Live data from Hacker News

Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

github.com

71–80 of 207 posts

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#71
post #52
post #11

Earlier quoted context omitted.

While i know its evil, i always wished widevine was an option for creating captchas. Most captcha solutions are defeated by services like 2captcha.net and generally aren't the most privacy respecting.

Widevine has already been reverse engineered. You just need to extract a device private key and there are numerous methods for doing so. "Web Environment Integrity" will never work.

[deleted]

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#73
post #53

Earlier quoted context omitted.

Most captcha solutions are also hard for me, but easy for computers to solve. So I really hope their use doesn’t get expanded even further…

"Select every tile with motorcycles", shows an image of a single motorcycle parked on the street. Does the sliver of a tire that shows up in the bottom right tile count, or not? This is never clear, and I end up usually getting it wrong until they show me one that's unambiguous.

The last time I got blocked by captcha I went through a dozen of them in a row before being told I wasnt human enough (possibly true after 30 years in IT!) and so on principal I reject all websites that include captcha. And anyway, why are we training these image recognition tools for free.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#74
post #20

We're all complaining and blaming the big corporations for the pitiful state the internet got to be now but seems we are all contributing our little to bring it even lower. Because corporations pay, I know, but we are the ones pulling the trigger.

But also because we refuse to pay. Any attempt at monetization is widely demonized, yet people still feel entitled to free content, and refuse to put their money where their mouth is and at least abstain from consuming the content if they really don't think it's worth the price It's funny how scarce the "I'd be willing to pay for good content, but alas, there is no option" claim has become since websites have started…

Paying will at best temporarily stop ads, until the company wants more money and brings them back. Which we've already seen. And it will not stop aggressive user tracking at all. In fact, it will make the later worse for you on the individual level as it requires doxing yourself to pay and sorts you into the "has money" bucket which makes you a juicier target.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#75
post #62
post #53

Earlier quoted context omitted.

"Select every tile with motorcycles", shows an image of a single motorcycle parked on the street. Does the sliver of a tire that shows up in the bottom right tile count, or not? This is never clear, and I end up usually getting it wrong until they show me one that's unambiguous.

I have never successfully gotten a “click all motorcycle squares” to succeed. With a VPN, nothing usually works until “click until there are no more X.” It’s so consistent that I’m pretty sure it’s designed that way, since the final task is time-gated.

> With a VPN, nothing usually works until [...]

Bots are very likely to use VPNs, so captcha services make things a real pain in the ass for anyone connecting from a VPN.

It's the same story with Tor. Coming from a VPN/Tor is a strong signal that you're more likely to be a malicious user.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#76
post #20

We're all complaining and blaming the big corporations for the pitiful state the internet got to be now but seems we are all contributing our little to bring it even lower. Because corporations pay, I know, but we are the ones pulling the trigger.

Aren't we all paying for it anyway when we buy products from companies that spend that money on advertising?

Yes, of course. Someone already payed [1] for the ads that they are trying to show to you and me and with that for the content funded with those ads. If we block them, nobody loses any money, at worst some future sales will not happen. And if you decide to get a subscription in order to get rid of ads, then you are paying twice - once with the subscription and your are also still paying a fraction of the ad budget with everything you buy.

[1] Unless companies are taking out loans for their ad budget hoping to get that money and then some back through additional sales.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#77
post #29

Earlier quoted context omitted.

If there is competition offering ad-free services, this would be an option. But for large parts, there isn't.

You can buy ad free services for a lot of them. Few pay.

Yeah, I pay for Windows because that way, I can trust that Microsoft will treat me right, unlike Linux, which I'm sure is infested with ads.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#78
post #29

Earlier quoted context omitted.

If there is competition offering ad-free services, this would be an option. But for large parts, there isn't.

You can buy ad free services for a lot of them. Few pay.

Frustratingly, even when you pay handsomely for subscriptions to major news providers, they still show ads (and quite a lot of them). A few are willing to sell you an ad-free subscription if you can establish a connection to the EU, but those seem to be thin on the ground.

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#79

Earlier quoted context omitted.

The internet was just fine before it was turned into an ad delivery platform.

If you do not like the ads, just stop visiting sites that show ads...

If the ads would be self-hosted and properly curated by the hosting site I wouldn't have a problem with them (just as I don't have much of a problem with print or tv ads). The specific problem with web ads is that most of the web made a deal with the devil: 3rd-party ad-networks which are directly injecting who-knows-what into webpages. Those ads are not just cheap click-bait-trash, but also potential malware vectors. At that point, ad-blocking essentially becomes a civil duty ;)

...and FWIW the use of ad-blockers is indeed recommended by the German "Federal Office for Security in Information Technology":

https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbr...

Re: Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses

#80

Earlier quoted context omitted.

But also because we refuse to pay. Any attempt at monetization is widely demonized, yet people still feel entitled to free content, and refuse to put their money where their mouth is and at least abstain from consuming the content if they really don't think it's worth the price It's funny how scarce the "I'd be willing to pay for good content, but alas, there is no option" claim has become since websites have started…

Paying will at best temporarily stop ads, until the company wants more money and brings them back. Which we've already seen. And it will not stop aggressive user tracking at all. In fact, it will make the later worse for you on the individual level as it requires doxing yourself to pay and sorts you into the "has money" bucket which makes you a juicier target.

Yeah, it's a mistake to think of this a simple "just buy an apple a different stall in the marketplace" situation, we're way past that.

To bring it towards alignment with the status-quo, every fruit-vendor would be a facet of a few massive guildhalls, with spyglasses trained down from the parapets, informants circulating in the crowd, a parchment file on everyone, etc.

Post reply on HN