News for hackers. Stuff that matters.
Re:uBlock Origin becomes top addon on Firefox by planetafro on Friday March 11, 2022 @11:22AM (#30641813)
I prefer DNS filtering over extensions as they generally want all permissions to essentially impersonate you at the browser level. Am I wrong?
Re:uBlock Origin becomes top addon on Firefox by ignoramous on Friday March 11, 2022 @11:55AM (#30642392)
> I prefer DNS filtering over extensions

DNS filtering is weak and there are numerous bypasses [0], including ones you can never fix at the DNS layer [1]

[0] Ex: https://news.ycombinator.com/item?id=30412070

[1] https://news.ycombinator.com/item?id=30411049

Re:uBlock Origin becomes top addon on Firefox by rpdillon on Friday March 11, 2022 @11:36AM (#30642085)
> impersonate you at the browser level

This is a new framing for me...I don't think of ublock as impersonating me, but rather representing me, like an agent in a transaction. While it's true that agents that represent you need to be trusted, there is also a huge upside: ublock origin can do things that DNS blocking cannot. Given ublock's (gorhill's) track record, I think this is an excellent deal.

Re:uBlock Origin becomes top addon on Firefox by biomcgary on Friday March 11, 2022 @12:16PM (#30642775)
Gorhill's track record is the critical bit. He transferred maintenance responsibilities for ublock to someone who immediately exploited it to make money, which is why we now have ublock origin. In a world of 7.9 billion people, it is amazing that a decent internet experience depends so much on a single person being competent and honorable. He (and the block list folks) are the heroes that run into the virtual dumpster fire and pull us out.
Re:uBlock Origin becomes top addon on Firefox by yjftsjthsd-h on Friday March 11, 2022 @01:36PM (#30644091)
Right; there's a reason we literally call the browser the "user agent", and uBlock is just a part of that. It's not impersonating me, it's a vital part of the browser being a useful tool for me.
Re:uBlock Origin becomes top addon on Firefox by ethbr0 on Friday March 11, 2022 @01:59PM (#30644442)
The concept of a user agent is hilariously and sadly quaint on the modern web.

Can you imagine what a user agent to interact with Facebook would look like? Or Instagram? Or TikTok?

It shows how far we slid backwards for large, popular areas of user functionality, post-90s.

Re:uBlock Origin becomes top addon on Firefox by yjftsjthsd-h on Friday March 11, 2022 @02:13PM (#30644653)
On the contrary; the browser is still generally the user's agent (although Chrome can be iffy) - we don't need to imagine, because we can compare the Facebook app to browsing Facebook in a browser, and see that the browser is still far more friendly to the user's interests than what FB ships.
Re:uBlock Origin becomes top addon on Firefox by ethbr0 on Friday March 11, 2022 @05:17PM (#30646715)
It is, although both Chrome and Safari obviously have their own, non-user interests.

But browsers in 2022 are second class citizens, for business models that can generate positive ROI from developer time. They are at best dissuaded (e.g. Reddit, TikTok), and at worse actively crippled or prohibited.

The majority of users are on apps, and more users are moving to devices (e.g. Chromebooks, Portal). All of which are explicitly not user agents.

Re:uBlock Origin becomes top addon on Firefox by BiteCode_dev on Friday March 11, 2022 @11:28AM (#30641935)
Wrong, no. It's a compromise. Addons have the ability to filter advertisements that cannot be identified by their domain name or ip. They also can take actions to compensate for website failure when ads are blocked.
Re:uBlock Origin becomes top addon on Firefox by Ayesh on Friday March 11, 2022 @11:27AM (#30641919)
Most ad services now swap their ad JS domains frequently, aggregate snippets (ads and functional) over a Tag Manager, or simply even proxy the ad scripts through the main domain, which a DNS filter cannot block reliably.
Re:uBlock Origin becomes top addon on Firefox by matheusmoreira on Friday March 11, 2022 @11:30AM (#30641961)
You're not wrong. We're all placing immense amounts of trust in uBlock Origin. I often say that the blockers should be fully integrated into the browsers themselves in order to solve the trust problem. It's sad that it can't happen due to conflicts of interest.
Re:uBlock Origin becomes top addon on Firefox by GeekyBear on Friday March 11, 2022 @11:50AM (#30642291)
Given that it's open source, we have the freedom to audit the code to make sure it's trustworthy.

Also, Mozilla has a vetting process it puts a popular subset of extensions through.

>Due to the curated nature of Recommended extensions, each extension undergoes a thorough technical security review to ensure it adheres to Mozilla’s add-on policies.

https://support.mozilla.org/en-US/kb/recommended-extensions-...

Re:uBlock Origin becomes top addon on Firefox by airstrike on Friday March 11, 2022 @11:34AM (#30642044)
> the blockers should be fully integrated into the browsers themselves in order to solve the trust problem

s/solve/transfer

Re:uBlock Origin becomes top addon on Firefox by pmontra on Friday March 11, 2022 @12:02PM (#30642535)
The browser owns the connection anyway and can do whatever it wants with the content. Of course trusting one party is better than having to trust two parties so we are back to do we trust the adblocker?
Re:uBlock Origin becomes top addon on Firefox by josefx on Saturday March 12, 2022 @01:32AM (#30649437)
> Of course trusting one party is better than having to trust two

I wouldn't trust Google to block its own ads, it is much harder for them to intentionally fuck up a generic API that can be used by others without raising suspicion. Hence why everyone calls them out on the manifest v3 changes.

I also wouldn't trust Mozilla to invest the manpower to keep the plugin running and with them already including ads in the browser itself I would see another acceptable aids policy on the horizon.

For a job like this in specific I would rather trust someone whose goal is to provide a great internet experience over making money, I couldn't name a single browser vendor who would qualify.

Re:uBlock Origin becomes top addon on Firefox by matheusmoreira on Friday March 11, 2022 @12:45PM (#30643293)
I assume browsers are trustworthy user agents. If this is false, we've already lost.
Re:uBlock Origin becomes top addon on Firefox by GekkePrutser on Friday March 11, 2022 @10:23PM (#30648731)
If you use Chrome, you've already lost. I mean seriously what do you expect if you use a browser from the #1 targeted advertising provider in the world?

If you use Firefox, perhaps... They are becoming like the others in their quest to become a corporation. Driven by marketeers and telemetry, selling ads to get by, paying their C-suite millions of dollars...

So in effect, yes. Most people have already lost. The rest of us are on the way there.

Re:uBlock Origin becomes top addon on Firefox by stjohnswarts on Friday March 11, 2022 @01:56PM (#30644405)
You can bet with every release of ublock origin that security people are all over looking at the code diffs for security issues. I don't have an issue with it. At some point you have to trust somebody. Otherwise just take wire cutters, walk outside your house, and cut the cable.
Re:uBlock Origin becomes top addon on Firefox by loudtieblahblah on Friday March 11, 2022 @12:01PM (#30642523)
DNS filtering sucks and can't filter ads served from the same domain as content, if all you can block is a FQDN, there's an absolute shit ton of trackers and ads that are getting past you.

This is why piholes are awful. I don't know why they get such high praise - it's just a crappy DNS filter that blocks like what 40% of the ads you see?

Re:uBlock Origin becomes top addon on Firefox by caymanjim on Friday March 11, 2022 @12:59PM (#30643508)
PiHole is not awful. It greatly enhances the blocking provided by browser plugins. Most valuably, it blocks an enormous amount of ads in non-browser apps. If I'm using e.g. the BBC app on my phone, PiHole blocks most of the ads (or at least it used to; I haven't checked recently). It also blocks ads in smart TVs and other places where you can't install uBlock.
Re:uBlock Origin becomes top addon on Firefox by loudtieblahblah on Friday March 11, 2022 @04:29PM (#30646250)
it doesn't enhance anything a browser plugin does -it's a redundancy.

yes, it can block SOME ads in apps. it's also really good at breaking access to said apps too, then you must spend a great deal troublehsooting apps one at a time.

IMHO - ublock on the browser, pay for apps that have adfree versions, don't use apps that don't, and pirate the rest.

Re:uBlock Origin becomes top addon on Firefox by biomcgary on Friday March 11, 2022 @12:19PM (#30642845)
Pihole is contributes to a defense in depth strategy. Lots of android games are unplayable when I'm connected to the internet unless I'm on a network protected by pihole. Yes, I can run a firewall on my phone, but maintaining firewalls on every device that my family uses?
Re:uBlock Origin becomes top addon on Firefox by scarface74 on Friday March 11, 2022 @12:32PM (#30643074)
Solution: don’t play games or use any app where the business model isn’t “I give you money and you give me goods and services”.

I have one ad supported app on my phone - the Overcast podcast player. That’s only because the author created his own non scummy ad network and I find ads on the podcast player that advertise other podcasts useful.

If I didn’t, I would pay him too to get rid of ads.

Re:uBlock Origin becomes top addon on Firefox by yjftsjthsd-h on Friday March 11, 2022 @01:40PM (#30644164)
That only works when they're willing to take your money and willing to then not show you ads or track you. Lots of places won't take your money and only do ads, and an upsetting number are happy to take your money and then track you and/or show you ads anyways. (My "favorite" so far is Hulu, who has the audacity to call their paid plan "no ads" and then include ads.)
Re:uBlock Origin becomes top addon on Firefox by scarface74 on Friday March 11, 2022 @03:51PM (#30645843)
Then don’t use those services or buy those products?

When I did buy Windows PCs, I either bought from the business division of Dell or the Microsoft store specifically because they weren’t bundled with adware.

Re:uBlock Origin becomes top addon on Firefox by stjohnswarts on Friday March 11, 2022 @02:00PM (#30644456)
That's great. I'm glad you have balanced out your morality and online browsing. We will all sleep easier tonight.
Re:uBlock Origin becomes top addon on Firefox by scarface74 on Friday March 11, 2022 @03:52PM (#30645855)
It’s not about morality, its about my preferring not to be bombarded with ads.
Re:uBlock Origin becomes top addon on Firefox by dheerajvs on Friday March 11, 2022 @12:21PM (#30642869)
Defense in depth.

On my Android I have Netguard[0] configured with a hosts file, Firefox with uBlock Origin and NextDNS with comprehensive blocklists.

uBlock Origin protects only one app — the browser.

[0]: https://github.com/M66B/NetGuard/releases/

Re:uBlock Origin becomes top addon on Firefox by burnished on Friday March 11, 2022 @01:32PM (#30644038)
I thought part of the point is that 40% or whatever never gets sent to your device in the first place - speeding up requests, reducing usage. Those seem like good things.
Re:uBlock Origin becomes top addon on Firefox by yjftsjthsd-h on Friday March 11, 2022 @01:37PM (#30644116)
And, it's 40% that don't show up even on devices and browsers where you can't install uBlock.
Re:uBlock Origin becomes top addon on Firefox by stjohnswarts on Friday March 11, 2022 @01:58PM (#30644432)
pi hole is great and is just another layer.
Re:uBlock Origin becomes top addon on Firefox by loudtieblahblah on Friday March 11, 2022 @04:30PM (#30646267)
pi hole is as great as those blocklist filters people used to add into Torrent clients or using tools like PeerBlock.

It's just so faulty and pointless.

Re:uBlock Origin becomes top addon on Firefox by everdrive on Friday March 11, 2022 @11:28AM (#30641940)
You’re not necessarily wrong, however there are whole categories of ads and tracking that cannot be prevented by DNS blocking.
Re:uBlock Origin becomes top addon on Firefox by rootsudo on Friday March 11, 2022 @11:31AM (#30642003)
DNS is better, but I find that you need to have a dns server rather than modify/update the host files on router because it'd kill it.

Pihole is great, but you have to maintain a pi. It's not hard, but the other issue is also training and education when users/family is not on it.

In the end, subscription purchases for youtube, help because the ads are really horrible on mobile platform and not blockable easily on iphone.

I went all over the place with this comment, but I agree DNS level is better then browser level. The IP is still enumerated on a browser adblock level, but not on a DNS level.

Re:uBlock Origin becomes top addon on Firefox by IMSAI8080 on Friday March 11, 2022 @11:56AM (#30642414)
I have extensions turned off in private browsing and then use this mode for banking etc.
Re:uBlock Origin becomes top addon on Firefox by Melatonic on Friday March 11, 2022 @02:11PM (#30644628)
Its better to do both - layered approach. And if you wanna be extra see my other comment on this thread :-)

The advantage of DNS is of course that it will generally also work on things other than your browser which is a pretty huge win.

Re:uBlock Origin becomes top addon on Firefox by stjohnswarts on Friday March 11, 2022 @01:55PM (#30644384)
Pero ¿por qué no los dos?