µBlock, a lean and fast blocker

Discussion in 'other software & services' started by gorhill, Jun 23, 2014.

  1. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    2,137
    Location:
    Italy
    "Actually Legitimate URL Shortener Tool List" has surpassed 1000 rules.
    My current number of rules used:

    1002/1012

    AdGuard URL Tracking filter List.
    My current number of rules used:

    250/277

    I don't think it is a good idea to use only the second list.
    ClearUrl extension declares over 250 rules.
    Its development is stopped several months ago.
     
  2. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    Yeah, I worry about that as well. The developer hasn't done anything since June 2.

    screenshot_Kevin_20210910.png

    Maybe time to stop using it.
    For it's feature to strip ETag headers you can try the small extension ETag Stoppa.
     
  3. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,155
    Location:
    Brooklyn, NY
    Sorry to hear this about ClearURLs but it's gonna be a liability maybe the longer it's neglected. Already have Dandelion Sprout's Actually Legit URL Shortener list in uBO since months anyway.

    Added the ETag ext. to Firefox. Now to look for an equivalent for Edge. For now, ClearURLs is staying put there until I find one. :)
     
  4. Bertazzone

    Bertazzone Registered Member

    Joined:
    Apr 13, 2018
    Posts:
    392
    Location:
    Milan, Italia
  5. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    I wonder if ClearURLs works at all in Chromium...
    The Logger is completely empty...

    If I look at the source code of the ETag Stoppa extension, it shouldn't be that difficult to implement:

    Code:
    browser.webRequest.onHeadersReceived.addListener(d => {
            if (!d.responseHeaders) return;
            const newHeaders = d.responseHeaders.filter(h => {
                return h.name.toLowerCase() !== 'etag';
            });
            if (newHeaders.length < d.responseHeaders.length) {
                console.debug(`Removed ETag from request #${d.requestId}\n    ${d.url}`);
                return {responseHeaders: newHeaders};
            }
        },
        {urls: ["<all_urls>"]}, ['blocking', 'responseHeaders']
    );
    
     
    Last edited: Sep 10, 2021
  6. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,155
    Location:
    Brooklyn, NY
    Well it still seems to be doing something but since this is latest Edge version plus Windows 11 plus no recent updates, I'm unsure of what value the little number is now. I used Yahoo for this since it's so busy with trackers and cookies and scripts, oh my.

    clearurlsyahoo.png

    Edit: I got rid of ClearURLs after all. Added URL Shortener extension from the Chrome Web store. Hopefully, it's legit and all.

    Edit: test test test
    Yahoo | Mail, Weather, Search, Politics, News, Finance, Sports & Videos
     
  7. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    I don't think that's really what you want.

    You're better off with AdGuard URL Tracking Protection (in uBO's default privacy section) and
    Actually Legitimate URL Shortener Tool (import this URL to your custom filters).

    These filters do the same as ClearURLs (strip tracking parameters from the URL's).
     
  8. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,155
    Location:
    Brooklyn, NY
    nicolaasjan, we actually had this conversation about 4 months ago. :)

    https://www.wilderssecurity.com/threads/ublock-a-lean-and-fast-blocker.365273/page-221#post-3005658

    Still using this list too. I suppose I'll remove the URL Shortener ext. though--it's an unknown quantity anyway. So, I'll keep an eye out for a suitable replacement for ClearURLs. You guys have it going on w/uBO and good ext. :thumb:

    Edit: I forgot--also have the AdGuard URL Tracking filter which is imported into uBlock Origin. OK, this is better.
     
    Last edited: Sep 10, 2021
  9. Bertazzone

    Bertazzone Registered Member

    Joined:
    Apr 13, 2018
    Posts:
    392
    Location:
    Milan, Italia
    Forget it in any chromium browser, unless you're willing to use Trace for somewhat comparable protection and disable most of its other features. I don't know of any other extension aside from ClearURLs that guards against tracking injection over history API.

    Frankly, I think users are better off with only µBO (especially in advanced mode) and clearing all site data regularly. Highly advised for those who rely on one browser for most of their web surfing.
     
  10. plat1098

    plat1098 Registered Member

    Joined:
    Dec 19, 2018
    Posts:
    1,155
    Location:
    Brooklyn, NY
    Has the Trace dev resumed working on it? It seems it's been a couple of years since that ext. got updated also.

    Edit: Yessss! Got updated June 2021. Yay!! Thanks, Bertazzone. Good news! I'll have to update my config over at MT cuz I removed it a few months back.
     
  11. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
  12. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,021
    clearurls is working, test:
    https://privacycheck.sec.lrz.de/passive/fp_etag/fp_etag.php

    Etag Stoppa is also working in chromium. (need to investigate in to background page to see the result, the regular console shows nothing)
    Code:
    chrome.webRequest.onHeadersReceived.addListener(d => {
           if (!d.responseHeaders) return;
           const newHeaders = d.responseHeaders.filter(h => {
               return h.name.toLowerCase() !== 'etag';
           });
           if (newHeaders.length < d.responseHeaders.length) {
               console.debug(`Removed ETag from request #${d.requestId}\n   ${d.url}`);
               return {responseHeaders: newHeaders};
           }
       },
       {urls: ["<all_urls>"]}, ['blocking', 'responseHeaders']
    );
    
    manifest.json
    Code:
    {
        "name": "ETag Stoppa",
        "description": "Prevents Firefox from storing entity tags by removing ETag response headers unconditionally and without exceptions.",
       "homepage_url": "https://github.com/claustromaniac/etag-stoppa",
        "version": "0.4",
        "manifest_version": 2,
       "permissions": [
           "webRequest",
           "webRequestBlocking",
           "<all_urls>"
       ],
       "background": {
           "scripts": [ "etag-stoppa.js" ]
       },
        "icons": {
             "32": "icons/etag32.png",
             "64": "icons/etag64.png"
        }
    }
    
    
    also working
    https://github.com/claustromaniac/etag-stoppa/issues/10
     
  13. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    Thanks, works here. :thumb:
    Made a .crx-file:
    https://dl.dropboxusercontent.com/s/aaqizbh75gpc3w4/etag_stoppa-0.4.crx
     
    Last edited by a moderator: Sep 11, 2021
  14. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,021
    nice. i could add it by drag&drop in dev-mode, not sure if that would work without dev-mode. i remember that chromium need signed extensions like firefox in regular use. for me i have few extensions unpacked, not in store. chromium uses extensions anytime unpacked.
     
  15. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    You'll have to add it in dev-mode.
    Whenever I use unpacked extensions, I pack them for easy use in other Chromium installs (and as a backup).
     
  16. nicolaasjan

    nicolaasjan Registered Member

    Joined:
    Sep 23, 2018
    Posts:
    254
    Location:
    The Netherlands
    @Brummelchen
    Now something strange:
    In Chromium-dev 95.0.4634.0, I still see in the response headers of this GitHub page:
    Code:
    etag: W/"25d3133e0909181c5be69d16a75c1d10"
    While in Ungoogled Chromium 93.0.4577.63 there's no etag...

    In Firefox there's also still the `etag` in the response headers of that page.
     
    Last edited: Sep 11, 2021
  17. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    2,137
    Location:
    Italy
    ETags tracking,with my current browser,is a false problem in my opinion.
    Clearing cache clears etags.
    And I have set the browser to delete images and cached files on exit.

    An old article that might be useful to you:


    https://www.ghacks.net/2017/12/09/a-solution-to-etag-tracking-in-firefox/
     
  18. Bertazzone

    Bertazzone Registered Member

    Joined:
    Apr 13, 2018
    Posts:
    392
    Location:
    Milan, Italia
    @nicolaasjan @Brummelchen @plat1098 @Sampei Nihira I think we need a separate thread for "other" extensions or the etag topic
    .
    I thought the same as I get inconsistent results while clearing all site data on browser exit. Using Edge, if I close browser and re-visit the site I fail the test - but upon another close and visit Edge passes the test. Exactly the same result using FF. :confused::doubt:
     
  19. Bertazzone

    Bertazzone Registered Member

    Joined:
    Apr 13, 2018
    Posts:
    392
    Location:
    Milan, Italia
  20. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,021
    thats why i wrote:
    for firefox you need to enter extension debugging mode (about:debugging) if the regular console dont show up the text.
    extension is working although you see the header information, firefox and chromium.
    chromium ungoogled is not acceptable for me, it has some modifications i dont like.

    hint: CookieBro has an option:
    "[_] Delete ETag HTTP Response header from blacklisted sites with no matching whitelist setting"
     
  21. summerheat

    summerheat Registered Member

    Joined:
    May 16, 2015
    Posts:
    1,906
    Yes.
    Nevertheless:
    I opened https://lucb1e.com/randomprojects/cookielesscookies/ with FF 92, stored some text, closed the tab and opened that site again in a new tab. Result: The site did not recognize me. Note: I'm using FF with Enhanced Tracking Protection in Strict Mode. This in combination with Network Partitioning seems to do an excellent job. (Note also that I had disabled Temporary Containers and Cookie Auto-Delete.) Although I must admit that I'm a bit surprised as the same (partitioned) caches should be loaded when the same site is revisited.

    But again, this should be discussed in a new thread.
     
  22. Nitty Kutchie

    Nitty Kutchie Registered Member

    Joined:
    Apr 10, 2015
    Posts:
    160
    That site is tracking user by image, block all images with umatrix before you go to that site and you will pass the test, remember before not after otherwise you will fail the test.
     
  23. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    4,021
    stupid hint... you really think that only that site is using etag? OMG

    i state etag overrated like Sampei did.
     
  24. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    40,495
    uBlock Origin 1.38.0 Released (September 17, 2021)
    Download - 1.37.2 - Firefox (AMO)
    Download - 1.38.0 - Chrome (Web Store)
    Download - 1.37.2 - Opera (Opera Addons)
    Download - 1.38.0 - Edge (Microsoft Edge Addons)
    Download - 1.15.24 - Edge Legacy (Microsoft Store) (retired addon)
    It will take some time until the new version will be available on AMO, Chrome Web Store, etc.
     
    Last edited: Sep 23, 2021
  25. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    9,735
    Location:
    U.S.A. (South)
    :thumb: Developer mode update at 1.37.2 here too. Oh, for Chrome.

    Chromium: Review pending
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.