µMatrix - the HTTP Switchboard successor

Discussion in 'other software & services' started by tlu, Oct 25, 2014.

  1. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    The rule: * 1st-part * allow
    is I think included in the default install. Together with the global rules in my post #269 above, it is achieved that the frames are not allowed for the 1st party. Well, the cookies are not allowed too. Deleting those global block rules they will be allowed.

    I myself don't use that global allow 1st-party all rule. But if I would, I would keep the frames blocked.
     
  2. tlu

    tlu Guest

    Agreed, same here.
     
  3. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Which of either "other" or "XHR" do you guys feel is more critical to block globally?
     
  4. Lagavulin16

    Lagavulin16 Registered Member

    Joined:
    Nov 26, 2014
    Posts:
    195
    Location:
    Emerald City
    I did an extension search for uMatrix via the Opera browser "add an extension" search and there was no match found for uMatrix. Is this a new/temporary development for this extension relative to Opera?
     
  5. Lagavulin16

    Lagavulin16 Registered Member

    Joined:
    Nov 26, 2014
    Posts:
    195
    Location:
    Emerald City
    Never mind. uMatrix popped up when I searched under a different language-- French. A temporary mix-up for sure.
     
  6. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Immagine.jpg

    Interesting to know your settings.
    TH.
     
  7. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Pop-ups were blocked...
     

    Attached Files:

  8. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Not for merit of Umatrix there is a factor of disturbance in the test.

    The pop-up with Ublock not is present only if they are blocked "Inline Script" but this way the website is not usable.
    And this is not a condition to perform the test.
     
  9. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    In the other thread you mention to enable script for http://film-stream dot org/ and it is enabled in my uMatrix settings. Still no pop-up.
     
  10. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    It would be interesting the explanation of the Developer
     
  11. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Agreed, hopefully gorhill can comment.
     
  12. dogbite

    dogbite Registered Member

    Joined:
    Dec 13, 2012
    Posts:
    1,290
    Location:
    EU
    no pop ups for me too.
     

    Attached Files:

  13. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    I want to ask do I need HTTP Switchboard with this or not?
     
  14. oneeyed25

    oneeyed25 Registered Member

    Joined:
    Nov 26, 2013
    Posts:
    21
    No, you don't need it. uMatrix replaces HTTP Switchboard.
     
  15. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    Thanks
     
  16. gorhill

    gorhill Guest

    Blocking 1st-party frames is just annoying and accomplish nothing really -- aside annoyingly breaking sites. The point of blocking iframe is to foil compromised pages injected with malicious iframes which purpose is to load their payload from shady 3rd-party web sites.
     
  17. gorhill

    gorhill Guest

    The popup will occur when you first visit the site and click anywhere on the page. Clearing the cookies for the site will cause the popup to occur again. uBlock has code dedicated to block popups, it's not the case for uMatrix.

    Edit: With uBlock, the same popup also occurs, because there are no filter in EasyList to take care of it. The new popup blocker can take care of these cases for when no filter exists.
     
  18. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    TH Gorhill.

    Sampei = 1 VS Rest of the World = 0


    :)

    P.S.

    I'm advising test for pop-up not dangerous:


    http://www.popuptest.com/goodpopups.html
     
    Last edited: Mar 28, 2015
  19. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Thank for clarifying, gorhill. Sampei, clicking the link you specified results in a new tab opening and a warning from Chromium that pop-ups were blocked on both the original site's tab and the new tab.

    Otherwise what are the security implications of this? I have frames blocked by default everywhere. Is there more to be concerned about?
     
  20. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,343
    Location:
    Italy
    Sampei Wrote:

    (Condition for the test)

    Script film stream.org (on)

    Click with the mouse on the link to the right:

    >>> vedi tutti gli aggiornamenti >>>

    After opening the popup to a new test must close and reopen the browser.

    If not there are other disturbing factors
    better correct your browser settings
    and delete cookies on exit.
     
  21. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    What gorhill is telling can be achieved if not allowing 1st party by the rule :
    * 1st-party frame allow
    I myself don't trust any unknown site and so I am not allowing 1st-party by default. I don't also have the rule above, since i see no reason to allow frames to every site i visit, sites that I am blocking plugin, script, XHR, other (and cookies).
     
  22. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    I'm in agreement with you, Jarmo, and I do the same, not allowing frames by default in 1st-parties.
     
  23. bberkey1

    bberkey1 Registered Member

    Joined:
    Mar 23, 2013
    Posts:
    244
    Location:
    United States
    ^^
    I block frames, plugins and scripts globally by default (plus block all 3rd party frames in ublock) i used to globally block cookies as well, but went ahead and whitelisted 1st party
     
  24. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    What I would like gorhill to do to uMatrix. This not something about security but usability, especially for new users. It is to allow disable hosts files for a scope basis. I posted this on the other thread, but later 2 posters got so very much interested in their proxomitron stuff, so I repost the link of my meaning:
    https://www.wilderssecurity.com/thre...d-blocking-scripts.373285/page-9#post-2471962
    Post #202 in that link.

    I know uBlock is so hot or something and I use it too, but only as an adblocking extension. I myself don't care about advanced features in it. Blocking 3rd party frames with it is already a nuisance operating same time uMatrix. But if the developer can have some time and it is not too difficult to implement the above mentioned feature I would like to have in uMatrix.
     
  25. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    4,064
    Location:
    Canada
    Another request if possible:

    would it be possible to use CIDR notation or even IP ranges in the rulesets? eg: 198.38.0.0/16 (CIDR) or even a range like 198.38.0.0 - 198.38.255.255. Netflix, for instance, requires so many IP addressses to work properly.

    EDIT

    ..or can wildcards even be used?

    eg: 198.38.*.*
     
    Last edited: Mar 31, 2015
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.