News for hackers. Stuff that matters.

A comment on Are ad blockers doomed or have we already won? A history lesson. Parent comment

Re:Are ad blockers doomed or have we already won? A history ... by ameshkov on Friday February 28, 2020 @12:23PM (#22444398)
Actually, Web Components and Shadow DOM bother me more than Web Assembly. You cannot "pierce" into a shadow DOM from the outside and this creates an impenetrable barrier for content blockers. We've already seen examples of whole web pages transformed into a shadow-dom web component.
[ Parent | on HN ]
Re:Are ad blockers doomed or have we already won? A history ... by imhoguy on Friday February 28, 2020 @12:35PM (#22444502)
The more of pages introducing the solution you describe the more chance ad blockers / browsers will pick up the new challenge ;)
[ Parent | on HN ]
Re:Are ad blockers doomed or have we already won? A history ... by the8472 on Friday February 28, 2020 @06:27PM (#22447384)
Firefox has openOrClosedShadowRoot available to extensions that allows them to bypass closed shadow dom.
[ Parent | on HN ]
Re:Are ad blockers doomed or have we already won? A history ... by zzzcpan on Friday February 28, 2020 @12:38PM (#22444531)
> You cannot "pierce" into a shadow DOM from the outside

Why not? You can inject any script into a meta header on document start from an extension or do the same in an intercepting proxy.

[ Parent | on HN ]
Re:Are ad blockers doomed or have we already won? A history ... by ameshkov on Friday February 28, 2020 @12:44PM (#22444602)
Shadow DOM is created dynamically using "attachShadow". You can try overriding Element.prototype.attachShadow, but this is easy to detect.
[ Parent | on HN ]
Re:Are ad blockers doomed or have we already won? A history ... by zzzcpan on Friday February 28, 2020 @01:00PM (#22444767)
Well, currently adblocking is already full of such easy to detect overrides, and extension APIs already have plenty of limitations on what they can touch and replace allowing websites to easily bypass most of the overrides, but they do work at the moment and websites don't bother.
[ Parent | on HN ]