Live data from Hacker News

Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

news.ycombinator.com

21–30 of 64 posts

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#21

I use uBlock Origin [1] along with the EFF's Privacy Badger [2]. Hard to say how well it really works for privacy without really digging in to exactly what private info I'm leaking across the web but I haven't seen an ad in ages. [1] https://chrome.google.com/webstore/detail/ublock-origin/cjpa... [2] https://www.eff.org/privacybadger

Privacy Badger is awesome. ABP basically let's everything through

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#22

Few folk using Ghostery... but I thought Ghostery was the plugin backed by the advertising industry that just fed your data back to them anyway? I use AdBlock (original) and Disconnect. Perhaps Disconnect does something with my data too shrug

Ghost Rank is opt-in, and it does help the advertising industry: [0]

>We rely on Ghostery users who opt-in to participate in a feature called Ghostrank®, which sends us anonymous information about the data collection technology they see, and where they see them. We take that information, add our analysis, and sell it to companies to help them audit and manage their relationships with these marketing tools. None of the information we share is about our users, nor is it stored in a way that could be used to trace back to our users.

Ghostrank® is off by default, meaning you can use Ghostery without sharing anything with us if you prefer. (But please opt-in! It is how we keep Ghostery free and continue to make it the best tool out there!)

Further, from their privacy policy: [1]

>The Ghostrank information we collect helps to increase our tracker intelligence, and to improve our products and solutions for businesses. We do not use any collected information to track individuals or to target ads to them. Ghostrank data may be licensed commercially and incorporated into our solutions for businesses. To learn more, contact Ghostery at privacy@ghostery.com or visit www.ghosteryenterprise.com.

Disconnect is monetized through user payments: [2]

>We are a consumer software company and rely on payments from our users. We believe basic privacy protection should be available to everybody, irrespective of the ability to pay. In support of that goal, we have a two-part pricing model. For our desktop browser extensions, users can “pay what they want.” For our mobile software applications we offer a Basic free version and a Premium paid version that has additional benefits. Payments help sustain our work and also support nonprofits that share our corporate values.

[0] https://www.ghostery.com/en/faq/how-does-ghostery-make-money...

[1] https://addons.mozilla.org/en-US/firefox/addon/ghostery/priv...

[2] https://disconnect.me/help#how-do-you-make-money-

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#23
post #4

Drop this in your hosts file and set up a refresh script to replace it periodically. http://someonewhocares.org/hosts/hosts

The connection time outs will make your browsing experience feel slow as page take ages to load before they fail to do so.

[deleted]

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#24
post #14

I use HTTPS Everywhere, uBlock Origin, Random Agent Spoofer with almost everything checked, Self Destructing Cookies and uMatrix. I do not recommend Ghostery at all, since it is closed source and it collects your data through GhostRank, if enabled.

I think this is a good setup. Not leaking metadata is uber uber important [1]. I feel that by revealing my weird setup e.g., mutt as a mail client I'm really easy to track. Getting fingerprinted via font browser metrics is also a major worry of mine [2]. Especially if running an exotic setup, it's easy to stand out. [1] http://www.nybooks.com/blogs/nyrblog/2014/may/10/we-kill-peo... [2] http://www.guanotronic.com/~se…

I think too this is a good setup.

Self-Destructing Cookies, especially, is rarely mentioned in such discussions, but is a godsend to enable cookies for the convenience of staying logged only in domains you trust (e.g. I have: archlinux.org, feedly.com, mozilla.org, stackoverflow.com, ycombinator.com) but not breaking sites that depend on them (e.g. no gmail if you simply disable them).

Also, if you use Firefox, enabling `privacy.trackingprotection.enabled` in about:config is a good no-addon-required first step [1].

[1] https://wiki.mozilla.org/Polaris#Tracking_protection

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#25
post #8

uBlock origin and subscribe to relevant feeds. It's simple, lightweight and covers both privacy / security and ads.

You mean to RSS feeds instead of going to actual websites?

I think mrmondo refers to the "lists" that the ABP-family of extensions support. They are lists of domains and regexes to block, and maintained generally by third parties (not the addon developer).

Some of these lists are specific to geographic regions.

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#26
post #14

Earlier quoted context omitted.

I think this is a good setup. Not leaking metadata is uber uber important [1]. I feel that by revealing my weird setup e.g., mutt as a mail client I'm really easy to track. Getting fingerprinted via font browser metrics is also a major worry of mine [2]. Especially if running an exotic setup, it's easy to stand out. [1] http://www.nybooks.com/blogs/nyrblog/2014/may/10/we-kill-peo... [2] http://www.guanotronic.com/~se…

I think too this is a good setup. Self-Destructing Cookies, especially, is rarely mentioned in such discussions, but is a godsend to enable cookies for the convenience of staying logged only in domains you trust (e.g. I have: archlinux.org, feedly.com, mozilla.org, stackoverflow.com, ycombinator.com) but not breaking sites that depend on them (e.g. no gmail if you simply disable them). Also, if you use Firefox, enabl…

Yes, but what's the overlap with uBlock Origin of privacy.trackingprotection? It's very unclear to me. After some experiments and log inspections when it was released I concluded uBlock was a superset. Maybe I'm wrong though.

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#27

Few folk using Ghostery... but I thought Ghostery was the plugin backed by the advertising industry that just fed your data back to them anyway? I use AdBlock (original) and Disconnect. Perhaps Disconnect does something with my data too shrug

I use Ghostery and uBlock Origin, plus "Google search link fix".

Ghostery is opt-out by default and works well. I trust it more than I trust AdBlock.

uBlock Origin doesn't use as many resources as any of the versions of AdBlock.

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#28
post #10
post #4

Drop this in your hosts file and set up a refresh script to replace it periodically. http://someonewhocares.org/hosts/hosts

I sincerely hope you don't do this. You're trusting that the people who run that site won't turn malicious in the future; and since your link uses http, you are also trusting that the same applies to their ISP, your ISP, or anyone in between!

Yeah, someone might hijack localhost's address. They might even be so nefarious as to submit RFCs to make that address range publicly routable.

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#29
You're pretty much covered. uBlock Origin + Privacy Badger is awesome.

You can add something like Tab Cookies or Self Destructing Cookies. You can also add something like uMatrix to the mix.

If you really want to go far, add a "User-Agent Switcher" type extension.

I wouldn't add more than this though, it starts to be overkill. Also do note: I used to use noscript and it works well, but going from 0 JS on a domain to all JS on a domain isn't ideal. If you want ultimate security, add noscript as well but maintain the others so that when you whitelist a url you can still expect to be safe.

Re: Ask HN: What's the best ad-blocking, privacy-enhancing extension set up?

#30
post #26

Earlier quoted context omitted.

I think too this is a good setup. Self-Destructing Cookies, especially, is rarely mentioned in such discussions, but is a godsend to enable cookies for the convenience of staying logged only in domains you trust (e.g. I have: archlinux.org, feedly.com, mozilla.org, stackoverflow.com, ycombinator.com) but not breaking sites that depend on them (e.g. no gmail if you simply disable them). Also, if you use Firefox, enabl…

Yes, but what's the overlap with uBlock Origin of privacy.trackingprotection? It's very unclear to me. After some experiments and log inspections when it was released I concluded uBlock was a superset. Maybe I'm wrong though.

Asked myself the same question, did the same experiment, and reached the same conclusion :) .

Another unclear thing is the update rate/policy of privacy.trackingprotection's blacklist.

Post reply on HN