Why would anyone need to block ads outside of the browser? This seems like it's just asking to introduce obscure errors into other apps?
I’d block ads out side of my computer if it was possible, so absolutely need to block all ads in any app.
System-wide open source ad blocker for Mac, Windows, and Linux
151–160 of 173 posts
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#152Hello HN! Having just posted the app to a couple of small subreddits before sleep and then waking up to being on the front page over here is quite an experience :) I was hoping to make a Show HN post after giving Zen a bit more polish, but I guess here we are. Thanks for all the constructive feedback. I totally share your concerns about its security and likewise wouldn't use some unverified application trying to inst…
Thank you very much for your work! I really appreciate it. It seems a great solution in a situation where you can't use Pi-hole etc.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#153I kinda see installing a root certificate like disabling SIP in macOS - I get why it's needed in some cases, but it's a deal-breaker for me.
That makes deep ad blocking, local web caching, and automated history logging (with paths) impossible, for better or worse.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#154Earlier quoted context omitted.
Not a product. It's literally free, free as in free speech, and free as in you're free not to use it. Building the code yourself for every update is also a solved problem on every system with a feature complete package manager, including Windows. Trust is not so easily solvable, but if you trust nobody, you can choose to look at ads.
> Not a product. It's literally free, free as in free speech, and free as in you're free not to use it. Sorry, I change my question to "how is this a usable free?"
Same as everything you use on your computer... If it's not open source it's already game over. If it is, congratulations feel free to inspect all the code yourself and build from source OR trust the project maintainers and use pre built binaries.
Applies to this program no different than your Linux distro.
Of course there could be other tools that can help verify things such as checksums on reproducible builds.
If none of that is "usable" enough for you, feel free to set up your own tooling and automation
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#155Earlier quoted context omitted.
Where is the bar for software you trust? do you trust your OS, router firmware, VPN client, web browser, etc?
In fact, that's what I'm trying to say. The line we draw at "hey we can at least audit open source" is a fully imaginary one. It's a false comfort we create. It's the Kool-Aid we drink. I don't have any trust in any of those components you mentioned, but I came to terms with the risks associated with using them as part of my threat model. However, I find the notion that open source is somewhat safer because "we can a…
Yes that's fair, however that's how our complex world works. E.g. we rely on journalism (the real kind) to uncover all kind of scummy behavior. Similar in the OSS world.
There is no way to easily verify that unless some trusted bodies do this for us and publish their work specifically for what you're using.
Now you just have been stating a problem and no solution.
I do agree with you though that "hey it's OSS and easy to verify because we have the code" is indeed lying to ourselves and especially tools with privileges like this (MITM your encrypted traffic) should not be taken that lightly and have the proper warnings, disclaimer and attention (to watch for bad behavior)
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#156Earlier quoted context omitted.
> So I can apply the same logic to Microsoft concerning Windows, Office, etc. and you wouldn't dispute me, right? I mean, no, I would dispute you, because everything Microsoft is doing in those products isn't publicly available for the world to see. Still probably pretty unlikely because those products are hugely popular and widely scrutinized.
So you would dispute me, but not for the criteria you originally posed.
The post I was replying to said that despite being open source, nobody reads the code for Chromium and Firefox. This isn't true because people are paid to read that code. Nonetheless, anyone can still read it if they want to. This means that it's at least marginally higher risk for a state actor trying to get code into these codebases than a proprietary codebase.
As I said, I think it's still pretty unlikely that Microsoft products are compromised by a state actor. It's certainly not part of my threat model. I'm not sure what point you're trying to make though. I certainly wouldn't install a system-wide HTTP proxy from a developer I didn't trust. And I don't have much of a choice but to trust Microsoft, their products are so ubiquitous I often have little choice.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#157Earlier quoted context omitted.
How? Can't Youtube just detect which expected resources are not loading and refuse to play?
I know the YouTube ads is getting more complicated now, but it's just simple example. Another is hosts file/DNS blocking will remain the blank space on web page, but this one will not.
How does this avoid blank spaces? Does it parse and rewrite HTML or inject Javascript that does?
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#158Earlier quoted context omitted.
If you can read the code and asure that the traffic won’t be sent to a malicious third party, why not? What is the concern?
No one will do this, and those that read source code during installation do not review it for every upgrade. It's one of those 'just do this!' arguments that has little to no basis in reality. There's more of them replying to the parent comment: "Just do this! Just compile a thing! Just verify signatures for every update!". Come on... Meanwhile the negatives immediately implicate anyone with access to the executable.…
Yes, some people will do this. I just read the whole project, it's actually a pretty simple program.
I'm installing it now and the best part is if I don't like something I can change it. OSS FTW.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#159Earlier quoted context omitted.
No but it might be fun to play with in a Qubes environment or similar where you can inspect packets going in and out for anything weird happening.
Looking at packets will only get you so far if they're encrypted. Software like this has way too many opportunities to exfiltrate information for that approach to work.
That's true, but if it is trying to exfiltrate data you will probably see more packets coming out than going in. If the concern is that the SSL cert they add allows them to decrypt your data, and you see it sending your requests anywhere it shouldn't, you'll get a window into what they are trying to do. It's not perfect, but it is possible to gain information in such a way.
Re: System-wide open source ad blocker for Mac, Windows, and Linux
#160Earlier quoted context omitted.
I have a very simple setup that works for us. ISP’s router has unrestricted Wi-Fi access. I run a router behind it with restricted (via pi-hole) access. All devices connect to the restricted Wi-Fi. Any time I need unrestricted access, I connect to the ISP router Wi-Fi for some time and back to the restricted when done.
Don't you mean you run the restricted router in front of the ISP router?
Not sure what the correct usage is regarding front vs behind.
Basically Outside World — ISP Device - internal restricted Router (using pi-hole as DNS) - home devices
So, yes, if looking from inside the restricted router would be in front.