Live data from Hacker News

System-wide open source ad blocker for Mac, Windows, and Linux

github.com

61–70 of 173 posts

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#62
post #47

Nice, I use AdGuard (on mobile and desktop), would this be a suitable replacement?

AdGuard for Mac is the same offering (not to be confused with AdGuard for Safari, which is a browser extension): https://adguard.com/en/adguard-mac/overview.html There's also Little Snitch Mini: https://www.obdev.at/products/littlesnitch-mini/index.html

This snitch is proprietary crapware. Instead, use OpenSnitch when on Linux and LuLu Firewall when on Mac.

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#63

Earlier quoted context omitted.

I seem to end up regretting anything I do at the network level to block traffic. It always seems to pop up that one weird time I actually do need something from a blocked domain to load, and it takes me way too long to remember that's what I did to block it.

That's when you connect to your VPN. I have a network configuration with 2 dnsmasqs, 1 with pi-hole-style hosts block, and 1 without, and most of my devices get the ad-blocking DNS, 1 gets the "unfiltered" DNS. To do this from the DHCP component of dnsmasq, you can tag MAC addresses and create different configurations (including which DNS they get) for each tag, e.g. https://github.com/imp/dnsmasq/blob/770bce967cfc99…

That's a simple and practical solution to a common problem. Thanks for sharing.

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#65

I'm comfortable with a DNS based blocker (pi-hole) and it seems to work quite well. Bonus: It works across all devices on the network, rather than installing something onto the OS.

I seem to end up regretting anything I do at the network level to block traffic. It always seems to pop up that one weird time I actually do need something from a blocked domain to load, and it takes me way too long to remember that's what I did to block it.

I had that same issue until I started using mine over tailscale. One of my computers acts as the DNS server for the whole network with pihole on it, and then anytime I need to get around something I temporarily disconnect from my tailnet. Super nice cause then I get no ads on my phone too.

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#66
post #59
post #55

Earlier quoted context omitted.

You may also want to see https://librewolf.net/ while not as good by default compared to Mullvad Browser, it may still be a browser to consider.

Thanks to both of you. I am a light user of LibreWolf (I mostly use Iridium browser)

I haven't heard of Iridium browser before, seems neat. Thanks.

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#67

Earlier quoted context omitted.

The build steps are provided as a GitHub action in the repo. You can audit the build pretty easily, or if you're super paranoid you can build it yourself by following the build steps.

Even if the app is trustworthy, it still adds an attack vector to your system. It could have a bug, or the certificate could be exploited by another program.

Equally true of every ad

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#68
post #9

It is just not wise to allow some random application to MiTM your SSL traffic.

If you can read the code and asure that the traffic won’t be sent to a malicious third party, why not? What is the concern?

Please don't downvote an earnest and important question which should be answered

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#69

I'm comfortable with a DNS based blocker (pi-hole) and it seems to work quite well. Bonus: It works across all devices on the network, rather than installing something onto the OS.

Can confirm, never leaving the house is a very effective way to avoid unpleasant interactions :)

Re: System-wide open source ad blocker for Mac, Windows, and Linux

#70
I don't know how it actually works, but won't website like youtube simply deny you access if it detects that the ad related request timed out? I imagine that browser extensions actually tap into the site's code and somehow go around such detection. But if this is a simple firewall, how will this work against any website that doesn't just default to most trivial "import ad service", but rather actually takes steps to block the ad blockers (Like youtube)?
Post reply on HN