Q&A Highest compatibility privacy extention for Chromium based browsers

Discussion in 'Browsers and Extensions' started by Windows_Security, Jan 22, 2017.

  1. techienerd1

    techienerd1 Level 7
    Trusted

    Mar 10, 2013
    319
    488
    IT Tech Cyber IT
    Windows 10
    Vipre
  2. Zero Knowledge

    Zero Knowledge Level 5

    Dec 2, 2016
    239
    692
    Dark Cloud Universe
    No it does not work like that. You can only set one dns resolver as your primary dns server at a time.
     
    HarborFront likes this.
  3. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    Noscript with the setting allow https on https sites in the advanced tab is quite usable with ublock origin to counter the anti-adblocks.
     
  4. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    #44 Windows_Security, Mar 15, 2017
    Last edited: Mar 15, 2017
    The best setup (until now) in terms of blocking MOST ads and trackers, allowing MOST rich content (video, graphs), WITHOUT irritating "you are using an ad-blocker" PROMPT's or WALL's is

    1. AVAST Online Security with
      - deselect data sharing and blocking
      - some sites use Google Analytics (e.g. to use a coupon or see a video) to release content (need to allow Google analytics).

    2. Google's Analytics Opt-Out Add-on (so GA.js does not send info to Google)

    3. Adblock with
      - all filters disabled/removed
      - one (1) customized filter rule
      http://*^$script,subdocument,object-subrequest,xmlhttprequest,ping,third-party
    When I am browsing normally I have Adblock paused (red hand-stop hold icon changes to green thumb-up icon). When I go into incognito mode I turn on third-party blocking by unpausing Adblock.

    Important: AVAST is not allowed incognito mode. When you have two extensions both filtering web pages, you could run into extension crashes or page crashes.

    I have Google's safe browsing enables (with about://flags # enable-permissions-blacklist) and use a DNS with some security (Open DNS blocks phising sites, Norton phising and malware). Reason for me to choose Open DNS is because their servers are in Amsterdam, while Norton DNS servers are in UK or Germany.
     
  5. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    #45 TerrakionSmash, Mar 15, 2017
    Last edited: Mar 16, 2017
    @Windows_Security Mozilla said that blocking Google-Analytics are the least likely to break sites although I remember they compared percentages and google-analytics is the most common tracker. There might be more flat breakage.
    What are the bandwidth savings of Avast in comparison to other content blockers? I'm also curious how much bandwidth savings scriptblockers give in various blocking formats like block all vs block http only vs block third party only vs block third party http only and the various filterlists and filterlist combos. So far I've only seen gohrill's comparison tests of unique third party requests.
     
  6. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,162
    29,626
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
  7. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    Well maybe I am just unlucky. To redeem a discount coupon for free airport parking using my frequent flyer bonus points I had to enable Google-analytics for both airline (to activate coupon) and the airport (to get discount). Also on one Dutch news site (nu.nl) video's won't play when Google-Analytics is enabled. Using the Google-analytics opt-out plus enabling Google-analytics on those sites seems to do the trick (in which I have to trust Google to disable analytics marker for privacy).

    Regards Kees
     
  8. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    #48 Windows_Security, Mar 18, 2017
    Last edited: Mar 18, 2017
    Thanks @Umbra, do you have info on which characters it traps? Obviously those deceiving name patters are derived from their phising site data. Your post triggers my curiosity :) after some more googling I found this Netcraft post
    Hackers still exploiting eBay’s stored XSS vulnerabilities in 2017 | Netcraft
     
  9. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    #49 Windows_Security, Mar 18, 2017
    Last edited: Mar 18, 2017
    On the websites I visit uBlock origing with al filter lists enabled, shows on average 20% LESS DOMAINS CONNECTED. The bandwith reduction of these additional 20% domains blocked is less than 5% (4.17% when ran a test). So IMO the fractional bandwith gain does not justify the hassle and website breakage. I

    To put the effectiveness of all this user based malware list into perspective. When you enable all the uBlock0 malware filter list, they may total up to a maximum of 100.000 websites to blocked. Compare these community (people) based list with the 80 million websites blocked which are determined by the AUTOMATED malware algorithme of CISCO umbrella (OPEN DNS) or Norton DNS. These user based list are only a fraction of the malware blocked by using a DNS service. That is why I posted all those malware blocking filters are useless when using NortonDNS/OpenDNS/ComodoDNS and Chrome's safe browsing with for instance the AVAST extension.

    On my Asus Transformer I use NortonDNS plus uBlock Origing with an ad and tracker list I derived from various sources. You can check the increasing-hassle & reducing-benefit yourself by doing a test with my filter list (with 5271 rules) versus all filters enabled uBlock0.
     

    Attached Files:

  10. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    Maybe I'm just lucky. I rarely buy stuff online and watch videos from limited sites since most video playing sites suck. I can block Google analytics willy-nilly and everything's still normal.
    That's surprising. I found somewhere in the past about 15-20% saving with MVPS Host and 50% scriptblocking including first party. I haven't found practical bandwidth savings though like reloading or configuring script-blocking to be more usable like https only or unblock first party or both.
    Why Avast in particular though, Ghostery, Disconnect, Adguard DNS+Peter Lowe's in Adguard or Easylist without element hiding+Peter Lowe's/HpHosts in uBlock/uMatrix seem to do the same thing although in here Ghostery/Avast/Englishless Adguard/Easylistless uBlock doesn't block youtube ads specific to this region.
     
  11. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    Ghostery does a bit better than disconnect in my test (but my guess is that these test are influenced by the websites you use to test with). Adguard and uBlock are also great, but although in numbers of connections savings might be relevant (20%), in real bandwith it hardly has impact (less than 5%), that is why I opt (with my surfing habits) opt for the added security of the AV with the most users (ergo seeing the largest share of websites). Avast is typically used a lot in the US, Europe and Brazil, so for people living in those locations the setup outlined is worth a try.
     
  12. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    But people use Chrome, Firefox a lot. Filters from those would probably be good enough that any addition would be marginal.
     
  13. BugCode

    BugCode Level 10

    Jan 9, 2017
    460
    4,529
    FireFighter
    Oeno Island
    I only have @ (Tweaked Yandex) HTTPS everywhere + Scriptsafe & system wide Adquard ++ as always Air;)
     
    frogboy and tonibalas like this.
  14. 212eta

    212eta Level 7

    May 11, 2011
    304
    736
    Windows Desktop
    Windows 10
    Isolation
    Your uBlock Origin Filters List is very much appreciated, Kees! :)
    I'm just giving it a try...;)
     
  15. brod56

    brod56 Level 11

    Feb 13, 2017
    543
    1,517
    Studant
    Portugal
    Windows 10
    Default-Deny
    I just use tweaked uBlock Origin with several added lists for malware protection and tracker blocking, plus HTTPS Everywhere to force secure links. After trying Ghostery, myWot, Avast, Avira, TrafficLight, etc I realized this is by far the most effective combo at least for me.
     
    tonibalas and BugCode like this.
  16. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    @Windows_Security Where did you get those filters?
    AdBlocker Lite/Karma Blocker (Firefox only)/No-script Security Suite Lite does seem like something to consider.
     
  17. tonibalas

    tonibalas Level 38
    Trusted

    Sep 26, 2014
    2,794
    19,959
    On my tweaked Yandex i have Adguard and WebBoost.
    Privacy Badger,HTTPS EveryWhere, uMatrix are nice extensions but they all slow down my browsing.
    Ghostery seems to do a good job but i haven't tried it for a while.
    Scriptsafe seems to be good but every time i tried an extension for handling scripts my browsing seems to be slow.
    Result: if you want fast browsing while having privacy extensions installed just get a 4 core CPU:D
    An SSD on an old laptop does help but combined with a 4 core is much better;)
     
  18. TerrakionSmash

    TerrakionSmash Level 16

    Nov 17, 2016
    750
    2,125
    Somewhere underwater or over water. I am water!
    Windows 10
    Microsoft
    Do you mean Scriptsafe and uMatrix is slow from micromanagement or just slow in general?
     
    Sunshine-boy and tonibalas like this.
  19. tonibalas

    tonibalas Level 38
    Trusted

    Sep 26, 2014
    2,794
    19,959
    Scriptsafe and NoSript Lite causes slow browsing.
    About uMatrix i can't recall because i haven't used it for a long time.
     
  20. Windows_Security

    Windows_Security Level 13
    Content Creator Trusted

    Mar 13, 2016
    614
    2,877
    Holland
    Windows 7
    Default-Deny
    Visit top 500 websites of Alexa, Inspect page, collect third party call's. Import list in a spreadsheet. For each row in column A do a lookup whether this third party exists in Peter Low's, Adguard Spyware, Ghoster and Electronic frontiere list when exists, add to row in column B up a row, when not drop and repeat. Filter out blanks of column B, copy remaining rows to notepad and copy to new tab. Search right for domains com, net, inf, tv, nl, org, net, nl (I am dutch) copy when match, drop when other high level domain. Copy this to my Filter :)
     
Loading...
Similar Threads Forum Date
Help Me Decide Browsers War? Which provides the highest level of protection ? Compare Apps Archive Feb 8, 2015
Auto arrange poll options by highest votes Community Feedback Dec 3, 2014
FortiClient compatibility with the Microsoft Security update of January 3, 2018 - Meltdown Other Security for Windows Jan 4, 2018