Q&A Highest compatibility privacy extention for Chromium based browsers

Joined
Dec 2, 2016
Messages
239
#41
If DNSCrypt comes first (set as Preferred) and Norton ConnectSafe DNS later (set as Alternative) would Norton SafeConnect sees my requests as encrypted or non-encrypted? What if I reverse the settings? If the requests are encrypted then they don't matter, right?
No it does not work like that. You can only set one dns resolver as your primary dns server at a time.
 
Likes: HarborFront
Joined
Nov 17, 2016
Messages
758
OS
Windows 10
Antivirus
Microsoft
#42
Noscript with the setting allow https on https sites in the advanced tab is quite usable with ublock origin to counter the anti-adblocks.
 

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#43
The best setup (until now) in terms of blocking MOST ads and trackers, allowing MOST rich content (video, graphs), WITHOUT irritating "you are using an ad-blocker" PROMPT's or WALL's is

  1. AVAST Online Security with
    - deselect data sharing and blocking
    - some sites use Google Analytics (e.g. to use a coupon or see a video) to release content (need to allow Google analytics).

  2. Google's Analytics Opt-Out Add-on (so GA.js does not send info to Google)

  3. Adblock with
    - all filters disabled/removed
    - one (1) customized filter rule
    http://*^$script,subdocument,object-subrequest,xmlhttprequest,ping,third-party
When I am browsing normally I have Adblock paused (red hand-stop hold icon changes to green thumb-up icon). When I go into incognito mode I turn on third-party blocking by unpausing Adblock.

Important: AVAST is not allowed incognito mode. When you have two extensions both filtering web pages, you could run into extension crashes or page crashes.

I have Google's safe browsing enables (with about://flags # enable-permissions-blacklist) and use a DNS with some security (Open DNS blocks phising sites, Norton phising and malware). Reason for me to choose Open DNS is because their servers are in Amsterdam, while Norton DNS servers are in UK or Germany.
 
Last edited:
Joined
Nov 17, 2016
Messages
758
OS
Windows 10
Antivirus
Microsoft
#44
@Windows_Security Mozilla said that blocking Google-Analytics are the least likely to break sites although I remember they compared percentages and google-analytics is the most common tracker. There might be more flat breakage.
What are the bandwidth savings of Avast in comparison to other content blockers? I'm also curious how much bandwidth savings scriptblockers give in various blocking formats like block all vs block http only vs block third party only vs block third party http only and the various filterlists and filterlist combos. So far I've only seen gohrill's comparison tests of unique third party requests.
 
Last edited:

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#46
@Windows_Security Mozilla said that blocking Google-Analytics are the least likely to break sites although I remember they compared percentages and google-analytics is the most common tracker. There might be more flat breakage.
Well maybe I am just unlucky. To redeem a discount coupon for free airport parking using my frequent flyer bonus points I had to enable Google-analytics for both airline (to activate coupon) and the airport (to get discount). Also on one Dutch news site (nu.nl) video's won't play when Google-Analytics is enabled. Using the Google-analytics opt-out plus enabling Google-analytics on those sites seems to do the trick (in which I have to trust Google to disable analytics marker for privacy).

Regards Kees
 

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#47
Last edited:

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#48
What are the bandwidth savings of Avast in comparison to other content blockers? I'm also curious how much bandwidth savings scriptblockers give in various blocking formats like block all vs block http only vs block third party only vs block third party http only and the various filterlists and filterlist combos. So far I've only seen gohrill's comparison tests of unique third party requests.
On the websites I visit uBlock origing with al filter lists enabled, shows on average 20% LESS DOMAINS CONNECTED. The bandwith reduction of these additional 20% domains blocked is less than 5% (4.17% when ran a test). So IMO the fractional bandwith gain does not justify the hassle and website breakage. I

To put the effectiveness of all this user based malware list into perspective. When you enable all the uBlock0 malware filter list, they may total up to a maximum of 100.000 websites to blocked. Compare these community (people) based list with the 80 million websites blocked which are determined by the AUTOMATED malware algorithme of CISCO umbrella (OPEN DNS) or Norton DNS. These user based list are only a fraction of the malware blocked by using a DNS service. That is why I posted all those malware blocking filters are useless when using NortonDNS/OpenDNS/ComodoDNS and Chrome's safe browsing with for instance the AVAST extension.

On my Asus Transformer I use NortonDNS plus uBlock Origing with an ad and tracker list I derived from various sources. You can check the increasing-hassle & reducing-benefit yourself by doing a test with my filter list (with 5271 rules) versus all filters enabled uBlock0.
 

Attachments

Last edited:
Joined
Nov 17, 2016
Messages
758
OS
Windows 10
Antivirus
Microsoft
#49
Well maybe I am just unlucky. To redeem a discount coupon for free airport parking using my frequent flyer bonus points I had to enable Google-analytics for both airline (to activate coupon) and the airport (to get discount). Also on one Dutch news site (nu.nl) video's won't play when Google-Analytics is enabled. Using the Google-analytics opt-out plus enabling Google-analytics on those sites seems to do the trick (in which I have to trust Google to disable analytics marker for privacy).

Regards Kees
Maybe I'm just lucky. I rarely buy stuff online and watch videos from limited sites since most video playing sites suck. I can block Google analytics willy-nilly and everything's still normal.
On the websites I visit uBlock origing with al filter lists enabled, shows on average 20% LESS DOMAINS CONNECTED. The bandwith reduction of these additional 20% domains blocked is less than 5% (4.17% when ran a test). So IMO the fractional bandwith gain does not justify the hassle and website breakage. I

To put the effectiveness of all this user based malware list into perspective. When you enable all the uBlock0 malware filter list, they may total up to a maximum of 100.000 websites to blocked. Compare these community (people) based list with the 80 million websites blocked which are determined by the AUTOMATED malware algorithme of CISCO umbrella (OPEN DNS) or Norton DNS. These user based list are only a fraction of the malware blocked by using a DNS service. That is why I posted all those malware blocking filters are useless when using NortonDNS/OpenDNS/ComodoDNS and Chrome's safe browsing with for instance the AVAST extension.

On my Asus Transformer I use NortonDNS plus uBlock Origing with an ad and tracker list I derived from various sources. You can check the increasing-hassle & reducing-benefit yourself by doing a test with my filter list (with 5271 rules) versus all filters enabled uBlock0.
That's surprising. I found somewhere in the past about 15-20% saving with MVPS Host and 50% scriptblocking including first party. I haven't found practical bandwidth savings though like reloading or configuring script-blocking to be more usable like https only or unblock first party or both.
Why Avast in particular though, Ghostery, Disconnect, Adguard DNS+Peter Lowe's in Adguard or Easylist without element hiding+Peter Lowe's/HpHosts in uBlock/uMatrix seem to do the same thing although in here Ghostery/Avast/Englishless Adguard/Easylistless uBlock doesn't block youtube ads specific to this region.
 

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#50
Maybe I'm just lucky. I rarely buy stuff online and watch videos from limited sites since most video playing sites suck. I can block Google analytics willy-nilly and everything's still normal.

That's surprising. I found somewhere in the past about 15-20% saving with MVPS Host and 50% scriptblocking including first party. I haven't found practical bandwidth savings though like reloading or configuring script-blocking to be more usable like https only or unblock first party or both.
Why Avast in particular though, Ghostery, Disconnect, Adguard DNS+Peter Lowe's in Adguard or Easylist without element hiding+Peter Lowe's/HpHosts in uBlock/uMatrix seem to do the same thing although in here Ghostery/Avast/Englishless Adguard/Easylistless uBlock doesn't block youtube ads specific to this region.
Ghostery does a bit better than disconnect in my test (but my guess is that these test are influenced by the websites you use to test with). Adguard and uBlock are also great, but although in numbers of connections savings might be relevant (20%), in real bandwith it hardly has impact (less than 5%), that is why I opt (with my surfing habits) opt for the added security of the AV with the most users (ergo seeing the largest share of websites). Avast is typically used a lot in the US, Europe and Brazil, so for people living in those locations the setup outlined is worth a try.
 
Joined
Nov 17, 2016
Messages
758
OS
Windows 10
Antivirus
Microsoft
#51
Ghostery does a bit better than disconnect in my test (but my guess is that these test are influenced by the websites you use to test with). Adguard and uBlock are also great, but although in numbers of connections savings might be relevant (20%), in real bandwith it hardly has impact (less than 5%), that is why I opt (with my surfing habits) opt for the added security of the AV with the most users (ergo seeing the largest share of websites). Avast is typically used a lot in the US, Europe and Brazil, so for people living in those locations the setup outlined is worth a try.
But people use Chrome, Firefox a lot. Filters from those would probably be good enough that any addition would be marginal.
 

brod56

Level 12
Joined
Feb 13, 2017
Messages
561
OS
Windows 10
Antivirus
Default-Deny
#54
I just use tweaked uBlock Origin with several added lists for malware protection and tracker blocking, plus HTTPS Everywhere to force secure links. After trying Ghostery, myWot, Avast, Avira, TrafficLight, etc I realized this is by far the most effective combo at least for me.
 

tonibalas

Level 39
Trusted
Joined
Sep 26, 2014
Messages
2,860
#56
On my tweaked Yandex i have Adguard and WebBoost.
Privacy Badger,HTTPS EveryWhere, uMatrix are nice extensions but they all slow down my browsing.
Ghostery seems to do a good job but i haven't tried it for a while.
Scriptsafe seems to be good but every time i tried an extension for handling scripts my browsing seems to be slow.
Result: if you want fast browsing while having privacy extensions installed just get a 4 core CPU:D
An SSD on an old laptop does help but combined with a 4 core is much better;)
 
Joined
Nov 17, 2016
Messages
758
OS
Windows 10
Antivirus
Microsoft
#57
On my tweaked Yandex i have Adguard and WebBoost.
Privacy Badger,HTTPS EveryWhere, uMatrix are nice extensions but they all slow down my browsing.
Ghostery seems to do a good job but i haven't tried it for a while.
Scriptsafe seems to be good but every time i tried an extension for handling scripts my browsing seems to be slow.
Result: if you want fast browsing while having privacy extensions installed just get a 4 core CPU:D
An SSD on an old laptop does help but combined with a 4 core is much better;)
Do you mean Scriptsafe and uMatrix is slow from micromanagement or just slow in general?
 

Windows_Security

Level 16
Content Creator
Trusted
Joined
Mar 13, 2016
Messages
764
OS
Windows 7
#59
@Windows_Security Where did you get those filters?
AdBlocker Lite/Karma Blocker (Firefox only)/No-script Security Suite Lite does seem like something to consider.
Visit top 500 websites of Alexa, Inspect page, collect third party call's. Import list in a spreadsheet. For each row in column A do a lookup whether this third party exists in Peter Low's, Adguard Spyware, Ghoster and Electronic frontiere list when exists, add to row in column B up a row, when not drop and repeat. Filter out blanks of column B, copy remaining rows to notepad and copy to new tab. Search right for domains com, net, inf, tv, nl, org, net, nl (I am dutch) copy when match, drop when other high level domain. Copy this to my Filter :)
 

Umbra

Level 61
Content Creator
Trusted
Joined
May 16, 2011
Messages
17,786
OS
Windows 10
Antivirus
Default-Deny
#60
Last edited:
Likes: XhenEd