Hacker News Reader

Comment by jruz | Hacker News Reader

Classic cat and mouse moves. Adblockers will move to OS level so google cant do anything about it. Pi-hole and Network level blockers should also see a rise.

View on HN

Pi-hole can't filter out ads that are embedded into the page though. I think adblockers have to be a browser extension to work conprehensively.

I generally don't mind ads that are embedded into the page (at the moment). It would solve a lot of the big problems people have with ads right now. Anyway, this change only prevents extensions from blanket blocking web requests, and will make no difference to adblockers which manipulate DOM content.

I think the same thing that happened with popup blockers will happen again. Advertisers will be forced to listen to the consumers and the internet will be better for it.

Have you turned off your popup blocker recently? You can surf around even to fairly sketchy sites, and I bet you won't see a pop up. The consumer won. With tracking, we'll win again.

Pi-hole can switch from magicking the DNS to being a proxy that rewrites HTML.

Then you need to manage custom certificates and embedded browsers and updaters may not handle proxied connections well. (And what about your tv where you can't provide custom CA certs?) This way of handling things never ends well. Both in enterprise solutions and consumer ones.

A lot of ads and sites use complex JS as well, so an extension can lean on the browser's rendering engine to JIT block that stuff..

A proxy that wants to do this before the browser will need to do a lot more work I think?

TLS makes that tricky as you need a MITM proxy.

And cert pinning in the browsers blows this out of the water, which is why I'm of two minds about it as a security feature. It seems that a lot of security these days is really about removing people's control over their own devices.

Certificate Key Pinning is in the process of being removed from browsers. https://developers.google.com/web/updates/2018/04/chrome-67-...

You can import an own root cert which will be honored. I work in a company where all internal servers have a certificate a non-public root has signed. Works both on Chrome and FF.

Really? I thought recent dns improvements would prevent this sort of thing.

it's much, much easier to just switch browsers. Firefox is great.

It's worth doing both.

DNS-based blocking schemes lack fine grained control. They're simply less capable than uBlock Origin/uMatrix.

in-application DoH will bypass DNS-based adblockers. this will also expand to electron-based apps.

I've already done this on my phone with Blokada. Don't have to worry about any ads regardless of the app, couldn't be happier with it.

You cant move to OS level and do not compromise security aka https, dnssec, etc

Cosmetic filters will still be needed on the browser.

Dumb question but could you do DLL injections à la video game hacks for the cosmetic filters?

Interesting question, honestly I don't know.

BTW I can see that you are French ^^

Reply on news.ycombinator.com