Avast WEBforum
Other => General Topics => Topic started by: polonus on February 02, 2015, 03:27:24 PM
-
Read here: http://www.ft.com/cms/s/80a8ce54-a61d-11e4-9bd3-00144feab7de,Authorised=false.html?_i_location=http%3A%2F%2Fwww.ft.com%2Fcms%2Fs%2F0%2F80a8ce54-a61d-11e4-9bd3-00144feab7de.html%3Fsiteedition%3Duk&siteedition=uk&_i_referer=
Waiting for Admuncher to get free.
But do you want to be no protected against any malvertising from Google, MS, Amazon :o
More and more we find ourselves on a slippery slope, who can be trusted when there is a lot of cheap money involved? :)
Google (and other big companies) were asked to pay money by a firm called EYEO GmbH to show their ads. This firm owns Adblock Plus together with its main developer Wladimir Palant. And big player firms like Google accepted their offering (rumored as 30% of the ad-costs)
Re: http://translate.google.com/translate?hl=&sl=auto&tl=en&u=http%3A%2F%2Fwww.mobilegeeks.de%2Fadblock-plus-undercover-einblicke-in-ein-mafioeses-werbenetzwerk%2F (link article author = Sascha Pallenberg.
Cited here: https://www.systemshock.org/index.php?topic=5390.0
This is the Financial Times news story,,
Are these all verified facts, or is it simply a question of whitelisting where users still have a choice
Or did the story stem from someone that hates ABP and Mr. Palant?
polonus
-
One word! "Adguard" ;D unfortunately it's not free though.
-
CraigB,
Adquard is free as a Google Chrome extension and I have it installed.
polonus
-
This isn't something that has just happened - it has certainly allowed ads from some (big) companies for some considerable time and they haven't hid it.
Some time ago I think it used to mention it and say if you the user choose to block these that is your choice and it would be honoured.
So are you saying they aren't going to honour that - as my blocks are still in force and I don't see any ads from the companies you mention. I rarely see any ads.
AdBlockPlus shouldn't be your only protection against malvertising and why other tools, NoScript and RequestPolicy FF ad-ons are more than capable of blocking ads in addition to their normal functionality.
-
Well ABP, still works for me. No issues so far.
Note: There's a checkbox right below the filter setting you might want to disable. ;)
-
Hi DavidR,
I also am aware of ABP's whitelist of some accepted ads (you have an option also to block these).
Adblock has said only 25 per cent of Adblock Plus users are strictly against any advertising. It said those users can disable the feature.
I found this story cited on a respectable Dutch news site: https://www.security.nl/posting/417119/AdBlock+Plus+zou+advertenties+Google+en+Microsoft+doorlaten
As I now precised further I just pass this, Financial Times also seems a reliable source.
Whenever it stems from a concerted action against ABP and it's makers I stand corrected.
Well, DavidR, as anyone this is a respectable source, the Reg has it also: http://www.theregister.co.uk/2015/02/02/google_amazon_taboola_microsoft_adplock_plus_unblock/
polonus
-
CraigB,
Adquard is free as a Google Chrome extension and I have it installed.
polonus
Pol, I'm not sure if the extensions have anywhere near as many options as the full program does it ? can you add additional and custom filters in the extensions and block malware pages as well ?
-
It also speaks volumes about the companies bribing AdBlockPlus to let them in.
Especially Google who went to the point of not letting the AdBlockPlus android app/add-on to be included in their app store.
-
See what it can do here: chrome-extension://bgnkhhnnamicmpeenaelnjfhikgbkllg/pages/options.html
It can block ads on website, submit a complaint, get a website security report, allow acceptable ads (what we are discussing).
Set Adquard settings. I have set it for English, Dutch and Polish language settings.
Yes I can add filter rules. And Browsing Security - Phishing and malware protection - Help us in Browsing security filters developmentSubmit anonymous security-related information.
Nice extension next to Ghostery, HTTP Switchboard and Tracker SSL.
polonus
-
Not bad then if you get the extension for free :)
-
The ABP non-intrusive advertising whitelist filter:
https://easylist-downloads.adblockplus.org/exceptionrules.txt
There is a new list every day.
I hope the list is free of malvertising :-X
An alternative is formed by Adblock Edge which comes without the "Allow non-intrusive advertising" option (firefox)
For Chrome there is uBlock.
polonus
-
The ABP non-intrusive advertising whitelist filter:
https://easylist-downloads.adblockplus.org/exceptionrules.txt
There is a new list every day.
I hope the list is free of malvertising :-X
An alternative is formed by Adblock Edge which comes without the "Allow non-intrusive advertising" option (firefox)
For Chrome there is uBlock.
polonus
For Pale Moon there is Adblock Latitude :
https://addons.palemoon.org/extensions/privacy-and-security/adblock-latitude/
-
@abruptum, thank you very much for that additional info.
Here is a collection of lists to evaluate the extended versatility of the lightweight uBlock extension for Chrome and also for Sleipnir.
Filter lists for uBlock: https://github.com/gorhill/uBlock/wiki/Filter-lists:-gorhill
And you can use an adblocker for more blocking(s) than just ads. It may also block tracking (privacy), malware domains, social blocking (annoyances), multipurpose hosts - as you all may see from the various filters and block lists presented in the link above.
Enjoy my good adblocking friends, enjoy.
polonus
-
An alternative is formed by Adblock Edge which comes without the "Allow non-intrusive advertising" option (firefox)
For Chrome there is uBlock.
I recommend those too, but uBlock is available for Chromium, Firefox and Safari :)
Greetz, Red.
-
And then of course we have ad-launching that comes from where it is hard-coded into the browser.
Read here: https://forum.avast.com/index.php?topic=165590.msg1179473#msg1179473
Info credits go to our forum friend OliPicard, and he seems to know what he is on about....
There is no browser based adblocker that can help us here.
Fighting some ads becomes more and more of a rearguard action, my friends.
polonus
-
Check out the comparison AdBlock Edge vs. AdBlock Plus
www.infosecurity-magazine.com/news/money-mule-scam-siphons-214mn/
-
Cannot figure out the relation between these adblockers and the story in the link?
polonus
-
Cannot figure out the relation between these adblockers and the story in the link?
polonus
It seems unrelated as this is about:
A sophisticated scam targeting businesses working with foreign suppliers and businesses that regularly perform wire transfer payments is making the rounds, involving the recruitment of money mules and fraudulent “business opportunities.”
I don't see AdBlock Edge or AdBlock Plus mentioned anywhere.
-
Try this one...http://adstomper.bitbucket.org/Differences.html
I know what happened I posted the other link in the "Security Warnings" thread and failed
to copy/paste the right link. :-[
-
Easily done - I have done it myself on occasion.
-
Open up in Google Chrome here: chrome://net-internals/#events&q=type:SPDY_SESSION%20is:active
and here: chrome://net-internals/#sockets
See: https://www.uploady.com/#!/download/Mi5MRwOPq2F/QkpRaE2lkyyl7~jo
Shown live sockets: https://www.uploady.com/#!/download/ADGi29dLiAr/IiqsShcGAV9mVr1D
and https://www.uploady.com/#!/download/14u3l_oiSEO/nafklJfJbwvlBH~g
polonus
-
After reading about AdBlock Plus & Google/Microsoft, well, bye bye AdBlock Plus.
Moved to uBlock in both Firefox and Chrome.
-
I'm giving AdBlock Edge a go for now. So far, so good. 8)
-
After reading about AdBlock Plus & Google/Microsoft, well, bye bye AdBlock Plus.
Moved to uBlock in both Firefox and Chrome.
I enabled the MVPShosts list and disabled Peter Lowe's adserver list. The reason I disabled Peter Lowe's is that I was having problems with video playback so I was trying to narrow down the filters to see which may be causing it. This video playback problem never occurred while using AdBlock Plus.
Have you added to or taken away any of these lists?
-
Have you added to or taken away any of these lists?
Added:
-
And why a good adblocker is needed, read: http://www.usatoday.com/story/tech/2014/01/16/google-bad-ads/4513431/
link article author = http://www.usatoday.com/staff/4375/alistair-barr/
1 million suspect google ads each day removed :o
Malvertising therefore could/should be a sound reason to continue full adblocking.
polonus
-
Yeah. It's a pity that we don't have a self anti-ad ourselves :)
-
Have you added to or taken away any of these lists?
Added:
What you add or remove should depend on what other tools, addons etc. you use. For example I prefer to add MVPS and the Malware Domains list to the HOSTS file for overall protection, so I remove detection for those from uBlock. The same if you use addons that block trackers etc.
Greetz, Red.
-
I'm satisfied with AdBlock Plus, along with the filtersets Malware Domains, Easylist, and EasyPrivacy. That combination along with MVPS hosts file means I don't see ads unless they are served from a domain that I've whitelisted. I did uncheck the "Allow some non-intrusive advertising" in the AdBlock Plus interface. I also use NoScript which blocks JavaScript and plugins including Adobe Flash, unless whitelisted.
-
Established that on the Google Chrome start page, ABP does not block metric.gstatic.com and uBlock does.
HTTP Switchboard also blocks metric.gstatic.com.
uBlock blocks 4 requests from that page.
Most extensions do not work on such a uri.
So quite some google tracking goes on unhindered.
SSL Tracker gives Unique IDs about your web browsing habits have been securely sent to third parties.
67=ymnks3rpabxjjyjnxha-m_9kk7-//////////////////////////////////5vvmcviv0couvhgqwv082keovc8tif-r881omoyaekqqt2bfklch3gkkxblaxezh7sziv////// apis.google.com
polonus
-
I'm satisfied with AdBlock Plus, along with the filtersets Malware Domains, Easylist, and EasyPrivacy. That combination along with MVPS hosts file means I don't see ads unless they are served from a domain that I've whitelisted. I did uncheck the "Allow some non-intrusive advertising" in the AdBlock Plus interface. I also use NoScript which blocks JavaScript and plugins including Adobe Flash, unless whitelisted.
Side note: uBlock seems to be faster and use much less resources than ABP.
-
Lisandro,
Thanks for your reaction.
You are definitely right there. It is very lightweight and can load more subscription lists without slowing down the browser.
This thread is developing nicely, good info and good reactions to confirm some positions.
But I always thought the avast support forums hold a wealth of useful information for many.
Glad to be able to be part of it. ;D
polonus
-
Attached is my list. This is turning into a great topic.
One question and I would really appreciate your input. Does uBlock take care of web beacons/bugs or is there something else that needs used?
-
Here is some data regarding overhead comparing uBlock to AdBlock Plus. Keep in mind, this is from the developer.
https://github.com/gorhill/uBlock/wiki/%C2%B5Block-vs.-ABP:-efficiency-compared (https://github.com/gorhill/uBlock/wiki/%C2%B5Block-vs.-ABP:-efficiency-compared)
-
Malware being distributed by ads in legitimate sites: malvertising.
http://translate.google.com/translate?&ie=UTF-8&sl=&tl=en&u=http://idgnow.com.br/internet/2015/02/04/anuncios-maliciosos-em-sites-conhecidos-enganam-usuarios-na-web/
-
One question and I would really appreciate your input. Does uBlock take care of web beacons/bugs or is there something else that needs used?
I know that MVPS also takes care of web bugs, but I am not sure what other lists do.
Greetz, Red.
-
@Charyb
Web bugs are best treated by an extension like Disconnect.
So we always need a cocktail of web extensions to do the anti-tracking job versus cookies, ads, etc (minimal three extensions)
Next to uBlock:
HTTP Switchboard and ScriptSafe blocking can handle all issues for Google Chrome , like uBlock, NoScript and RequestPolicy do for firefox
HTTP Switchboard is so versatile it blocks tracking by default, but also all sort of items on demand - cookie - css - img - plugin - script -XHR - frame - other. Where I am writing this it blocks request for www.google-analytics.com, so 1 item and you can set some 11 more items to be blocked.
uBlock stops one request - similar as HTTP Switchboard and uBlock are from one and the same developer. The following sites know that you visited this page. Click on a site to find out what more it knows about you: google-analytics.com (this is the message for the forum page here at https://forums.avast.com).
polonus
-
Some observations about extension interaction with ScriptSafe in Google Chrome through other extensions, sometimes redirects from HTTP Switchboard and uBlock comes to be established earlier and I get a ScriptSafe extension alert from inside Google Chrome Managment (orange alert).
In the Golden Age of Tracking and Surveillance via your browser adblocking has many aspects of a reargard tussle.
First users protected themselves against cookies, in came more stealthier cookies and other ways like web beacons and even more devious ways.
Now we are in a phase where the adlaunching comes hard coded into the web browser outlay (tiles in firefox) because the average user won't avoid that by changing the about:config settings for json, or via special firewall settings.
When ads are your core business it is hard to offer a browser that is a user friendly browser in these respects like the Google Chrome browser.
This would not be such a problem when there weren't millions and millions of malware ads that put the user at risk and Google has to stop.
This makes our look upon adblocking quite differently - adblocking is an integral part of the average user protection.
Adblocking necessare est! (Adblocking is a neccesity!)
I also observed that extensions work differently when I work Google Chrome inside sandboxie. Also a problem forms how Google protect the browser from extension interference, some lower layers in the browser cannot be reached by developers, as Google does not allow it, so other ways around that should be sought or other ways to get the required outcome. HTTP Switchboard seems a clever concept here.
That a browser is meant to feed you ads like your parents tried to fed you cod liver oil in the evening in the 50's (open your mouth and hold your nose, now swallow) is shown when you find complete privavcy protection with no-script actively working a browser in tor. The browser may stop page loading and Google may start to feed you continuous captcha's to establish whether you are human (they apparently lost your tracking and monitoring trace slightly). Another way of pestering browser users that use tor is the continuous captcha's being thrown up from websites that come to us via CloudFlare. So all monopolists apparently are into the same game here.
Another example Google does not like adblockers was to block ABP app out from their Android platform where they had enough monopoly to dare and take such a position - take it or leave it. Existing Adblock users even had to change their smartphone proxy settings to make ABP would not stop functioning.
I could even find myself allright with the so-called non-intrusive ads, but I know malvertisers won't leave them alone, because they are a royal unobserved way into the browser (Google cannot guarantee the ads will be non-malvertised and there are more malcreants malvertising than Google's way to stop them or willingness to stop them, because cheap money from clean advertising and clickfraud SEO spam or malware injected ads is part of the same income stream).
polonus
-
Again we have to be realistic, my friends, and realize that only 8% of firefox users ever use adblocking in the browser.
The higher percentage is found with linux users where we come to percentages of 12 to 13 percent.
We have solutions like Adfender that runs in all browsers. But I do not know what ads they let slip by?
Chinese browser of choice, Maxthon, comes with in-built adblocking of sorts, and here we find some added suggestions:
http://forum.maxthon.com/forum.php?mod=viewthread&tid=5831&page=1#pid31392
What we found here on this thread that more users may adopt to adblocking.
Seems that our informed avast users do use some form of adblocking.
Avast evangelist that do not adblock, I hope there is no-one.
But it would be interesting to know how many do not have any adblocking installed :o
Here the opposite postion of those that see ad-, script- and track-blocking as the three forks of the devil:
http://www.makeuseof.com/tag/adblock-noscript-ghostery-trifecta-evil-opinion/
Added in UBlock: https://secure.fanboy.co.nz/r/fanboy-ultimate.txt
On -http://www.bidnessetc.com/ ABP blocks 0 and uBlock blocks 2. Further blocking through HTTP Switchboad possible.
polonus
-
In ScriptSafe I get this alert inside Google Chrome browser:
Warning:
This extension could not divert a network request to about:blank while another extension (HTTP Switchboard) redirected the request to data:text/html,%3C!DOCTYPE%20html%3E%3Chtml%3E%3Chead%3E%3Cstyle%3E%40font-face%7Bfont-family%3Ahttpsb%3Bfont-style%3Anormal%3Bfont-weight%3A400%3Bsrc%3Alocal(%22httpsb%22)%2Curl(%22chrome-extension%3A%2F%2Fmghdpehejfekicfjcdbfofhcmnjhgaag%2Fcss%2Ffonts%2FRoboto_Condensed%2FRobotoCondensed-Regular.ttf%22)%20format(%22truetype%22)%3B%7Dbody%7Bmargin%3A0%3Bborder%3A0%3Bpadding%3A0%3Bfont%3A13px%20httpsb%2Csans-serif%3B%7D%23bg%7Bborder%3A1px%20dotted%20%23cc0000%3Bposition%3Aabsolute%3Btop%3A0%3Bright%3A0%3Bbottom%3A0%3Bleft%3A0%3Bbackground-color%3Atransparent%3Bbackground-size%3A10px%2010px%3Bbackground-image%3Arepeating-linear-gradient(-45deg%2C%23cc0000%2C%23cc0000%2024%25%2Ctransparent%2025%25%2Ctransparent%2049%25%2C%23cc0000%2050%25%2C%23cc0000%2074%25%2Ctransparent%2075%25%2Ctransparent)%3Bopacity%3A1.0%3Btext-align%3Acenter%3B%7D%23bg%20%3E%20div%7Bdisplay%3Ainline-block%3Bbackground-color%3Argba(255%2C255%2C255%2C1)%3B%7D%23bg%20%3E%20div%20%3E%20a%20%7Bpadding%3A0%202px%3Bdisplay%3Ainline-block%3Bcolor%3Awhite%3Bbackground-color%3A%23cc0000%3Btext-decoration%3Anone%3B%7D%3C%2Fstyle%3E%3Ctitle%3EBlocked%20by%20HTTPSB%3C%2Ftitle%3E%3C%2Fhead%3E%3Cbody%20title%3D%22%26ldquo%3BwXw.firstpost.com%26rdquo%3B%20frame%0Ablocked%20by%20HTTP%20Switchboard%22%3E%3Cdiv%20id%3D%22bg%22%3E%3Cdiv%3E%3Ca%20href%3D%22http%3A%2F%2FwXw.firstpost.com%2Fpromo%2Fbusiness_widget.html%22%20target%3D%22_blank%22%3EwXw.firstpost.com%3C%2Fa%3E%3C%2Fdiv%3E%3C%2Fdiv%3E%3C%2Fbody%3E%3C%2Fhtml%3E.
Allowed in incognitomode
Installed
Anyone?
polonus
P.S. Tracker SSL warns: At least 4 third parties know you are on this webpage.
-fonts.googleapis.com Google
-s1.firstpost.in
i-mg-d01.moneycontrol.co.in
-www.firstbiz.com
Damian
-
Still need your adblocker, read: http://www.invincea.com/2015/02/fessleak-the-zero-day-driven-advanced-ransomware-malvertising-campaign/
polonus
-
Hi my dear avast users,
Re: https://forum.avast.com/index.php?topic=165934.msg1181627#new
Another interesting link there developing on this subject, where our good bob3160 gives us a direct link to add uBlock add-on to the firefox browser: http://www.wilderssecurity.com/threads/ublock-ublock-for-firefox.371397/
Firefox does not give it on their official add-on install listing, because of obvious reasons, you could well imagine.
Now firefox revenues are from donations, circumvented ads, tiled ads that come hard-coded in their browser and with the latest ABP version you can also donate to the makers of ABP. I thought ABP makers had enough ad-related income from the non-instrusive ads they let through unhindered/unnoticed via their German bureau.
I am glad I now have uBlock running inside firefox and it works like a charm. Some say it is not a genuine adblocker, but "if something swims like an adblocker, quacks like an adblocker to me it is an adblocker".... ;D
polonus
-
Adblock being paid is very old news. You are quite late to this party.
Still, its relatively easy to create custom rules in adblock, just find the offending element and block it globally.
-
Hu Tia,
This news resurged with an articile in the Financial Times, that has shown new light on the enterprise behind ABP in Germany.
What you mention was already known also to me, the so-called whitelisting of non-intrusive ads. That it goes far beyond this with exclusivity for big players like Google, Microsoft, Yahoo etc, was not known so far. Next to that ABP aks for user donations in firefox.
Time for me to switch to uBlock.
polonus
-
Next to that ABP aks for user donations in firefox.
polonus
Hi Pol, haven't seen it so far. Out of interest, could you please post a screenshot..!?
-
Adblock being paid is very old news. You are quite late to this party.
Still, its relatively easy to create custom rules in adblock, just find the offending element and block it globally.
Yes, as I mentioned way back in Reply #3 and you aren't forced to comply.
This isn't something that has just happened - it has certainly allowed ads from some (big) companies for some considerable time and they haven't hid it.
Some time ago I think it used to mention it and say if you the user choose to block these that is your choice and it would be honoured.
-
Hi Asyn,
Here you can see it for yourself and in your native tongue. They are asking 5 dollar to develop further an extension that functions as man in the middle between big companies and ads to unblock, not because ads are designed to be non-intrusive, not because ads would be additional to real value content. And also not because ads are known to be non-malvertised by malcreants. Look where it says""Gefällt Ihnen dieses Add-on? - Einen Beitrag Leisten?" see: https://www.uploady.com/download/6jP1LOYAnDa/a5uQliUrdHSO2YUv
Damian
-
Ah ok, that's what you meant. Thanks Damian. :)
Btw, ABP is not alone asking for a donation, e.g. NoScript asks for 15$. ;)
-
Hi Asyn,
Understand this fully, and normally I would not mention this, but NoScript is not a man in the middle tool getting money for circumventing some actions it should do.
About what ads you see (important to see what surveillance advertising is being served up) see floodwatch, this extension: chrome-extension://lnnmlfhgefcbnolklnepapefmmobedld/disclaimer.html
Damian
-
In addition to uBlock, I have added uMatrix to Chrome. It is recommended to remove the Malware Domain list since they already exist in uMatrix. The only problem I have had is using uMatrix with Facebook. A script is blocked by default which causes problems. Once allowed, all seems ok. Will be back with more.
-
Hi Charyb,
uMatrix is a spinn-off of HTTP-Switchboard extension. HTTP-Switchboard is in the line of having an extension for Google Chrome like No-Script is for firefox.
polonus