New Update 3P-Matrix-lite new version is available in Chrome Webstore with improved functionality

Thread details
would not make the UI easier,
I think it would be more user friendly. When the suggested big button is in OFF position the colour of the extension-icon should change to red. So everybody could see at a glance if the protection is working or not. The menu would be simpler: three instead of four levels.
 
Pushed version 5.0.4.

Changes - better heuristics (thanks @Sampei.Nihira for reporting) and text under slider, renamed medium mode to smart mode
1794232735574.png
 
Hi I noticed that NoScript put a lot of attention to shared workers and worker fetches lately (just look at release history)

Because 3P matrix has already a lot of protections, the main entry would be via malicious webassembly. I opted not to add a wrapper like NoScript did, but plainly block it at network level for webassembly coming from dubious domains or domains outside the safer regions. This should offer (in real world circumstances) near similar protection level without the user hassle (and for me development hassle adding exceptions). AI guesses this blocks all known threats, only covers about 80% of theoretical entries for level 3. Note that level 4 and 5 already had the (100% coverage) protection (hard block 3P-webassembly).

Version v.5.0.5 has a new protection which is enabled by default.
The new protection is number 28 in the Protections lis (Block 3P WebAssembly from dubious or non-safer-region hosts) in the level-3 group “Outside safer regions”. It sits directly after 27 “Block exfiltrating (phishing) data to web services” and directly before 29 “Block risky downloads (programs, scripts, archives)”.
 
Last edited:
I used this code to find out (I'm curious, you know...;)) which Static and Dynamic rules 3P-Matrix uses:

Code:
async function getDNRUsage() {
  const dnr = chrome.declarativeNetRequest;

  // Regole dinamiche
  const dynamicRules = await dnr.getDynamicRules();

  // Ruleset statici abilitati
  const enabledIds = await dnr.getEnabledRulesets();

  const manifest = chrome.runtime.getManifest();
  const resources =
    manifest.declarative_net_request?.rule_resources ?? [];

  let staticCount = 0;
  const details = [];

  for (const rs of resources) {
    if (!enabledIds.includes(rs.id)) continue;

    const response = await fetch(chrome.runtime.getURL(rs.path));
    const rules = await response.json();

    const disabled = await dnr.getDisabledRuleIds({
      rulesetId: rs.id
    });

    const count = rules.length - disabled.length;

    staticCount += count;

    details.push({
      ruleset: rs.id,
      total: rules.length,
      disabled: disabled.length,
      active: count
    });
  }

  const result = {
    static: staticCount,
    dynamic: dynamicRules.length,
    total: staticCount + dynamicRules.length,
    rulesets: details
  };

  console.table(details);
  console.table({
    static: result.static,
    dynamic: result.dynamic,
    total: result.total
  });

  return result;
}

getDNRUsage();

Just click on the Service Worker from the extensions page, authorize pasting by entering:

allow pasting

Copy/paste the code,then press Enter.

Afterward, to be on the safe side, you should reset the setting to its default in the browser's developer tools, which disables copy/paste.

Result:

Static = 0
Dynamic = 63

I was wondering,since AG displays the rules that have been used,if it would be useful to include this feature in your extensions?:unsure:
 
3PM uses dynamic so they can be changed on the spot
uBD uses dynamic to overrule the extra filters of worry free (tracking filters) when the user enables worry free this dynamic allow rule is removed (and tracking filters with lower priority apply.

You can see in the dynamic DNR filtering monitor which rules apply in uBD
 
It's easy to enable the download block.
First, enable the button indicated by the blue arrow, and then download the file indicated by the green arrow as usual:
So, I need to opt "Download anyway" before "Save"....?
I get "Save" before I see "Proceed | Download anyway"
1399.jpg | 1400.jpg
 
Last edited:
The 3P-Matrix pop-up is in a separate window.
I do see 3P Matrix pop-up --- after I opt "Save"
I've enabled that setting and haven't had any problems.;)
Okay, it's just me. Thanks
fwiw ~ my observed flow is:
Download > Save > Proceed anyway > cycle Edge > Download blocked > Download anyway > Proceed anyway > cycle Edge > Download anyway > Proceed anyway > cycle Edge > Download anyway > Proceed anyway ... .etc.,
I need to Clear download history -- to break my observed flow.
 
Last edited:
I do see 3P Matrix pop-up --- after I opt "Save"

Okay, it's just me. Thanks
fwiw ~ my observed flow is:
Download > Save > Proceed anyway > cycle Edge > Download blocked > Download anyway > Proceed anyway > cycle Edge > Download anyway > Proceed anyway > cycle Edge > Download anyway > Proceed anyway ... .etc.,
I need to Clear download history -- to break my observed flow.
Only when you want to share it in a PM copy paste the json of your settings and the website you wanted to download something from and I will have a look.

last time you noticed CNN in-video ads not being blocked, it was not you, but because uBD dropping unsafe scriptlets (but a few scriptlets could be made safe, so I appreciated you reporting it) (y)
 

Join the discussion

Write your reply below. You'll create a free account or log in before it's posted.

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top