Author Topic: uBlock in Chrome (Off Topic)  (Read 36449 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #45 on: April 16, 2015, 09:11:27 PM »
With one click I added this subscription list to uBlock, see: https://easylist-downloads.adblockplus.org/easylist.txt  via abp:subscribe?location=https://easylist-downloads.adblockplus.org/easyprivacy.txt&title=EasyPrivacy&requiresLocation=https://easylist-downloads.adblockplus.org/easylist.txt&requiresTitle=EasyList 
and with uBlock installed also uBlock takes it.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #46 on: April 17, 2015, 11:33:12 PM »
Question: Is it possible to block encrypted Secret Media ads, like the pre-roll vid ads on YouTube, this is important because Google wants to beat adblocking with serving up encrypted ads with Adsense and DoubleClick to circumvent adblockers starting this summer, while the danger of malvertising continues. How is the present situation> this seems to work, but not not for all encrypted ads as they constantly change the url.
Code: [Select]
block the video ads in the youtube app:
CODE: SELECT ALL
youtube.com/get_ad_tags?
ABP does not block,
Try
Code: [Select]
||youtube.com/yva_video?*_preroll*
the complete url for a preroll (for a vevo video):
https://www.youtube.com/yva_video?adfor ... _preroll=1    info credits

The blocking that works: http://blog.wavecrest.net/index.php/analyze-your-encrypted-traffic-with-cyblock-ssl-inspection/

Anyone - this gonna be a bad summer for ad-blocking?

And now everybody can see what is behind Google's promoting https only - not added security but adblock free encrypted advertising via Adsense and DoubleClick- pushing their core business unhindered with added security as a pre-text benefit.

polonus
« Last Edit: April 17, 2015, 11:41:58 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 47033
  • 62 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: uBlock in Chrome (Off Topic)
« Reply #47 on: April 17, 2015, 11:46:22 PM »
Damien,
Do you actually believe that Google or any other Corporation should stop trying to make a profit ???
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, Avast One 21.11, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bi

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #48 on: April 17, 2015, 11:59:18 PM »
No, bob3160, I do not think that, but users should have a choice and eventually pay a small fee to get rid of ads.
Besides there is the argument of ads being potential malware and we want to be protected against that, not being pushed to get our malware encrypted from ever changing random urls. Here I think third party ads must always be blockable.
Or will the situation become resembling commercial TV where you have forgotten the plot of the TV series after a 15 minute ad-break. With 12 big players in the market you have a choice, with a monopoly it is slowly becoming  a take it or leave it situation, you cannot even choose with your wallet there. Rather have 15 minutes of ads a day as starters, in what time I can visit a certain place and then continue adfree.

polonus
« Last Edit: April 18, 2015, 12:01:27 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #49 on: April 18, 2015, 12:14:48 AM »
I think a next step will be content filtering: HTTPS filtering
HTTPS requests can also be blocked, but because the URL in an HTTPS request is encrypted, only the domain URL checks will be performed in the following order:
wXw.foo.bar.com  (because of https://www.mywot.com/en/scorecard/foobar.com?utm_source=addon&utm_content=popup )
foo.bar.com
bar.com
.com
*   (the special character for catch-all URL)

polonus

P.S. In the case of it redirecting to itself -> get instructions here for NGINX Plus R6:
http://nginx.org/en/docs/http/ngx_http_headers_module.html

D
« Last Edit: April 18, 2015, 12:48:25 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 47033
  • 62 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: uBlock in Chrome (Off Topic)
« Reply #50 on: April 18, 2015, 12:47:47 AM »
Quote
Or will the situation become resembling commercial TV where you have forgotten the plot of the TV series after a 15 minute ad-break.
It's a max of 3 min. per 15 minutes. :) Exaggeration doesn't add credibility. We know that from those that have posted about the 6 popups per day in Avast. :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, Avast One 21.11, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bi

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #51 on: April 18, 2015, 12:56:19 AM »
Hi bob3160,

Well on European TV you have ad-blocks of a full 15 minutes every 45 minutes. In the Netherlands we even have a site where you can watch video ads you have missed: htxp://reclamegemist.tv/
Why Google cannot make a site where they show ads adblock-users have missed, and you will be free to go there. ;D
Might be a good initiative.
Going back on-topic, with https encrypted ads, the malvertising threats won't leave us: http://googleonlinesecurity.blogspot.nl/2015/04/beyond-annoyance-security-risks-of.html
link article author =  Eric Severance, Software Engineer, Safe Browsing

polonus
« Last Edit: April 18, 2015, 01:00:50 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 47033
  • 62 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: uBlock in Chrome (Off Topic)
« Reply #52 on: April 18, 2015, 01:39:02 AM »
Hi bob3160,

Well on European TV you have ad-blocks of a full 15 minutes every 45 minutes. In the Netherlands we even have a site where you can watch video ads you have missed: htxp://reclamegemist.tv/
Why Google cannot make a site where they show ads adblock-users have missed, and you will be free to go there. ;D
Might be a good initiative.
Going back on-topic, with https encrypted ads, the malvertising threats won't leave us: http://googleonlinesecurity.blogspot.nl/2015/04/beyond-annoyance-security-risks-of.html
link article author =  Eric Severance, Software Engineer, Safe Browsing

polonus
Same reason Avast doesn't have an option to view popups separately from the program . :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, Avast One 21.11, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bi

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #53 on: April 18, 2015, 12:47:34 PM »
Hi bob3160,

Thank you for the interesting discussion in this thread.
I always value your insights.
While you are very active going all over the States promoting Avast,
you perfectly know what is going on in the real life theater.

A lot of unaware users could visit this thread
and get informed about latest developments.

Back on topic:

This has not been patched since 2012, see: http://blog.kotowicz.net/2012/03/chrome-addons-hacking-bye-bye-adblock.html
POC: http://koto.github.io/blog-kotowicz-net-examples/chrome-addons/adblock/bypass.html   (with javascript enabled)
link article author = Krzysztof Kotowicz  - example: http://koto.github.io/blog-kotowicz-net-examples/chrome-addons/adblock/disable.html (intentially whitelisting you adblocker service by an extension)

Damian
« Last Edit: April 18, 2015, 12:58:42 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #54 on: April 25, 2015, 12:39:43 AM »
What is a fabulous feature of uBlock is that after a couple of visits to Russian websites foir instance you get an alert to the fact that a Russian filter is automattically enabled, so you will have added protection when venturing out there.

polonus

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #55 on: June 21, 2015, 05:52:58 PM »
I have now tagged:
https://github.com/reek/anti-adblock-killer#instruction
inside uBlock and subscribed there.
Anti Adblock Killer is present in my Tampermonkey as a user script.
uBlock Origin a great Adblocker, especially this anti-adblock-killer code is vital, now the declared war on adblocking seems on and raging! Read about the new threat: http://www.reddit.com/r/technology/comments/3aa6cv/a_former_googler_has_declared_war_on_ad_blockers/
Why we need adblocking, because we need it against malvertisers and seo spammers!
Ad-privacy and security are two sides of the same precious medal, folks.
Forewarned is forearmed. Remember, you can only trust that what you have tested yourself,
and then rely on your own resources that have proven to be effective.
Stay safe and secure with Avast!

polonus

P.S. See what I mean? -> http://d3xt3r.com/anti-adblock?test
Interesting, watch: http://d3xt3r.com/dashboard
« Last Edit: June 21, 2015, 06:03:27 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #56 on: July 11, 2015, 10:25:31 PM »
I added this IP block list neatly into uBlock Origin: https://www.binarydefense.com/banlist.txt
in third party filters - https://www.binarydefense.com/banlist.txt‎ : 11.469 use of 11.469cache empty
up to date and running,

Tested - uBlock Origin prevented the loading of the following page:
http://196.12.153.45/
Because of the following filter
||196.12.153.45^
Found in:
 ;)

polonus



polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline abruptum

  • Massive Poster
  • ****
  • Posts: 2447
Re: uBlock in Chrome (Off Topic)
« Reply #57 on: July 11, 2015, 11:47:28 PM »
@polonus

Thanks. I added this list into uBlock in Pale Moon and Cyberfox.
Where I can find more information about this filter list ?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Re: uBlock in Chrome (Off Topic)
« Reply #58 on: July 12, 2015, 12:48:19 AM »
Hi abruptum,

Go to their main page for more info on this Managed Security Service Provider: https://www.binarydefense.com/
It is a Trusted Sec daughter open source software for corporational security.
Another known MSSP is Fortinet's known from inside urlquery dot net scans alerts.
Re: http://searchitchannel.techtarget.com/definition/MSSP
The list used can be used for non-commercial purposes.

polonus

P.S. Just on one of the IP's blocked: http://www.abuseipdb.com/report-history/202.191.170.211



« Last Edit: July 12, 2015, 01:28:30 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33590
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!