News for hackers. Stuff that matters.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by grrowl on Thursday June 18, 2015 @07:53PM (#9742295)
Hosts files are a relatively obsolete way of blocking ads — it seems to be only because ad companies insist on serving ads and JS from their own domains. If a content site was sufficiently motivated enough, they'd serve ads exactly as content and include javascript within the content page itself to ensure they load.

Thankfully, I haven't seen anyone go "thermonuclear" on ad blockers yet except for executive-level decisions and lamentations — but as a technological-level problem it's theoretically straightforward to subvert given the rudimentary nature of ad blockers.

Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by steckerbrett on Thursday June 18, 2015 @08:36PM (#9742423)
I've seen one person go thermonuclear trying to prevent ad blocking, and it seriously sucks. Randomly generated content classes and IDs, shifting DOM elements around to avoid them being targeted that way, and later on just completely removing all the divs from the area and manually painting large advertisements with primitives. Made scraping substantially more difficult, but of course not impossible.

One site that still has me beat dynamically loads all of the content and code through a websocket, and various bits are so heavily obfuscated that they look like brainfuck. Finding tools to tamper with SSL websockets is a challenge enough in its own right (Chrome has nicer tools now though).

Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by BobLaw on Thursday June 18, 2015 @08:47PM (#9742467)
Interesting. Link to that second site?
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by pki on Thursday June 18, 2015 @08:42PM (#9742444)
For the first one, you mean noscript.net? View source on that to see how they try to push their horrid super registry cleaner pro crap.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by zem on Friday June 19, 2015 @02:48PM (#9746831)
are you doing it for the sheer fun of beating the ad-blocker-blocker, or do you need the information off the site?
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by steckerbrett on Friday June 19, 2015 @05:43PM (#9747847)
One is screen scraping, one is attempting to find out how a product actually works. Neither goal has a monetary incentive so it is likely that people have got there before me.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by ams6110 on Thursday June 18, 2015 @09:09PM (#9742546)
Ad companies want to serve from their domains because they can then correlate traffic across sites and in theory serve up more targeted ads. If every content site served ads directly, that gets more complicated.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by whoopdedo on Thursday June 18, 2015 @09:58PM (#9742672)
And isn't HTTP/2 telling people to stream content from a single server instead of opening multiple connections? I can see HTTP/2 accelerators speeding up traffic by multiplexing requests to the application, CDN, affiliates, etc into a single connection.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by grrowl on Friday June 19, 2015 @12:06AM (#9742961)
It will only multiplex requests to a single host— the layer at which it operates means it will need to connect to both contentprovider.com and ad.networks.com over distinct TCP connections.
Re:Sourcepoint: Former Googler Will Sell Tech to Punch Throu... by whoopdedo on Saturday June 20, 2015 @12:28AM (#9748989)
Right. The accelerator accepts the connection from the client as a proxy but connects to the myriad backends. The downstream side only sees one multiplexed stream with the responses from the multiple servers.