Hot Take uBlock Stripped - Dynamic Filtering is available on the webstore

Web Extensions
390 Replies 33,832 Views
Thread details
Extension store page
https://chromewebstore.google.com/detail/ublock-stripped-%E2%80%94-dynamic/femdnbckdgobaelpmbbajpidneljkjaa?pli=1
7Oz-64 said:
@Sampei.Nihira
Not at home atm but you can test at (without/with wife at home;):)) :
hxxps://fuq.com
Click to expand...

That website has “strict” age verification and is usually less complicated than websites with “soft” age verification + a cookie consent prompt.

I was referring to this type of website:

Saltaire Brewery

P.S.

Without uBo:

1.png


With uBo + the rule I wrote to remove the age verification.
The Consent Cookie has been removed from the filter list:

3.png


If anyone wants to test it, the rule for bypassing the age verification is:

Code: 
saltairebrewery.com##body > div:has-text(You must be at least 18 to visit this site)

P.S.1

The example I gave is intentionally very simple for the extension because it doesn't require any js rules.(y);)
 
Last edited:

Sampei.Nihira said:
That website has “strict” age verification and is usually less complicated than websites with “soft” age verification + a cookie consent prompt.

I was referring to this type of website:

Saltaire Brewery

P.S.

Without uBo:

View attachment 299544


With uBo + the rule I wrote to remove the age verification.
The Consent Cookie has been removed from the filter list:

View attachment 299543


If anyone wants to test it, the rule for bypassing the age verification is:

Code: 
saltairebrewery.com##body > div:has-text(You must be at least 18 to visit this site)

P.S.1

The example I gave is intentionally very simple for the extension because it doesn't require any js rules.(y);)
Click to expand...

I automated the accept and confirm, so that works as expected, but I did not get anything that asked me to prove my age.
 
Guys the whole idea of cookie consent clicker is that you can automate the age verification (choose automate select yes button and create rule) and following cookie prompt (same sequence) in v8.3

You don't need to muddle with rules and you don't want to use scriptlets requiring trust (like the trusted-click-element or trusted-cookie). Google made it possible to allow user scripts requiring trust in Mv3, but they initially cut it out for a reason (SECURITY IN CAPITALS)

The nice thing about automating (simulating user clicks) with cookie clicker is that you don't need scriptlets requiring trust (like in uBO Mv2 or AG Mv3). Similar security benefit has the never consent of cookie clicker when it recognises the Cookie Management Platform), it does not use an EVAL bridge like Ghostery to escape restricted world and get access to main world.

I was really surprised that it was possible to realise the automate without trust and the never consent in restricted world. Honoring the security bounderies comes with limitations but my guess is that 8.3 tackles 80% of real world situatiins.
 
Last edited:
Some test :
Ublock-stripped (security tab enabled + personal rules) :
UBO-S.png

Ublock-stripped (security tab enabled + personal rules)
And add fake filter : eviltracker.net and trackersimulator.org :
UBO-SAF.png

Ubol (personal rules and malware/phishing filters disabled + apivoid browser protection default and no previous fake filters added) :
ubol-apivoidbp.png
I think it will be good to add these 2 fake filters by default in ublock-stripped for good reputation, and for the fingerprinting protection as you see M. @LinuxFan58 i get better results with ubol + apivoid even if the security tab of ublock-S are alls ticked (same personal filters in ubol and ublock-S)

Personal filters :
||doubleclick.net^
||googlesyndication.com^
||googleadservices.com^
||ads.microsoft.com^
||bat.bing.com^
||adfstat.yandex.ru^
||advertising.yandex.ru^
||metrika.yandex.ru^
||ads.tiktok.com^
||ads-api.tiktok.com^
||analytics.tiktok.com^
||mon.tiktokv.com^
||ads.x.com^
||ads-api.x.com^
||analytics.x.com^
||ads.snapchat.com^
||ads.roku.com^
||unityads.unity3d.com^
||ads.vizio.com^
||ads.vk.com^
||adtech.yahooinc.com^
||advertising.yahoo.com^
||advertising-api-eu.amazon.com^
||mads-eu.amazon.com^
||google-analytics.com^
||analytics.google.com^
||connect.facebook.net^
||an.facebook.com^
||tr.facebook.com^
||graph.instagram.com^
||pixel.redditmedia.com^
||d.reddit.com^
||pixel.quora.com^
||qevents.quora.com^
||px.ads.linkedin.com^
||snap.licdn.com^
||widgets.pinterest.com^
||segment.io^
||cdn.segment.com^
||amplitude.com^
||mixpanel.com^
||posthog.com^
||snowplowanalytics.com^
||quantcast.com^
||rudderstack.com^
||fingerprintjs.com^
||braze.com^
||onesignal.com^
||klaviyo.com^
||impact.com^
||fyber.com^
||ironsource.mobi^
||liftoff.io^
||pangleglobal.com^
||telemetry.microsoft.com^
||vortex-win.data.microsoft.com^
||watson.telemetry.microsoft.com^
||metrics.apple.com^
||advertising.apple.com^
||api-adservices.apple.com^
||iadsdk.apple.com^
||tr.iadsdk.apple.com^
||data.mistat.xiaomi.com^
||data.mistat.rus.xiaomi.com^
||data.mistat.india.xiaomi.com^
||tracking.rus.miui.com^
||ads.huawei.com^
||grs.hicloud.com^
||adsfs.oppomobile.com^
||bdapi-ads.realmemobile.com^
||bdapi-in-ads.realmemobile.com^
||cdn.dynamicyield.com^
||st.dynamicyield.com^
||vid.connatix.com^
||smartclip.com^
||widget.intercom.io^
||js.driftt.com^
||s.youtube.com^
||mineralt.io^
||log.byteoversea.com^
||log.fc.yahoo.com^
||gemini.yahoo.com^
||offerwall.yandex.net^

*$removeparam=/^utm_/
*$removeparam=gclid
*$removeparam=dclid
*$removeparam=fbclid
*$removeparam=msclkid
*$removeparam=mc_eid
*$removeparam=igshid
*$removeparam=spm
*$removeparam=yclid
*$removeparam=_hsenc
*$removeparam=_hsmi

||analyticsengine.s3.amazonaws.com^
||udcm.yahoo.com^
||appmetrica.yandex.ru^
||metrics.adobe.com^
||browser.events.data.msn.com^
||click.mailchimp.com^
||clientstream.launchdarkly.com^
||books-analytics-events.apple.com^
||weather-analytics-events.apple.com^
||notes-analytics-events.apple.com^
||ck.ads.oppomobile.com^
||data.ads.oppomobile.com^

||bingads.microsoft.com^
||inmobi.com^
||bnc.lt^
||graph.facebook.com^
||i.instagram.com^
||ads-api.twitter.com^
||analytics.twitter.com^
||ads-sg.tiktok.com^
||business-api.tiktok.com^
||iot-eu-logser.realme.com^
||iot-logser.realme.com^
||adlog.vivo.com^
||a.lenovo.com^
||ngfts.lge.com^
||tvinteractive.tv^
 
We will go the festival at 14.00 because it is raining. So I had some time to spare and did some investigation

Suggestions about filterlist to add and a recent info I got from the Online Marketing world made me change my mind a littlr (although a sales director by profession, I also was the oldest certified digital marketing professional in the NL - and as a Dutch saying states "it is easier to catch thieves with thieves).

I researched a bit and currently there is no maximum in tbe DNR list of requested domains. This means that a filtermist of Peter Low can be translated into 1 DNR rule. Chrome processes thes DNR rules insanely fast, so adding the Easylist adserver sublist with over 45.000 host and ABP third-party rules translates to only 2 DNR rules.

So I will add a list of optional servers in next version 9.4 with the number old fashioned host/ABP rules and new DNR rules. I already found some dditional which combined only result in a dozen extra DNR ruled
 
@7Oz-64

It’s interesting to note that the test in which you achieved only partial protection would seem to be due to a lack of privacy rules.
But that’s not the case.
The test highlights a lack of rules against ads.
If you strengthen these rules, you’ll find that both tests against the tracker categories are passed.
 
Last edited:
LinuxFan58 said:
We will go the festival at 14.00 because it is raining. So I had some time to spare and did some investigation

Suggestions about filterlist to add and a recent info I got from the Online Marketing world made me change my mind a littlr (although a sales director by profession, I also was the oldest certified digital marketing professional in the NL - and as a Dutch saying states "it is easier to catch thieves with thieves).

I researched a bit and currently there is no maximum in tbe DNR list of requested domains. This means that a filtermist of Peter Low can be translated into 1 DNR rule. Chrome processes thes DNR rules insanely fast, so adding the Easylist adserver sublist with over 45.000 host and ABP third-party rules translates to only 2 DNR rules.

So I will add a list of optional servers in next version 9.4 with the number old fashioned host/ABP rules and new DNR rules. I already found some dditional which combined only result in a dozen extra DNR ruled
Click to expand...

There’s no doubt that uBlock Stripped - Dynamic Filtering is the most powerful MV3 ad-blocking extension of them all.

Congratulations on surpassing 200 users.(y)(y)(y);)

As you can imagine, an old-timer like me won’t adapt easily. If, in the future, I were to switch from uBlock Origin in Chromium-based browsers to a Consent-O-Matic-style cookie consent system, I’d prefer, in that case, filtering based on lists.
But I understand the philosophy behind your choice.

I have a question.

I’d be interested in seeing how a page from the Chrome Web Store behaves with Brave + uBlock Stripped – Dynamic Filtering.
Because with uBo it’s a disaster, and in fact, I only use the Brave Ad-Shields method in this specific case.
 
I use Brave on Linux with my extensions with no problems.

Privacy inspector, Dynamic DNR filtering and Cookie consent clicker automatic are intended to use for websites you visit often. They are IMO easy to use for advanced users.

Cookie consent never consent is for casual surfing.

These features combined with the Cosmetic element picker should remove all annoyances.

Version 8.4 will have additional filters, which will reduce the need for using the above mentioned advanced user features.

I like to be challenged to find solutions which don't require trust or tricks to escape restricted world.

I challenge everyone to do some researching on what (besides the user) the weakest link is in terms of security in Chromium based browsers: I bet the answer is extensions :-)
 
@Sampei.Nihira @oldschool
GPC remind me "DO NOT TRACK" option, i know these are differents but both sent a signal to the website, i prefer not using gpc and do not track and have a good security/privacy browser (i love my searxng + nginx + ca-https searchengine + policy and more) And are we sure website respect sec-gpc: "1" ?, it's a very little bit similar to a firewall policy set to block vs set to drop.
This is just my opinion!!!!
Oups let's the thread to the thread:)
 
7Oz-64 said:
GPC remind me "DO NOT TRACK" option, i know these are differents but both sent a signal to the website, i prefer not using gpc and do not track
Click to expand...
I don't enable DNT because it's useless. I enable only GPC. Some websites I visit do repect GPC and it works very well overall. In fact, I'm surprised how websites I may only visit once respect it.
 
Here is the plan for V8.4

Offer default filters:
  • Kees1958 most used EU and 5 eyes advertising & tracking networks
  • Kees 1958 most used tracking parameters in EU and 5 Eyes
  • Disconnect ads&analysis
  • AdGuard Base filter
  • AdGuard anti-adblock sublist
  • Easy privacy admiral servers
  • Disconnect ad&trackers
  • Country specific filters
Optional filters
  • Other disconnect categories
  • Selected hostfiles dedupped
  • Selected ABP-third party adfilters dedupped
  • Selected ABP tracking filters dedupped
Hostfiles would be Peter Low, OISD.nl small and Hagezi multi-light and cloudflare tracking and advertising infrastructure, together around 120.000 host file/firstparty which after dedupping are problably 75.000 hist file rules which I would translate to 15 DNR rules each containing 5000 classic host file rules.

Same approch for the others, which probably result in 500 to 1000 DNR rules.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top