Question Which Ubo filters 2023 do you use ?

Please provide comments and solutions that are helpful to the author of this topic.

floalma

Level 4
Thread author
Verified
Apr 5, 2015
182
Hi friends,

filter list1.PNG


filter list2.PNG
This is an update to a previous thread here about Ubo filters lists.
These are my UBO filter lists.
Any comments or recommendations are welcome.
Thanks you for your contribution. (y)
 
F

ForgottenSeer 97327

In post #38 you see the uBO filter rules (as you may expect in this thread). And indeed, there's an extension that can do the job.
Sorry, :) thought that rule blocked all gifs (also static gifs), intended to ask whether it is possible to block animated gifs only
(to save me from installing an extra extension which sits around doing nothing for 99,99% of the time).

1683717763533.png
 
F

ForgottenSeer 97327

AFAIK there is no filter rule that only blocks the animation. BTW : a nice minimalist setup. It's a pity that AG MV3 still doesn't have a log.
Considering the delay of MV3 introduction, I don't think it will get one. Looking at AdGuard development to modularize and reuse code (separate filter engine and creating their own independant API-layer for easy MV2 to MV3 migration) my guess is that they will transform existing AGv4 MV2 into AGv5 MV3 and see how many change requests Google will implement (to make the change as seamless as possible for average AG users).

Around 10% of my webtraffic (DNS + extension) is blocked,. I rarely see ads, only empty placeholders (which can be hidden using the crosshair element blocker).
 
Last edited by a moderator:

toto_10

Level 5
Verified
Well-known
Feb 12, 2017
246
What site is it?
I'm testing on this website:

Blocking gif images on every site:
*.gif$image

Blocking gif images on a specific site (real world example):
*.giphy.com/*.gif$image,1p

Blocking all images on every site:
*$image
I'm still getting a test failed at Gif and Static image. I'm using AdGuard if it makes any difference.
 

oldschool

Level 84
Verified
Top Poster
Well-known
Mar 29, 2018
7,525
I'm testing on this website:


I'm still getting a test failed at Gif and Static image. I'm using AdGuard if it makes any difference.
Oh, I see you're trying to pass the individual tests at that site, not block a specific GIF, etc. I'm using Adguard on Chromium browsers and pass all those tests. But, please realize that these kind of ad blocker test sites are unreliable in their methods and certainly don't replicate 'real world' usage for folks surfing the web. Their "test" results are mostly meaningless except possibly as a rough guide to comparing different adblocker and different list combinations.

My advice is to use any reputable ad blocker like µBO, Adguard or Ghostery and enable the default filters and check the relevant threads for more filter tips.
 

toto_10

Level 5
Verified
Well-known
Feb 12, 2017
246
Oh, I see you're trying to pass the individual tests at that site, not block a specific GIF, etc. I'm using Adguard on Chromium browsers and pass all those tests. But, please realize that these kind of ad blocker test sites are unreliable in their methods and certainly don't replicate 'real world' usage for folks surfing the web. Their "test" results are mostly meaningless except possibly as a rough guide to comparing different adblocker and different list combinations.

My advice is to use any reputable ad blocker like µBO, Adguard or Ghostery and enable the default filters and check the relevant threads for more filter tips.
I totally agree. I'm just playing around with those types of test, but sometimes it turns into a sport :D

I mainly use AdGuard's optimized filters to have less rules.
 

Jan Willy

Level 13
Verified
Top Poster
Well-known
Jul 5, 2019
600
I'm using AdGuard if it makes any difference.

Yes, it makes a difference. Of course I used the uBO-syntax (in accordance with the title of this thread).
If you would have activated AG Base filter (AG English filter + Easylist)* you would have passed both tests (also with the optimized version).
This answers also your next quote.

If there is any other smart way to block Static images please let me now.

*edit: I haven't tried other filterlists.
 
Last edited:

floalma

Level 4
Thread author
Verified
Apr 5, 2015
182
This is the order:
1) Dynamic URL filtering rules
2) Dynamic filtering rules
3) Static filtering

When you open the logger and choose an element of the page to block, you have two options: create a URL rule (Dynamic URL filtering rules) or a Static Filter. That URL rule takes precedence over the other two, but must be used on special cases. For example, i use 2 of this "special" URL rules...

Code:
* https://www.google.com/recaptcha/ * noop
* https://www.gstatic.com/recaptcha/ * noop


to avoid globally whitelisting google and gstatic domains with the (less granular) dynamic filtering rules.

Static filtering gives you even more granularity than what my beloved uMatrix used to, but, alas, there's no panel, you have to create the rules with the logger

When still crying over uMatrix demise, I used to create all my rules with the static filter. Give me granularity, Mr. Hill!
Well, not anymore.

Overview of uBlock's network filtering engine: details
My questions were not oriented about the logger, but on the "UBO settings" tab, which rules prevail ?
After dynamic rules ("My rules" tab), rules from "filter lists" or from "my filters" or "cosmetic filters" ?
When opening with the logger, only 1 option is possible : create a static filter, not a dynamic filter.
Yes, uMatrix was nice extension indeed. I've still using on my old browser.
 

Attachments

  • Ubo URL rules.PNG
    Ubo URL rules.PNG
    126.1 KB · Views: 141
  • Ubo Static filter from logger.PNG
    Ubo Static filter from logger.PNG
    131.1 KB · Views: 128
F

ForgottenSeer 97327

My questions were not oriented about the logger, but on the "UBO settings" tab, which rules prevail ?
After dynamic rules ("My rules" tab), rules from "filter lists" or from "my filters" or "cosmetic filters" ?
When opening with the logger, only 1 option is possible : create a static filter, not a dynamic filter.
Yes, uMatrix was nice extension indeed. I've still using on my old browser.
Dynamic allow/block rules override static filtering rules -> Dynamic filtering: precedence By default dynamic rules only have NOOP (grey) and BLOCK (red). NOOP (no operation) means that you can ignore (disable) dynamic block rules (usually to override a generic dynamic medium mode or hard mode block rule for a specific website). You can do that from the popup-panel of uBO, so there is no need to have this option in the logger.

The rules (static block rules and cosmetic hide rules) of the block lists in Filter Lists are merged with the rules you define in My Filters (so there is no precedence). When uBO takes a selfie it optimizes rules (e.g. when you have a block rule of website.* and website.nl the website.nl rule is dropped in the optimized b-tree. When you specify a more generic rule (e.g. ||website.com ) in MyFilters then this seems to overrule two rules out of two different blocklists (e.g. ||website.com/*/ads.js$script and ||website.com/trackingyou$xhr), but in fact the two more detailed rules are dropped, because the one rule you defined in My Filters is more generic.

For static rules an allow (@@) overrides a block (||) adding an $important to a block rule does override the allow rule. Because cosmetic rules hide stuff and don't block stuff, these cosmetic rules are applied after the block rules. My guess is that useless hiding rules (for stuff already blocked) are also dropped when uB0 optimized the rule sets (takes a selfie).
 
Last edited by a moderator:

Jan Willy

Level 13
Verified
Top Poster
Well-known
Jul 5, 2019
600
By default dynamic rules only have NOOP (grey) and BLOCK (red). NOOP (no operation) means that you can ignore (disable) dynamic block rules (usually to override a generic dynamic medium mode or hard mode block rule for a specific website). You can do that from the popup-panel of uBO, so there is no need to have this option in the logger.

You've explained it very clear, well done. A small addition: the logger offers the option to create a so called dynamic URL rule. View:


A real world example from the log:

Schermopname (11).jpg


The details-window on the right side opens when you click on the in this case relevant dynamic blocking rule **3p-script block (the first one). There you see the well-known colored boxes from the dynamic filtering rules. In this example I've chosen to 'noop' the third party. The noop-rule is as follows:
www.futura-sciences.com https://assets.poool.fr/audit.min.js script noop

Now the log shows following details:

Schermafbeelding 2023-05-12 113058.jpg


In this way you can make very precise choices.

Edit: later I saw that Zappathustra did the same in an earlier post. All credits to him. But I hope I could clarify it a bit further.
 
Last edited:
F

ForgottenSeer 97327

@Jan Willy uBO-master (y):)

I had not noticed this. This is good news, the new TO and FROM in static rules and combines nicely with this detailed level of dynamic rules (URL in stead of domain or tld) (y)

MV3 has dynamic (the 5000 rules tops) and static rules (imported from blocklists), is this how current uBO functionality is mapped to MV3? :unsure:
 
Last edited by a moderator:

Trident

Level 34
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
Why the phishing and malware filters when you could use another extension for those? WDFP, Emsisoft, G Safe Browsing, etc. are more effective than filter lists.
You can’t expect too much from community-driven feeds when it comes to these extremely dynamic websites. Some of them come and go in 15 minutes (that’s the shortest-lived phishing page). In general, security is the job of professionals and professionally-designed systems. Not the community’s job.

Now to the subject. When using uBO, I maintain a very vanilla and down to business configuration and use only the default filters which are only enabled. I like my browsing smooth and not too impactful.
 

wat0114

Level 13
Verified
Top Poster
Well-known
Apr 5, 2021
617
Why the phishing and malware filters when you could use another extension for those? WDFP, Emsisoft, G Safe Browsing, etc. are more effective than filter lists.
I don't want to use more than one extension. Also, i'm not overly concerned about phishing and malware threats in the first place. I just enable the filters because they're available. I'm using Librewolf browser enforced with Apparmor in Linux OS.
 

Jan Willy

Level 13
Verified
Top Poster
Well-known
Jul 5, 2019
600
Filterlists in uBO (Firefox ESR with strict tracking protection).
Networkfilters: 24.665 (my filters: 5)
Cosmetic filters: 8797

- AdGuard URL Tracking Protection
- Adguard Dutch filter
- Block advertisements on Youtube.com
- EasyList (minified)
- EasyPrivacy (minified)
- LennyFox uBlockOrigin medium mode blocklist

Further:
- Easy Medium Mode (noop rules for regular TLD's)
- NextDNS with Peter Lowe's filterlist, blocking Samsumg and Windows tracking and all security options.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top