneid |
|
@LennyFox I just ask if you have willingness to collaborate or not. The only condition is you to stop and withdraw recommending others to enable FilterAuthorMode. This is to prevent people from abusing queryprune/removeparam and other advanced feature by the mode, which will spoil all the effort of uBO developer and is threatning to us - complaints from non-advanced user who somehow enabled advanced setting is already major annoyance for this volunteer-driven project. You don't need that, as you have GH account and can distribute a list without requiring such a dangerous practice - then you'll share the same interest with me, somebody starts to abuse and your list may become invalid. Documentation is not bible, more so for new feature which is changing and it clearly states
as pointed out by HarborFront. It says nothing about "how to craft optimal filters" and that's not something can be in a thin manual - even if it was, writing such manual would require time. We write filters on solid understanding rather than just following examples in wiki. I can give at best case-by-case advices which may not cover all the cases, but at least can tell you the most important points to prevent making inefficient filters. Please come here if you want to collaborate. If you don't, I'll simply report all these and beg not to restrict the option. |
|
@Bruce-Bane IDK what you mean by what you think. Most are obvious tracking parameter, while some look questionable or may cause trouble e.g. zoneid is used in some shopping sites but IDK if removing this causes actual trouble or not. |
|
@LennyFox So you don't want to collaborate? I clearly stated your multi-line rules are also problematic. You may think you copied from gorhill's in "exactly the same manner ", which is NOT. You still misses what's important, all because you only look at appearance than meaning. Okay, that's enough. I'll report all these. |
|
Just want to say thank you to @SeriousHoax for telling my comments and sorry to all forum members, including Lenny, if these made you unpleasant. |
|
Many iterations have gone into the original design of When no pattern is provided, i.e. This filter is fine. It has no pattern from which to extract a token, but then uBO will fallback into extracting a token from the Because no token can be extracted from either the pattern or the So mainly the usual concerns must be raised when writing
All those narrowing options help uBO to know when to visit the filter, and not visiting a [1] Commits: |
|
@gorhill Thx for dropping by my thread to clear things up. So now token, other than |
To be accurate, for the filter you present, the tokens However if the pattern had been |
Despite |
|
A "bad" token is still better than no token, so uBO would still pick |
|
Ah, okay. BTW it seems he still keeps doing the flawed benchmark. Other than the point you mentioned in internal discussion, I don't think he eliminated network latency which significantly affects the results. As you said, there's not much we can do, I'm writing this solely for those who are serious to truth not to be too influenced. |
|
@geddyhub @SampeiNihira I don't remember why I closed this issue, maybe because I want to keep issues opened only which I have to address. But open or closed is irrelevant - anyone can comment on closed issues. So question is Twitch ads? The recent Twitch video ads are from the beginning Server Side Ad Injection which is impossible to block by nature. All counter measures were NOT about blocking, but about how to make you not to be chosen by Twitch as a target to deliver ads. Initially removing some parameter were effective so scriptlet was updated and subsequently queryprune was added to uBO. But it didn't last long and cat-and-mouse game began. Changing UA to Google bot was effective at one time but was soon countered, and according to dailymail floating video? Add Cookie? Annoyances filters blocking cookie-consent have nothing to do with cookie in direct sense. They either hide the consent or block script initiating it, the latter may consequently affect cookie tho. If you want to block cookies, just set your browser to do so or use uMatrix-like addons. Sure, some websites take skipping the consent as a go-sign to set cookie, but so what? uBlock Annoyances? It can be used stand-alone and we recommend to enable it if people comaplain about soft- or dismissable- anti-adb on Reddit. The major part of this list is anti soft anti-adb and anti right-click, copy, etc. It also complements Fanboy and AG Annoyances lists, say, if FB Annoyance can't solve a problem as it doesn't use advanced syntax then this is a job of uBlock Annoyances. It addresses issues specific to uBO too. Just do not expect it to be a comprehensive annoaynce list. Want to use only specific part of a list? Some popular lists are combination of many sublists. If you want only cookie consent parts of AG Annoyances these are the ones: However, these are not optimized for uBO so generally not very recommended. AG puts lists optimized for uBO under If you got an issue, report it. Most issues reported in security forums were a minute work for me to fix silently or not. I can't fully test BBC iplayer as it requires registration, but confirmed AG Annoyances broke it so fixed this part. |
|
@SampeiNihira
|
|
|
@gorhill Thx, good to know. |
did you take a look at the link?? |
|
Yes,i if it's meant to be a subscribable list (because I see |
😃 ok about the But to my original question, is there OR which of the files from the own note to issue on flrender/include: https://mypdns.org/my-external-stuff/ublockorigin-rules/-/issues/12 |
|
If you can incorporate filters.txt, the whole uBlock filters will be too because of these lines at the end of the file: |
|
Super, thanks @Yuki2718 I think I go all in, and incorporates the FOP.py to sort the output file. TRUE or FALSE? filter.txt is a combined file of all other files in the filter folder except filter-202*.txt = cat annoyances.txt badlists.txt badware.txt \
legacy.txt privacy.txt resource-abuse.txt \
unbreak.txt > filters.txt |
|
Of course |
|
Ok, that do actually mean I have to include them one by one with flrender 😭 https://pypi.org/project/python-abp/ |
|
Just a thought.... how do you counter a badfilter 🤔 💭 |
|
You can use both of |
READ THE FOLLOWING WITH A SMILE ON THE LIPS ok... so to re-enable one rule, you need two extra rules 😄 are we spinning in circles 👾 😃 List 1 ||example.com^List 2 ||example.com^$badfilterList 3 ||example.com^$1p
||example.com^$3pwho started by loading lists 1 :priceless: |
|
@nicolaasjan I'm pretty sure you misinterpreted somthing gorhill or gwarser said, in
and in fact EP has been adding rules for email tracking pixel. Just search for |
AG doesn't allow that uBO style rule but you can use equivalent regex as workaround: The same goes for $ping, but if you use AG app and not AG browser extension, you'll have to wait for the next major release to make it work reliably. I'm not sure whether the uBO style rule will work or not on the next major release. AG devs are working hard to get the release hopefully before new year. |
|
@Yuki2718 Got it. Thank you. |
|
In case you want to exclude more than 1 site: |
The easiest way is depending on many things like OS etc. Hoping this gives you some answers. |
|
Oh, sorry I forgot to answer that. Sure, I use PyFunceble with |
Our criteria is "block if it's not part of contents", however, whether the widget is part of contents or not is sometimes grey zone and requires individual assesment and discussion. This is why I asked the official members in some of your PRs. One thing for sure is we do not block each and every these widgets. |
|
In my opinion, I don't have to block the official Twitter most of the anime official webisite. P.S. sorry for my bad english. I don't speak english on a daily. |
|
@SKEIDs I agree with you, I might discuss with the team tommorrow. |
OK,I apologize for the inconvenience. |
No need to apologize. |
|
Hi. Are these domain still used? |
|
@SKEIDs |
|
sorry, my words not enough. |
|
Yeah, apparently is not working. I thought what won't work is TLD ( |
|
For a moment you can replace the rule with more specific domain. Note the rule can't be generic - |
|
I'd replace |
hi there yuki, hope you're doing ok. so, i need your help. do you think it's a bad idea to globally noop "wp.com, wordpress.com, wix.com, parastorage.com" and similar commonly used cms's with frequent/known vulnerabilities? tia for your time.
p.s.: feel free to delete this issue after a few days.
The text was updated successfully, but these errors were encountered: