Advice Request µBlock Origin blocks "https://ipm-provider.ff.avast.com/"

[JB007]

Hello,
On Edge and also on Chrome, µBlock Origin blocks "https://ipm-provider.ff.avast.com/", according to " ||ipm-provider.ff.avast.com^ " in "Dan Pollock’s hosts file".
Is it a false positive or not ?

 

[silversurfer]

Hello,
On Edge and also on Chrome, µBlock Origin blocks "https://ipm-provider.ff.avast.com/", according to " ||ipm-provider.ff.avast.com^ " in "Dan Pollock’s hosts file".
Is it a false positive or not ?

Looks like false positive, even on VT: 0/80

VirusTotal

VirusTotal

www.virustotal.com

 

[JB007]

Looks like false positive, even on VT: 0/80

VirusTotal

VirusTotal

www.virustotal.com

But the community score on VT is bad, - 34 !

 

[EndangeredPootis]

But the community score on VT is bad, - 34 !

Only one person rated it though.

 

[JB007]

Only one person rated it though.

Oups!
You are right @EndangeredPootis !
How can a single person gives - 34 ???

 

[EndangeredPootis]

Oups!
You are right @EndangeredPootis !
How can a single person gives - 34 ???

I believe if you create an account it provides a much higher score, if you dont have a account its simply +1 or -1, or it may be due to how old your account is.

Edit;

Gain reputation

The VirusTotal Community uses a reputation score to gauge the usefulness and accuracy of user-generated comments and votes. Whenever a user votes one of your file or URL comments as useful, you receive 10 reputation points. On the other hand, if one of your comments is voted as not useful, you lose 10 reputation points. The single way to improve your reputation score is to make interesting and helpful file and URL comments.

 

[SeriousHoax]

Dan Pollock's host file is not enabled by default on uBlock Origin. You may wanna disable it as it's known to be a bit aggressive.
If you're using a Chromium browser then import this list instead to minimize first party tracking:

https://hostfiles.frogeye.fr/firstparty-only-trackers-hosts.txt

 

[upnorth]

I agree with @silversurfer . More then likely a false positive and even did a quick check on AnyRun. Couldn't see or spot anything malicious.

If your still concerned, try submit the url to a few major AV vendors.

 

[Lenny_Fox]

less is more

 

[SeriousHoax]

less is more

View attachment 242453

How do you survive without cosmetic filters?

 

[Marko :)]

less is more

View attachment 242453

How... how do you survive the internet with that small filter?

I'm only using these filters:

 

[oldschool]

How do you survive without cosmetic filters?

Maybe they're over-rated? I use only 23 of them on Edge and get on fine.

 

[Moonhorse]

How... how do you survive the internet with that small filter?

Medium mode & do cosmetic filtering yourself to sites you visit to, might take a bit of time but you can make backup every time you add some cosmetic filtering to keep your own list up to date

Probably under 20 domains i visit regularly, its easy to set- up but i just use as many block lists as you most of time, could challenge myself to lesser list probably

 

[Marko :)]

Medium mode & do cosmetic filtering yourself to sites you visit to, might take a bit of time but you can make backup every time you add some cosmetic filtering to keep your own list up to date

Probably under 20 domains i visit regularly, its easy to set- up but i just use as many block lists as you most of time, could challenge myself to lesser list probably

I tried using uBO in medium mode but it breaks a lot of websites. I know how to fix them and everything, but it's just too much work for me. Instead I'm using medium mode on just a few pages that are riddled with ads, trackers and pop-up. For all other websites, I'm relying on filters mentioned above.

To use uBO in medium mode, I'd need a list of CDN domains which I could whitelist so it doesn't break a lot of websites.

 

[oldschool]

To use uBO in medium mode, I'd need a list of CDN domains which I could whitelist so it doesn't break a lot of websites.

You could use Decentraleyes whitelist here or the one from Local CDN for starters.

 

[SeriousHoax]

Maybe they're over-rated? I use only 23 of them on Edge and get on fine.

Not using cosmetic filtering leaves empty ad placeholders, social media widgets, etc. other annoyances and I feel itchy if I see those I always open issues on Adguard/EasyList's GitHub to get those fixed by them.

 

[Nightwalker]

How... how do you survive the internet with that small filter?

I'm only using these filters:

View attachment 242502
View attachment 242503

IMO your list is pretty excessive and redundant, you dont need AdGuard Base + EasyList (choose one), no need to have "I dont care about cookies", Anti-Facebook, AdGuard Annoyances, AdGuard Social Media when you have Fanboy's Annoyance.

 

[SeriousHoax]

you dont need AdGuard Base + EasyList (choose one

Actually this is accurate more than 95% of the time but not always. uBlock Origin can't parse all the rules from Adguard filters including Adguard Base, Adguard Tracking Protection, AdGuard Annoyances, AdGuard Social Media. I've seen this combo missing ads, empty place holders quite a few times. Some rules only works with Adgaurd extension. I've seen the reverse thing also, Adguard extension failing to parse a rule from EasyList related filters but less frequent than the previous combo. Only using Adguard related filters on uBlock Origin is not the best idea. If using only one then I would suggest to use EasyList related filters on uBlock Origin instead of Adguard. It works much better this way. Using both doesn't cause any harm also but if using less filters is a priority then uBO with EasyList and Adguard with Adguard is the way to go.

 

[JohnR]

I understand the logic that less can be near equal to more, but no prizes for having the shortest list and or poor cosmetics if speed is unaffected.
UBO medium and rules as below work for me

 

[Lenny_Fox]

@SeriousHoax I use 38 cosmetic filters for websites I visit a lot (mostly cookies prompts and first party teasers ads for premium/paid services).

When I am surfing the web, I am not seeing ads (at least that is what I think/experience). Using uBO companion I found another 140 domains on top of Kees1958 top 500 which appeared as third-party domains when surfing (when uBo companion administrates third-party calls it does not always mean that they are tracking you). I usually add scripts, subdomains, xmlhttprequest that is why uBo counts more rules.