ok asking this because on github "Level 3 — Easy medium mode adds script blocking on top of level 2. Has the protections of level 2 plus it blocks,......."
New Update 3P-Matrix-lite new version is available in Chrome Webstore with improved functionality
-
Thread starter
LinuxFan58
- Start date
- 97 Replies
- 8,147 Views
Thread details
@LinuxFan58 - Have you finished optimizing 3P-Matrix? 
Sorry @oldschool YES
I noticed I could not delete the defailt generic TLD's while showing how to remove overlap between uBS and 3PM
So I added a the option to delete the generic TLD's on level 3 whitelist and add a restore button (also added restore ddefault button to level 2).
pushed 3.8.7 to CWS for publication
I noticed I could not delete the defailt generic TLD's while showing how to remove overlap between uBS and 3PM
So I added a the option to delete the generic TLD's on level 3 whitelist and add a restore button (also added restore ddefault button to level 2).
pushed 3.8.7 to CWS for publication
Last edited:
Question to members using this extension
Anyone has a need/use case for adding a 6th level (hard mode block all thrid-party)?
If so the matrix will be slightly adapted. I would drop the two columns at scripts and frames and use one clickable column for each research,
- no color = the level mode applies (or when applicable the internal whitelist applies)
- green = allowed
- red = blocked
Simpler user interface (cloudflare allowed = level mode allows it so no color)
Cloudflare blocked (clicked once)
I like the simpler interface (less is more), so I am pushing this to CWS
Anyone has a need/use case for adding a 6th level (hard mode block all thrid-party)?
If so the matrix will be slightly adapted. I would drop the two columns at scripts and frames and use one clickable column for each research,
- no color = the level mode applies (or when applicable the internal whitelist applies)
- green = allowed
- red = blocked
Simpler user interface (cloudflare allowed = level mode allows it so no color)
Cloudflare blocked (clicked once)
I like the simpler interface (less is more), so I am pushing this to CWS
Last edited:
Not me, for the most part I do not go higher than 4.
I would never use it because it gives too much hassle.
I would agree when allowed always would be green color.
I don't like this:
@Jan Willy V4.0 brings back the color
New version coded, currently testing it, not pushed to CWS yet.
Big changes:
1. Security protections of uBlock Dynamic moved to 3P Matrix
2. URL heuristics of Download Sentinel (which are applied on download links) to warn for phishing links, also added to page URL in 3P Matrix
3. Matrix now has option to block 3P-code and 3P-all
4. Modes changed a little
5. Name change from 3P Matrix lite to 3P Matrix - content firewall as a result
Level 1 = allow all (nearly the same)
The copy-paste import of domains to lock websites at level 1 is moved to the options page (and all settings can be saved and restored)
Level 2 = mild protection (also the default startup level, because it should not break websites)
Level 3 = medium protection only changed a little
Level 4 = high protection (nearly the same)
Now TLD exception applies to both 3P scripts and 3P-frames
Level 5 = strict protection (nearly the same)
Now the internal whitelist is NOT applicable
Big changes:
1. Security protections of uBlock Dynamic moved to 3P Matrix
2. URL heuristics of Download Sentinel (which are applied on download links) to warn for phishing links, also added to page URL in 3P Matrix
3. Matrix now has option to block 3P-code and 3P-all
4. Modes changed a little
5. Name change from 3P Matrix lite to 3P Matrix - content firewall as a result
Level 1 = allow all (nearly the same)
The copy-paste import of domains to lock websites at level 1 is moved to the options page (and all settings can be saved and restored)
Level 2 = mild protection (also the default startup level, because it should not break websites)
Level 3 = medium protection only changed a little
Level 4 = high protection (nearly the same)
Now TLD exception applies to both 3P scripts and 3P-frames
Level 5 = strict protection (nearly the same)
Now the internal whitelist is NOT applicable
Last edited:
Version 4.2.2 pushed to CWS
Change from previous post: I also made the Hagezi much abused TLD blacklist an extra protection (so you can deselect it when you use Hagezi DNS), that is why there are now 16 protections (in stead of the 15 on previous post).
Besided the 16 extra protections (moved from uBlock Dynamic), the size of Matrix cells is increased a little and the number of request is shown
3P Matrix has a new options panel
- copy paste your white list (same format as uBlock Dynamic)
- save & restore your settings
- choose 2 out of 3 DNS services which check the website your visiting when the ¨brand name impersonation" heuristics score is higher than 30
Note on extra DNS check
I offered three DNS, in case you already use one of them, you can choose the other 2 for better coverage.
These extra checks (like domain age and malware check) are only performed when heuristics finds a brand look-a-like.
I thought that 3 network calls (costs only 60 milli seconds max) is worth the extra check when a websites tries to impersonate a top 1 mio website.
When you use NextDNS you must allow those DNS when you have bypass block enabled.
Change from previous post: I also made the Hagezi much abused TLD blacklist an extra protection (so you can deselect it when you use Hagezi DNS), that is why there are now 16 protections (in stead of the 15 on previous post).
Besided the 16 extra protections (moved from uBlock Dynamic), the size of Matrix cells is increased a little and the number of request is shown
3P Matrix has a new options panel
- copy paste your white list (same format as uBlock Dynamic)
- save & restore your settings
- choose 2 out of 3 DNS services which check the website your visiting when the ¨brand name impersonation" heuristics score is higher than 30
Note on extra DNS check
I offered three DNS, in case you already use one of them, you can choose the other 2 for better coverage.
These extra checks (like domain age and malware check) are only performed when heuristics finds a brand look-a-like.
I thought that 3 network calls (costs only 60 milli seconds max) is worth the extra check when a websites tries to impersonate a top 1 mio website.
When you use NextDNS you must allow those DNS when you have bypass block enabled.
Last edited:
3P Matrix applies globally, which probably causes issues.
In uBlock Dynamic I could investigate whether 1x1 thru 3x3 tracking pixels can be filtered out in an easy to apply way.
Perhaps I didn't explain well what I meant. I didn't ask for an option to block 3p images etc. I did a suggestion to clean up the matrix. Because what's the point to show elements that can't be blocked?
Informational. I want to know where the requests came from. But you have a point no use sticking to old uMatrix layout. next version I will probably add websockets & webtransports as a columns to.
Last edited:
At second look protection nr 10, it should be at nr 11 (it is a warn)
So you suggestion is
11: Warn for suspicious websites, see options (and make options clickable link)
I am out of credits until tomorrow, but also was working on another suggestion of my (UX specialist) acquintance.
3P Matrix is for power users, although it is easy to use, you have to understand what is added (the added value of protections and limiting 3P exposure) to appreciate it.
His suggestion was to add the download protection of Download Sentinel to 3P-Matrix to offer more granularity per level.
1. Level 1 allow all
2. Level 2 only warn for unsafe downloads (no matter where they come from)
3. Level 3 warn for unsafe within safer-regions and block downloads outside safe regions
4. Level 4 block downloads for 1P and 3P
5. Level 5 block downloads for 1P and 3P
Post your thoughts
12: Warn for suspicious downloads, see options
Last edited:
Indeed.
Personally would warning for unsafe downloads (no matter where they come from) be enough for all levels. With the already existing strict protection rules of levels 3,4 and 5 it's unlikely you visit a suspicious site from which you wouldn't want to download or could expect a download behind your back. And in the incidental cases you visit such a site also a warning will do, so no need for immediately blocking.
Okay, thanks for the feedback. I could split it in two settings:
- a warn for all levels
- a block for outside safer-regions level 3 and level 4/5
Enable the warn by default and set the block disabled by default.
Last edited:
Even Solomon wouldn't have made a wiser decision.
When you surf to github.io to download ungoogled chromium, the look-a-like (phishing protection) is triggered.
I have to check the RDAP (domain age verifiction) whether the 404 is an error (looking up the subdomain) or a result of ME forgetting to add the access to that webservice in manifest of 3PM.
The heuristics are correct (github.io is used to distribute malware, and ungoogled contains a well known brand Google).
I will change the wording a bit:
- title change ¨This site looks suspicious" to "This site needs your attention".
- signal change "known suspicious domain" to "domain has been misused in the past¨
- button text change "Go back to safety" to Go back"
I have to check the RDAP (domain age verifiction) whether the 404 is an error (looking up the subdomain) or a result of ME forgetting to add the access to that webservice in manifest of 3PM.
The heuristics are correct (github.io is used to distribute malware, and ungoogled contains a well known brand Google).
I will change the wording a bit:
- title change ¨This site looks suspicious" to "This site needs your attention".
- signal change "known suspicious domain" to "domain has been misused in the past¨
- button text change "Go back to safety" to Go back"
Last edited:
Recently browsing
Members who viewed this thread in the last 5 minutes