Hacker News Reader

Comment by iaml | Hacker News Reader

The article is about ad companies circumventing adblockers by using autogenerated domain names. Unless you update all of your filters everyday, you are still vulnerable.

View on HN

Alternative: block all third party objects (script files, iframes, images, the works) except those from sources on a white-list so libraries on CDNs function.

Looks like I finally need to get around to researching the options for this.

I'll have to stick with the more naive DNS blacklist based blocking for network wide protection though, as I don't want to tell others to use something more aggressive then have to support "this site doesn't work!" requests.

uBlock origin can do this in advanced mode, as can uMatrix if you want more power

uMatrix is the best option for that.

Doesn’t bother me, I block everything by default and selectively whitelist. At this point in time it’s the only way to be safe.

On my Mac and linux machines I do the regular block but on Windows it's full block all the way, not even so much for the ads but for the fact that so many networks distribute(d) malware.

Sorry but your website's business model is an infinitely lower priority than me needing to re-image my Windows install yet again because one of your fellow companies is asleep at the wheel regarding security.

Is there an easy way to block everything by default with uBO?

Afaik you can do that with "hard mode" [0].

[0]: https://github.com/gorhill/uBlock/wiki/Blocking-mode:-hard-m...

I already use Advanced Mode, but uBO makes no distinction between blocking scripts and cookies, XHR requests, and Media elements. uMatrix does make this distinction, so I'm led to believe uBO doesn't block them at all. That's necessary for me.

I use uBO and uMatrix which work well together. uMatrix has "block third party resources by default" behavior that can be precisely customized per domain and resource type (eg, allow images and css but not scripts or XHRs).

I have used them both for a very long time but I'm trying to get away from uMatrix because, even though I love the fidelity of control it gives me, it seems to be utterly broken since Firefox Quantum and will not load any frames, unless it is completely disabled from the Add-ons page.

I've been patient for months but it still isn't fixed, thus I'm trying to shed my dependence of it if uBO can offer me the same thing on its own.

For what it's worth, I've occasionally noticed similar problems with frames (embedded content from other sites especially), and it seems that force-reloading the page with ctrl-shift-r gives a different behavior than the reload button in the uMatrix panel.

I usually unblock the embedded domain, manually allow frames, then force-reload the page, but it usually seems to work.

Selecting the "fanboy" 3rd party lists in uBO settings in addition to the default lists is the easiest way, imo, to get to 99%+ coverage.

Ublock origin filters update automatically. You can find filters specifically targeted at mining.

uMatrix + uBlock Origin, and everything by default is blacklisted.

Reply on news.ycombinator.com