Live data from Hacker News

Chrome disabling uBlock Origin is a serious security threat

nuage.quimerch.com

81–90 of 91 posts

Re: Chrome disabling uBlock Origin is a serious security threat

#81
post #75

They don't mention uBlock Origin Lite which does much the same and works with v3. It's a bit disingenuous not to do so.

I have clients who use Chrome and when uBO was removed, I installed the Lite version and now some of them have gotten malware. It's not good enough. Will need to switch to another browser.

Re: Chrome disabling uBlock Origin is a serious security threat

#82
post #36

Earlier quoted context omitted.

No, it takes way more than that. That's basically what running a Pihole does, which barely blocks anything these days. Good ad blocking requires you to be able to look at decrypted HTTPS traffic and remove content from the DOM, including stuff added after the fact by Javascript. That's why uBlock Origin works better than Adguard (which is a https MITM ad blocker) and why Adguard works better than Pihole (which doesn'…

Ok, but the proxy could insert JS code into the html page which does what uBlock Origin does, couldn't it? This would give the same flexibility without the need for a browser plugin.

You can try, but that adds way more complexity and fragility than a simple browser extension.

That said, if you build such a product (something that can MITM HTTPS and then inject ad blocking JS on every page or video, or simply rewrite traffic to strip out ads like a packet shaping firewall, etc.) and that can make use of existing filter lists, I'd be very happy (eager, actually) to pay for it.

That is similar to how Adguard works, but that can't run on a router like Pihole does. I don't know how you'd get past the HTTPS cert issue. I think you'd first have to install that custom cert on every device connected to the router, or else have the router completely proxy every HTTPS connection and re-serve it from own domain and cert. Might run into dnssec issues too? Not really sure but sounds messy. Browser extensions don't have to worry about HTTPS and can (or could before manifest V3) directly manipulate the DOM.

That the market hasn't created one yet suggests it might be difficult. But I'd love to see one.

Re: Chrome disabling uBlock Origin is a serious security threat

#84
post #15
post #10

I guess it would be easy to block ads via a proxy? An http proxy in Python is just a few lines of code. It could simply drop the requests to known ad servers. And in Chrome, there is a setting to use a proxy. So all one had to do is run ./my_ad_blocking_proxy.py and set the proxy in Chrome to something like 127.0.0.1:8080?

up next: chrome ignores proxy configurations if content is available without.

I thought chrome was already doing this for some google domains and using their own DNS vs. the operating DNS? Maybe I’m wrong, but I thought this was a thing.

Re: Chrome disabling uBlock Origin is a serious security threat

#85
I stopped using Google services at the beginning of this year. I transitioned from Chrome to Firefox and from a standard Android device to one without Google accounts and apps. While this setup is suitable for tech-savvy individuals, it can be challenging for someone like my mom.

To address this, I bought her a Fairphone with a de-googled Android operating system installed out of the box. This solution works well, especially for those who prefer not to use Apple products.

For enhanced ad-blocking and security, I set up an OpenWRT router in front of the provider's router. This includes features like Adblock, DNS over HTTPS (DoH), DNS over TLS (DoT), and DNSCrypt. This setup has been running smoothly in my parents' house for over three years without any issues.

Re: Chrome disabling uBlock Origin is a serious security threat

#87
post #86

I am confused. uBlock Origin is still available in the webstore https://chromewebstore.google.com/detail/ublock-origin/cjpal... >. Do we talk about the same extension and/or is it just disabled for Chrome and not for Chromium/Brave etc.? Just curious.

I answered the questions half way myself.The ext. gets disabled because it is manifest 2 not manifest 3. Manifest 2 will be disabled by ~mid 2025 in the Store.

Seeing: seeing https://github.com/uBlockOrigin/uBlock-issues/wiki/About-Goo...

And asking: What are the diff between manifest 2 and manifest 3 ext?

Answer: https://chat.mistral.ai/chat/9e66fbc8-0df2-4248-a252-5acb6fb...

What is the problem to move to M3? And why is this a ban?

Re: Chrome disabling uBlock Origin is a serious security threat

#88
post #55

Earlier quoted context omitted.

She can't switch to firefox because she's used to Chrome and she's 80. TBH I added the sentence about recent Mozilla behaviour because it pisses me off but it shouldn't be an argument, you're right.

What special feature does she use that is absolutely untransferable to FF? I have both browsers icons next to each other and sometimes I launch the other by mistake. For normal browsing I only spot the difference due to various pages having different logins ie from my wife or not being logged in. If somebody is able to use internet (god forbid even do some payments on it) then I am pretty sure they could understand t…

I think it's mainly having to set it up. Which isn't that much work for basic users but still entails: making a new account (Mozilla), data migration, installation on other devices, add-on installation, syncing, configuration, etc.

Re: Chrome disabling uBlock Origin is a serious security threat

#89

Earlier quoted context omitted.

I installed Ubuntu for many people in their 80s. Give her some time with FF, you don’t have to remove chrome, just hand her FF. I bet she does just fine.

Are you taking upon yourself to do this for all uBO users that need it without knowing? If you do, you acknowledge that "Chrome disabling uBlock Origin is a serious security threat." If you don't, then "Chrome disabling uBlock Origin is a serious security threat" seems even more true. Either way, I'm curious on the size of your bet here. Talk is cheap, and you've only given OP the laziest and most obvious solution. D…

I took that comment as a good faith offer of the experience of the writer.

I’ve had both experiences myself. Sometimes the older folks manage just fine. Sometimes they don’t. Sometimes it’s an aversion to change, sometimes it’s to cope with cognitive decline, and sometimes they just like one thing or the other, just like anyone.

Post reply on HN