News for hackers. Stuff that matters.
Re:How Wired Is Going to Handle Ad Blocking by fencepost on Tuesday February 09, 2016 @12:16AM (#11063270)
I'm generally not inclined to fully whitelist anyplace because even if everything it loads today is safe, who's to say what's going to be loaded after the site gets hacked. That said, I tried to go through and do some allowing of requests and scripts for places I recognized, including whitelisting the site in Ghostery to keep it from interfering.

After adding 19 separate exceptions in uMatrix for both whole domains and for types of requests/actions on domains, I still don't see any ads but I do see an ever-increasing list of third-party sites Wired is pulling requests from. Given a choice between throwing up my hands and saying "Fine, f*ckit, do whatever the hell you want" and whitelisting Wired's requests to all of (disqus, optimizely, amazon-adsystem, condenastdigital, demdex, typekit, adobetm, chartbeat, cloudfront, doubleclick, googleadservices, googlesyndication, googletagservices, mediavoice, mookie1, omtrdc, outbrain, parsely, scorecardresearch, yldbt and zqtk) plus whatever others would be pulled in were I actually to whitelist, I guess I'll have to do without Wired.

So far without ever actually loosening things up far enough to see ads that's AT LEAST 21 different top-level domains Wired is pulling from, not counting its own (and yes, I realize it's part of Conde Nast). Most of those top-level domains have at least 2 subdomains being pulled from, sometimes more. My basic reaction to this is that even if I trust Wired and Conde Nast, I don't know that I trust all those other sites like "mookie1," "yldbt," "zqtk" and whatever other obscurely-named domains.

Frankly, were I to see "yldbt" or "zqtk" as a running process or folder name on a system I was working on, I'd immediately rename them and start virus and malware scans.

So I guess my reading of Wired online will suffer much the same fate as my reading of Wired on paper, because while I like seeing occasional items from Wired it's not a daily destination for me, and I'm certainly not coughing up $50+/year for it.

Re:How Wired Is Going to Handle Ad Blocking by monkmartinez on Tuesday February 09, 2016 @12:32AM (#11063324)
It is crazy what kinds of BS you find when you run something like Little Snitch for OSX. On a fresh install of Firefox before I've had a chance to download adblock, there are two dozen popups requesting outbound connections... most of the time, I have NO idea who is behind the request or what these request really want. This is just the start page... news pages are even worse.

Run some apps with Little Snitch turned on and you see the same thing. Tons of outbound requests to domains that I have never heard of and have no idea what they want on my machine.

I just block everything with reckless abandon. I don't give a shit if my "experience" is degraded.

Frankly, with small kids in the house who I would like to protect to the extent I am able... I am considering installing Pi Hole and whatever else I can find in addition to the spartan whitelist I've set up for them to use via parental controls.

Re:How Wired Is Going to Handle Ad Blocking by mirkules on Tuesday February 09, 2016 @02:41AM (#11063763)
Funny, I just bought my first RPi in order to run Pi-Hole. It works decently from my daughter's tablet. I enabled it on the router so the whole house is covered, but due to uBlock I hardly ever see ads on computers. The nice thing is having "boring text" instead of colorful ads on tablets makes them a much smaller target for kids to tap on.

I will say that the installation process can be somewhat painful if you deviate from the norm. I didn't want to use Google DNS and instead opted for OpenDNS, plus I wanted my own directory structure, etc...

Re:How Wired Is Going to Handle Ad Blocking by m0nty on Tuesday February 09, 2016 @05:40AM (#11064459)
I'm using this on my Windows PC:

http://someonewhocares.org/hosts/

Disabled all ad-blockers and still don't get ads, and the whole experience seems faster. Presumably it takes longer for JavaScript-based utilities to block ads compared to just blackholing them in the hosts file? Anyway, might get a Raspberry Pi or just use an old small form-factor PC with it's own DNS server running the same list.

Re:How Wired Is Going to Handle Ad Blocking by mirkules on Tuesday February 09, 2016 @06:03AM (#11064535)
The Pi-Hole script uses that same list as part of a consolidated list: https://github.com/pi-hole/pi-hole/blob/master/adlists.defau...

It then installs an updater via cron to check for updated lists every week.

As to your experience with speed, I'm kind of surprised. The only time I noticed a speed difference is when I blackholed domains in the hosts file that didn't resolve to a valid web server (i.e. resolving to 127.0.0.1 without having a web server running), and that's the opposite of what you describe. The pi-hole script also installs lighttpd to serve up a placeholder page, and uses some tricks like mod_expire to improve performance.

Re:How Wired Is Going to Handle Ad Blocking by m0nty on Tuesday February 09, 2016 @06:16AM (#11064568)
Thanks for the link to the lists, I'll try rigging that for auto-update on my PC soon.
Re:How Wired Is Going to Handle Ad Blocking by mkriss on Tuesday February 09, 2016 @01:38AM (#11063548)
Is there a good open source "Little Snitch" alternative?
Re:How Wired Is Going to Handle Ad Blocking by keeperofdakeys on Tuesday February 09, 2016 @03:45AM (#11063988)
Try umatrix, it's available for both firefox and chrome, and allows you to do whitelisting of third party domains for each domain you visit.
Re:How Wired Is Going to Handle Ad Blocking by danieldk on Tuesday February 09, 2016 @06:33AM (#11064620)
They don't cover the same use cases.

Little Snitch is basically a user-friendly general-purpose application Firewall. When a connection hasn't been whitelisted before, it pop up a dialog box allowing you to accept/reject connection to a host/domain/port permanently/temporarily.

uMatrix does not protect you against 'malicious' connections initiated by non-browser applications. Little Snitch does not provide the fine-grained URI-level filtering that uBlock/uMatrix provide.

Edit: if you have a Mac, Little Snitch is well-worth the money. It is very polished, does the job, and the developers are not greedy (I think I purchased an update once after I started using it in 2007 or 2008).

Re:How Wired Is Going to Handle Ad Blocking by monkmartinez on Tuesday February 09, 2016 @02:02AM (#11063627)
Maybe, but I haven't found anything as polished as Little Snitch. The level of control is amazingly high. I really don't use it to the full extent with profiles and the like. I set up some basic rules and let it work for awhile, then I pick and choose what to allow/disallow permanently... like a King :P

It's one of the first things I install on my Macs. Worth every penny.

Re:How Wired Is Going to Handle Ad Blocking by afandian on Tuesday February 09, 2016 @03:38AM (#11063967)
Not exactly the same, but Privacy Badger from EFF is great.
Re:How Wired Is Going to Handle Ad Blocking by aparadja on Tuesday February 09, 2016 @07:02AM (#11064716)
For the network monitoring part, Private Eye is a free alternative, though not open source: http://radiosilenceapp.com/private-eye/

Disclaimer: I made it.

Re:How Wired Is Going to Handle Ad Blocking by grahamburger on Tuesday February 09, 2016 @01:52AM (#11063601)
Wireshark or even tcpdump will get you most of the way there, I think.
Re:How Wired Is Going to Handle Ad Blocking by lucaspiller on Tuesday February 09, 2016 @03:06AM (#11063863)
Little Snitch doesn't just show you traffic, but also allows to block requests per domain per application.
Re:How Wired Is Going to Handle Ad Blocking by grahamburger on Friday February 12, 2016 @04:23PM (#11090731)
Then add iptables to that list and I think you're set :-) seriously, all due respect to Little Snitch - I've heard a lot of good things about it and I'm sure it's much easier to use than the raw tools. But I doubt it's doing anything that can't be done with tcpdump/iptables.
Re:How Wired Is Going to Handle Ad Blocking by torgoguys on Tuesday February 09, 2016 @05:35AM (#11064444)
They're not talking to you or me. If they were, this article would have been "How Wired Is Going to Handle Tracking and Web Cruft" and address the underlying problem causing people to install ad blockers.

I want people to get paid--really I do--but I'm not stepping barefoot into a cesspool of web cruft to do it. Blockers are like putting boots on so you can wade through it safely. Clean up your mess and I don't mind going barefoot.

Re:How Wired Is Going to Handle Ad Blocking by oneeyedpigeon on Tuesday February 09, 2016 @09:43AM (#11065542)
> We know that there are many reasons for running an ad blocker, from simply wanting a faster, cleaner browsing experience to concerns about security and tracking software.

They sound as though they're trying to accommodate 'us', but the proof will be in what the 'ad-free' experience is really like. I wonder if they're considered a paid RSS feed as an alternative - that would certainly solve much of the issue for many.

Re:How Wired Is Going to Handle Ad Blocking by thirdsun on Tuesday February 09, 2016 @02:53AM (#11063807)
Agreed. I think Wired, as well as other publishers, are missing the point here. I don't have any issue with ads in general - but if we're talking about ads that Wired has no control over and just fetches from a network, it's a whole different story. The same applies to ads that significantly increase page load times, bandwidth usage (I'm forced to use a metered LTE connection) or privacy concerns.

Simple static ads would render most of these concerns unnecessary, but I doubt there's any incentive to go back to that kind of "outdated" advertising.

Re:How Wired Is Going to Handle Ad Blocking by proactivesvcs on Tuesday February 09, 2016 @07:22AM (#11064782)
Simple static ads that are not huge, distracting or obnoxious, that are delivered free of any script or similar code, and all hosted by the first party. Those are the ads I would probably find acceptable.
Re:How Wired Is Going to Handle Ad Blocking by obsurveyor on Tuesday February 09, 2016 @07:59AM (#11064942)
They should be able to still do this too; presumably they still have an ad department for the dead tree version of things. That means they have the people in place to sell ads and integrate them into their content. Of course, magazine ads don't really fit your "not huge, distracting or obnoxious" requirement but their ad people can evolve too. There's probably even a business in this for websites/companies that don't have dedicated ad departments.
Re:How Wired Is Going to Handle Ad Blocking by chrischen on Tuesday February 09, 2016 @05:01AM (#11064333)
But most people who block ads just don't want to see ads. Your technical concerns are in the minority.
Re:How Wired Is Going to Handle Ad Blocking by thirdsun on Tuesday February 09, 2016 @05:47AM (#11064480)
I think they just don't want to see ads as intrusive as the ones found these days. Neither do I. While my main concerns are performance, bandwidth, security and privacy, I don't think that simple static image ads would have led to the widespread adoption of ad blockers we're currently seeing.

In my opinion it's due to the fact that ads became very intrusive lately - video, audio, flash, popups, fullscreen overlays, endless scripts, you name it.

Re:How Wired Is Going to Handle Ad Blocking by Freak_NL on Tuesday February 09, 2016 @07:18AM (#11064765)
Absolutely. The number of people who would still resort to blocking ads if they were non-targeted, static, tastefully done yet clearly recognizable as advertisements, served locally, non-tracking, and non-obtrusive would probably have been negligible. But now there is an entire economy that depends on advertisements that track you and know you and need to be served via third party brokers, because if they didn't they wouldn't sell.

I don't know the solution to fix this mess, but I will gladly help pop the current bubble so something more useful can replace it.

Re:How Wired Is Going to Handle Ad Blocking by Elhana on Tuesday February 09, 2016 @09:29AM (#11065438)
If you put a static ad image hosted on your own server on the page, something like http://wired.com/img/jhfkfhfuhi34cn2.jpg, ad blocker will not be able to distinguish it from other images and won't block it.

There is also common banner dimensions that get blocked, but it is easy to defeat by adding a pixel somewhere that fits into site design.

Problem with this approach is that you can't just slap some random ad network script there and be done with it, no targeted ads, tracking etc - basically everything people don't like and a reason to use ad blockers.

Re:How Wired Is Going to Handle Ad Blocking by chrischen on Wednesday February 10, 2016 @06:40AM (#11072059)
It's amazing why they don't just do this. Part of the reason why is that ad blocking is so easy, so most people will just do it... especially if it has the added benefit of removing the 5 second delay on YouTube videos due to ads.
Re:How Wired Is Going to Handle Ad Blocking by Lawtonfogle on Tuesday February 09, 2016 @10:22AM (#11065842)
But I don't care enough to wipe out static in page ads, especially since those don't have the added cost of tracking me anymore than visiting the site does. In short, I still wouldn't like those adds, but I would like them a lot more than the ads I currently block.
Re:How Wired Is Going to Handle Ad Blocking by macns on Tuesday February 09, 2016 @05:08AM (#11064370)
I think adblockers block content which usually is offsite, so it's not a matter of "technical concern".

EDIT: rephrase

Re:How Wired Is Going to Handle Ad Blocking by fencepost on Tuesday February 09, 2016 @10:28AM (#11065884)
I don't even require that they be static - I find ads relevant to the content I'm looking at useful sometimes, and particularly for searches I may end up going with something advertised in the results (generally on DuckDuckGo, occasionally on Google and Google Shopping).

What I object to is the cesspool of unidentifiable tracking and god-knows-what-else crud.

Re:How Wired Is Going to Handle Ad Blocking by gcb0 on Tuesday February 09, 2016 @04:41AM (#11064236)
> slow ads

heck i block ads as a side effect of blocking things like Google analytics.

Re:How Wired Is Going to Handle Ad Blocking by _greim_ on Tuesday February 09, 2016 @01:21AM (#11063500)
> who's to say what's going to be loaded after the site gets hacked

Never mind even getting hacked. Ad providers routinely violate the trust of content providers by activating audio, throwing up full screen overlays and who knows what else. I'm not an expert but I'm given to understand that it's hard for content providers to quality control these sort of ads. The whole delivery system is gamed to a ridiculous degree.

Re:How Wired Is Going to Handle Ad Blocking by bambax on Tuesday February 09, 2016 @03:01AM (#11063844)
The reason blocking is so easy and works so well is because everyone got lazy.

Publishers want ads but don't want to actually do the job of selling them; ads used to be free money, and this is coming to an end.

Ads from their own domain would be a little harder to block, especially because blocking would have to be done on a page-by-page basis (or at least, website-by-website).

Re:How Wired Is Going to Handle Ad Blocking by majewsky on Tuesday February 09, 2016 @04:22AM (#11064141)
Personally, I do not block first-party ads (i.e. ad images served from the same domain as the original content). For me, the point of using an adblocker is to reduce attack surface and tracking opportunities.

I see, of course, that I'm likely not representing the majority of adblock users.

Re:How Wired Is Going to Handle Ad Blocking by timonovici on Tuesday February 09, 2016 @06:33AM (#11064617)
I have ublock myself for privacy concerns, but I install ad blockers on all my relatives computers just because they are trustful and dumb enough to click any shiny green button that says "Download". Otherwise, I have to pull my hair when I look at their computers full of crap, which they can't explain how it got there. If the internet with ads wasn't such a dangerous place, I wouldn't do it in the first place.
Re:How Wired Is Going to Handle Ad Blocking by iSnow on Tuesday February 09, 2016 @03:03AM (#11063855)
Could someone enlighten me why a lot of sites don't only pull in google analytics, but also a handful of other analytics sites like scorecaredresearch or chartbeat?
Re:How Wired Is Going to Handle Ad Blocking by Falkon1313 on Tuesday February 09, 2016 @03:42AM (#11063978)
Sure. Every analytics company tries to differentiate themselves by claiming that they do something the others don't and showing off some pretty charts.

The marketers buy the hype and want all of that. "If I take this pretty chart from here, and that table that from there, and these numbers from over here, I can make a really impressive report!"

And they want to make sure that they're collecting all the data they could possibly be collecting (because they never know when they might suddenly need the last 6 months data about something they never thought of), even though they don't know what queries they want to be able to make.

So they make the developers add all of them, end up with tons of data but very little information, and start talking about 'this big data thing' that could maybe give them answers even though they still don't know what questions they want to ask. And to use it, you just have to add this little snippet of javascript...

Re:How Wired Is Going to Handle Ad Blocking by soared on Tuesday February 09, 2016 @10:40AM (#11065966)
It sounds like the points you're making are all negative, but it also sounds like a fairly valid argument to me. Sure marketers add too much js with the allure of big data, but whats the cost? 0.1% of users (hn readers and the like) are annoyed by it? I'd gladly piss off a tiny fraction of my users to better understand the other 99.9%.
Re:How Wired Is Going to Handle Ad Blocking by blueskittle on Tuesday February 09, 2016 @09:30AM (#11065444)
Google Analytics is used primarily for internal reporting and analysis. bscorecardresearch is part of ComScore, which is a third-party reporting company. Advertisers often require publishers to provide third-party reports for traffic so that they can validate the ad campaign numbers that the publisher reports. Chartbeat and others can provide supplemental reporting to a publisher if they think that there are gaps with what Google Analytics provides.
Re:How Wired Is Going to Handle Ad Blocking by iSnow on Tuesday February 09, 2016 @04:48PM (#11069046)
Thanks, I still believe the inclusion of yet another analytics tool is madness, but the point about publishers is new to me.
Re:How Wired Is Going to Handle Ad Blocking by a3n on Tuesday February 09, 2016 @10:22AM (#11065844)
tl;dr: Their attack surface is huge. They probably don't even know at any moment why a page is pulling everything it pulls.

No thanks.

Re:How Wired Is Going to Handle Ad Blocking by runholm on Tuesday February 09, 2016 @07:59AM (#11064941)
I tried to allow their ads after reading this article, but they still didn't load because they depend on several trackers (which I still block).
Re:How Wired Is Going to Handle Ad Blocking by coldpie on Tuesday February 09, 2016 @09:11AM (#11065331)
Silly me trying to read a news article: https://twitter.com/ColdPie1/status/654350476612272128
Re:How Wired Is Going to Handle Ad Blocking by sedatk on Tuesday February 09, 2016 @03:06AM (#11063865)
> who's to say what's going to be loaded after the site gets hacked

when a site gets hacked, you get malicious content regardless you block ads or not.

Re:How Wired Is Going to Handle Ad Blocking by majewsky on Tuesday February 09, 2016 @04:23AM (#11064147)
Depends on whether it's the site itself that gets hacked, or the ad network. (The latter is going to be a much more valuable target in practice since it allows malware to spread via multiple sites, not just one.)
Re:How Wired Is Going to Handle Ad Blocking by fencepost on Tuesday February 09, 2016 @10:23AM (#11065849)
That depends on whether they hack the site to actually feed the malicious content or just get enough of a foot in to get it linked from an actual hosting location. If what they have is a database hack where they can inject some content but don't have full control, they may be pushing links while trying to get further access.
Re:How Wired Is Going to Handle Ad Blocking by CydeWeys on Tuesday February 09, 2016 @09:31AM (#11065452)
> So far without ever actually loosening things up far enough to see ads that's AT LEAST 21 different top-level domains Wired is pulling from, not counting its own (and yes, I realize it's part of Conde Nast). Most of those top-level domains have at least 2 subdomains being pulled from, sometimes more.

Nit: Those aren't top-level domains. TLDs are things like com, net, org, uk, io, etc. More info here: https://en.wikipedia.org/wiki/Top-level_domain