Re:Google Tag Manager, the new anti-adblock weapon (2020)
by volderette on Monday February 21, 2022 @01:24AM
(#30412501)
This is not how GTM server side works. There is not a single call to Google domains from the client, when GTM server side is set up to its fullest. The config (gtm.js) will be loaded from my subdomain and not googletagmanager.com. Also gtm.js can be renamed.
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by x0x0 on Monday February 21, 2022 @03:16AM
(#30413165)
Per the docs here [1], that is not true. You continue to load gtag.js off the googletagmanager.com domain; subsequent events can flow to a custom domain.
[1] https://developers.google.com/tag-platform/tag-manager/serve...
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by xigoi on Monday February 21, 2022 @02:13AM
(#30412750)
Couldn't you still recognize the script by its content?
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by freedomben on Monday February 21, 2022 @03:22AM
(#30413195)
No because the script contents can change from site to site. Maintaining an index for every site would get you closer, but individual sites can trivially tweak things to break fingerprinting as often as they want. Even on every request.
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by shafyy on Monday February 21, 2022 @02:43AM
(#30412954)
Exactly, this is already done for tracking scripts, since it's commong to use proxies to load tracking scripts.
Re:Google Tag Manager, the new anti-adblock weapon (2020)
by ComodoHacker on Monday February 21, 2022 @02:38AM
(#30412917)
Not with dynamic obfuscation.
gtm javascript loads, pulls down the config, injects tracker X javascript into the browser
new gtm:
gtm javascript loads, pulls down config, streams events to google servers to fan out to tracker X as configured
So blocking gtm.js off tagmanager.google.com / www.googletagmanager.com / the various other domains still blocks all gtm injected tags.
The tl;dr is they're become much closer to segment -- which does the data fanout internally to segment. But they should still be straightforward to block.