extend this like pihole so we can use it for reddit and facebook and instagram ad blocking using proxy !
[deleted]
EBAF – eBPF Based Ad Firewall
11–20 of 56 posts
Re: EBAF – eBPF Based Ad Firewall
#12> We’re not here to pirate. We’re here to opt out. Then "opt out" by not using the product? No one has a right to use Spotify. If you don't like the terms, don't use the service. I'll never get why people smart enough to build something technically impressive like this feel the need to throw these completely childish pseudo-rationalizations out there. Yeah, you are stealing actually.. Is it that big of a deal? Nope.…
Artists are earning pennies of what subscribers are paying? then let's not pay, that will show them artists
Re: EBAF – eBPF Based Ad Firewall
#13extend this like pihole so we can use it for reddit and facebook and instagram ad blocking using proxy !
[deleted]
Re: EBAF – eBPF Based Ad Firewall
#14I got AI-generated vibes from the banner image, which surprised me because I wouldn't expect someone to generate something so trivial.
So I investigated, lining up the real Spotify logo in GIMP - it doesn't match up, the details are different!
But then I checked the image metadata:
`Actions Software Agent Name : GPT-4o, OpenAI API`
Doh, I should've saved time and checked that first. TIL OpenAI explicitly watermarks their output images via metadata. It even has c2pa signatures (which I didn't bother trying to verify)
Re: EBAF – eBPF Based Ad Firewall
#15Kernel level packet filtering to avoid Spotify ads is about the same level of mental gymnastics as the GPT-generated “we’re not pirates” argument in their README.
While Spotify is obviously an immoral company, you, the person reading this, are not entitled to free 24/7 cloud-streamed music on demand. They are a business and they don’t owe that service to you on principle.
If you don’t like them as a company, there’s way to purchase the music directly (remember how we all used the iTunes Store back in the day) and there are other streaming services whose morals you might find more acceptable.
To be clear, I’m not making some grand “piracy is evil” argument, but I’m saying that to publish software enabling piracy with the justification that a business’ free service is not good enough value for you is a bit out there.
Re: EBAF – eBPF Based Ad Firewall
#16> We’re not here to pirate. We’re here to opt out. Then "opt out" by not using the product? No one has a right to use Spotify. If you don't like the terms, don't use the service. I'll never get why people smart enough to build something technically impressive like this feel the need to throw these completely childish pseudo-rationalizations out there. Yeah, you are stealing actually.. Is it that big of a deal? Nope.…
You're "stealing" (if you can even call it that) from Spotify, not artists. As of July 2025, Spotify has a market cap of $145.48B USD. This makes Spotify the world's 118th most valuable company by market cap. They'll be fine. No one has a right to revenue or profit.
Mental models differ, it is what it is. Stealing from artists is of course always poor form, don't do that.
Re: EBAF – eBPF Based Ad Firewall
#17I got AI-generated vibes from the banner image, which surprised me because I wouldn't expect someone to generate something so trivial. So I investigated, lining up the real Spotify logo in GIMP - it doesn't match up, the details are different! But then I checked the image metadata: `Actions Software Agent Name : GPT-4o, OpenAI API` Doh, I should've saved time and checked that first. TIL OpenAI explicitly watermarks t…
The README itself is also very much in the style of ChatGPT. It loves the to overuse rhetorical questions.
What I find most interesting is that it apparently didn’t trigger their content filters which, at least previously, were also blocking piracy stuff.
Re: EBAF – eBPF Based Ad Firewall
#18How is this different than other ip or dns ad blockers? I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
Effectively, not a lot. eBPF does have the capabilities to do more than a regular firewall, but this just seems to do an IP lookup in a blacklist file. If you buy a fancy network card from a company like Nvidia, you could run the eBPF program on the card itself and the kernel wouldn't even see the packet come in. This use case doesn't seem like it'd need that kind of performance tweak, though. It's useful as a fun pr…
Do you have a model number for an Nvidia offload card? I thought that only Netronome did them and that they were kinda long in the tooth now. I’d love to get my hands on one.
Re: EBAF – eBPF Based Ad Firewall
#19Absolutely no need to do kernel level packet filtering for this. You can use the absurdly easy hostfile approach, or a simple self-hosted DNS server. This looks entirely LLM generated as well.
Also... who the hell tries to make changes to a user's sudoers file from their install script? This is an awful project.
Re: EBAF – eBPF Based Ad Firewall
#20I got AI-generated vibes from the banner image, which surprised me because I wouldn't expect someone to generate something so trivial. So I investigated, lining up the real Spotify logo in GIMP - it doesn't match up, the details are different! But then I checked the image metadata: `Actions Software Agent Name : GPT-4o, OpenAI API` Doh, I should've saved time and checked that first. TIL OpenAI explicitly watermarks t…
After that hint, I thought I'd give the code a quick audit. The install script adds sudoers rules to allow ebaf executable to be run with no password[0] (and also to `pkill -P` any PPID).
The ebaf executable checks the current directory by default, to look for the ebpf code to load[1].
So, running the install script this allows any ebpf code to be loaded into the kernel without a sudo password. You probably don't want this! (I'm pretty sure that'd be enough for a root LPE)
Further, the ebaf executable writes logs to a file named `/tmp/ebaf-stats.dat` [2]. An unprivileged user could put a symlink here, causing the destination file to get clobbered.
It also re-resolves all domain names every 600 seconds. Given that there are over a thousand domains listed, that's quite a lot of DNS traffic! [3]
Also, the "web dashboard" claims to listen on localhost, but it actually listens on INADDR_ANY [4]
[0] https://github.com/Kazedaa/eBAF/blob/8f88cefe0b5a837aa99f454...
[1] https://github.com/Kazedaa/eBAF/blob/8f88cefe0b5a837aa99f454...
[2] https://github.com/Kazedaa/eBAF/blob/8f88cefe0b5a837aa99f454...
[3] https://github.com/Kazedaa/eBAF/blob/8f88cefe0b5a837aa99f454...
[4] https://github.com/Kazedaa/eBAF/blob/8f88cefe0b5a837aa99f454...