Don't some DNS servers implement something that acts like a server-resolved CNAME, where the admin puts in a record that points to some other DNS name but the client just sees an A (out AAAA) record?
I think you are referring to ALIAS records
uBlock Origin CNAME uncloaking now supports filtering by IP address
61–70 of 133 posts
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#62uBlock Origin is what makes Firefox even greater and definitely one big reason I use Firefox over Chrome etc. It make the Internet browsable.
That may change since Mozilla is becoming an ad company
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#63Earlier quoted context omitted.
Yes. Ads and analytics providers have started doing this to get around third-party cookie protections.
This is such an intrusion of privacy. I wish I could just disable cookies entirely but the usability of many webpages just goes down. I should not be punished for not wanting 3rd party trackers.
I run all the time with first-party cookies disabled.
Most of the web works. Anything that does not, and I care about, gets blessed.
The only content I allow by default, even in low-security browser profiles, and even from first-party domains, are HTML, CSS, and images.
I consider the occasional broken page to be a successful test of my configuration. If I care, I adjust permissions.
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#64Earlier quoted context omitted.
This is such an intrusion of privacy. I wish I could just disable cookies entirely but the usability of many webpages just goes down. I should not be punished for not wanting 3rd party trackers.
Before I get too alarmed someone would have to tell me how an adsite.com cookie is being sent to adsite.example.com. This workaround seems to let adsite.com profile me as well as example.com already can, but it loses the ability to correlate my activity across example2.com and example.com with a single cookie. (I guess ad providers have gotten good enough to not need cookies? Like they know my browser window size, in…
The correlation is happening through an API connection between adsite.com and example.com and not through cookies. So even if you block all third party cookies and scripts your activities are being tracked through the first party.
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#65Don't some DNS servers implement something that acts like a server-resolved CNAME, where the admin puts in a record that points to some other DNS name but the client just sees an A (out AAAA) record?
I think you are referring to ALIAS records
Yup. some implementations provide similar ANAME, and Cloudflare has flattened CNAME which is probably the best implementation I came across in years of supporting folks trying to use these kinds of records on a large CDN.
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#66It did not hit me yet, but I'm already rewriting my extensions to firefox to switch if Chrome really axes uBO
For those unaware, what is uBO and how would it affect most extensions?
Maybe it’s a telling sign of the new wave of HN users, but I’m genuinely surprised to read that you don’t know what uBlock is..
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#67What is the uBI status on Brave, Edge and Opera?
I don't care about the two proprietary browsers you've mentioned, but Brave is going to (partially) support manifest v2 and maintain uBO compatibility for as long as they're able to: https://brave.com/blog/brave-shields-manifest-v3/ Not that you really need it as Brave has its own very capable built-in ad blocker with -- last time I checked -- higher performance than uBO (since it's compiled into native code) and ful…
Brave is open source instead of proprietary now? I knew they were Chromium based (like the others) but I hadn't realized they switched over on all of the customizations on top.
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#68Earlier quoted context omitted.
What are the implications?
If third party ad servers get access to your main domain's cookies, they can impersonate your signed-in users and steal their data.
...Unless you're savvy. Thank goodness for the availability of https://publicsuffix.org/ (as long as you only use your main domain and don't need to share cookies with your own subdomains), and the includeSubDomains directive to HSTS! But - if you already set this up, you probably are savvy enough to avoid the problems created (or your provider is)
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#69Earlier quoted context omitted.
I moved many years ago to this combo, and never saw a single reason to switch away. Same for android phone, the only usable mobile web experience I've seen. Those few sites over a decade that had some display issues had issues also under chrome. Plus I personally consider ads a cancer of modern society. White and not so white lies, manipulation... nothing respectable regardless (or because ) of tremendous money circu…
I mean there are appropriate applications for advertising (like classifieds in a newspaper), but there is no reason why advertising should be so pervasive that it requires a massive surveillance apparatus like it does today. Advertisements are the reason why everyone switched from TV to Netflix, and that's back when cable TV was a paid service. secushare[1] makes the case that this is because the internet lacks a sec…
Ugh, micropayments again! I have no desire to pay for content or software -- torrents and OSS are all anyone needs.
Re: uBlock Origin CNAME uncloaking now supports filtering by IP address
#70It did not hit me yet, but I'm already rewriting my extensions to firefox to switch if Chrome really axes uBO
I am switching family over to Brave. They don’t even notice the difference and I’m more confident the browser will continue to support user centric content filtering.
Is that going to help? Brave is still blink. They might have some filtering baked in but I’m not sure if it’s as powerful (or can be) as UBO.