Both adblocker and tracking protection?

[Leslieann]

I got this today on another website, what surprised me was the mention of tracking protection as well, never seen them complain about that one before. The more they complain the more I refuse to do so.



By the way, any of you ever look at what Twitter allows advertisers to target? It's just Facebook you should be watching out for, how do you think Twitter went ad free for as long as it did.

[tp4tissue]

What do you guys read on the twitter ?

[Findecanor]

What the flying eff?
Please post what site that was, and I'll order some poop to be delivered to it together with a strong-worded letter.

Otherwise, in Chromium, I often right-click, choose Inspect and delete the tags behind the popup.
Too often.
Too ... often ...

[xtrafrood]

Seems like these days browsers without javascript support act as secret invisibility cloaks.  I use Dillo and w3m for when I write the script free versions of my websites

The landing page for Brave has been an eye opener for me.  Even though I see the numbers fly with Ublock Origin via desktop, it's sobering to see a running total of all the blocked cookie monsters when I'm on mobile.

[Leslieann]

It wasn't the sites fault, they are installing a new system and working out bugs, it's Twitter who did this.

Even viewing a linked tweet or Twitter icon allows them to track you, the latter applies to Facebook and every other "share" links, most of which I have blocked. People have no idea just how many companies are tracking them. I've seen sites with dozens of trackers and ones that will spam you every 3 seconds with cookie requests until you accept them. There is also sites that purposely load the ads before the page. It's very common these days for the tracking systems to consume 75% of page load times.

I don't understand how people use the internet without adblocking and such these days.

[xtrafrood]

Oh golly

[Sintpinty]

What do you guys read on the twitter ?

Just things about PCMR.


RBLX Dev's arent real devs

[Leslieann]

What do you guys read on the twitter ?

Absolutely nothing.
While there are some worthwhile things to watch, for the most part it's a bunch of narcissist screaming into a vacuum.

[Findecanor]

Privacy Badger is the best ad-blocking plugin, because it is not an ad-blocker.
It detects trackers automatically and blocks them. If an ad gets blocked, it is because its domain has been detected as trying to track me -- and then it does not deserve to be shown. Pure and simple.

I still see ads on some sites, and those do not bug me.

[Leslieann]

Privacy Badger is the best ad-blocking plugin, because it is not an ad-blocker.
It detects trackers automatically and blocks them. If an ad gets blocked, it is because its domain has been detected as trying to track me -- and then it does not deserve to be shown. Pure and simple.

I still see ads on some sites, and those do not bug me.

Combine that with 3rd party cookie blocking, Ublock Origin, and OpenDNS dns routing which blocks malicious domains.

[brianjking]

I got this today on another website, what surprised me was the mention of tracking protection as well, never seen them complain about that one before. The more they complain the more I refuse to do so.

(Attachment Link)

By the way, any of you ever look at what Twitter allows advertisers to target? It's just Facebook you should be watching out for, how do you think Twitter went ad free for as long as it did.

Check out Pi-Hole if you want. Network wide ad-blocking and can setup so you can use on your phone while you're away form your home wifi if you want (this requires a fair bit more setup, but it's definitely possible.

[tp4tissue]

I got this today on another website, what surprised me was the mention of tracking protection as well, never seen them complain about that one before. The more they complain the more I refuse to do so.

(Attachment Link)

By the way, any of you ever look at what Twitter allows advertisers to target? It's just Facebook you should be watching out for, how do you think Twitter went ad free for as long as it did.

Check out Pi-Hole if you want. Network wide ad-blocking and can setup so you can use on your phone while you're away form your home wifi if you want (this requires a fair bit more setup, but it's definitely possible.

I really like the concept of it, but after using it for a while, I really wonder HOW HARD would it be for devs to slip a purpose designed loophole in there, such that they can begin to collect your data.

That said, I've still got it running. because ad engines are probably worse.

[brianjking]

I got this today on another website, what surprised me was the mention of tracking protection as well, never seen them complain about that one before. The more they complain the more I refuse to do so.

(Attachment Link)

By the way, any of you ever look at what Twitter allows advertisers to target? It's just Facebook you should be watching out for, how do you think Twitter went ad free for as long as it did.

Check out Pi-Hole if you want. Network wide ad-blocking and can setup so you can use on your phone while you're away form your home wifi if you want (this requires a fair bit more setup, but it's definitely possible.

I really like the concept of it, but after using it for a while, I really wonder HOW HARD would it be for devs to slip a purpose designed loophole in there, such that they can begin to collect your data.

That said, I've still got it running. because ad engines are probably worse.

Considering it's open source it's incredibly unlikely.

Sent from my Pixel 2 using Tapatalk

[tp4tissue]

Considering it's open source it's incredibly unlikely.

Security hole is not a backdoor,  You won't see an intentional backdoor, because it's open source.

They could purposefully design the code to expose a security loophole, then remote in.

[xtrafrood]

https://github.com/pi-hole/pi-hole - 125 contributors, 497 people receiving email updates, and 52/1469 open issues (peep the open issues).  Not to mention 15K+ stars and 1K+ forks.  Logic tells me there are enough eyeballs on that code to see an exploit.  Wade through the code, poke around, compile it yourself.  Deploy the Docker image in a barebones VM and watch the network traffic for a month.  Each revision can be audited with your eyeballs before you install it to satisfy your suspicion.  Watch the project to stay notified of the next release so that you can review the code before installation.  Or pipe it to espeak and take a bath or something as you audit the code with your ears.  But if god(s) forbid there comes a time when you do spot something wishy washy then submit a bug report with your findings so that others will know.  If I'm reading this right it uses tricorder.pi-hole.net:9998 as the dns server?  When I enter that address in the url bar the webpage shows a button to login to some kind of back end api service with my github account.  I don't have a pi atm, though if I did I'd probably use it for something else unless I could host my own dns server.  I've heard good things about DNSCrypt--and if you don't like the idea of using DNSCrypt servers run by thoughtful strangers, you can host your own with digital ocean, linode, etc.

[tp4tissue]

https://github.com/pi-hole/pi-hole - 125 contributors, 497 people receiving email updates, and 52/1469 open issues (peep the open issues).  Not to mention 15K+ stars and 1K+ forks.  Logic tells me there are enough eyeballs on that code to see an exploit.  Wade through the code, poke around, compile it yourself.  Deploy the Docker image in a barebones VM and watch the network traffic for a month.  Each revision can be audited with your eyeballs before you install it to satisfy your suspicion.  Watch the project to stay notified of the next release so that you can review the code before installation.  Or pipe it to espeak and take a bath or something as you audit the code with your ears.  But if god(s) forbid there comes a time when you do spot something wishy washy then submit a bug report with your findings so that others will know.  If I'm reading this right it uses tricorder.pi-hole.net:9998 as the dns server?  When I enter that address in the url bar the webpage shows a button to login to some kind of back end api service with my github account.  I don't have a pi atm, though if I did I'd probably use it for something else unless I could host my own dns server.  I've heard good things about DNSCrypt--and if you don't like the idea of using DNSCrypt servers run by thoughtful strangers, you can host your own with digital ocean, linode, etc.

Intel corporation, Hardware exploits, financial rumor on suicide watch.

Now, you're telling me, this raspberry pi, casual coding, is without exploit ?

Is it possible the NSA has black ops - coders operating in all major netware distributions specifically to design/integrate infiltration exploits ?


This does not detract or take credit away from all the contributors,   but this unwavering trust in Open-source is overly optimistic.

[xtrafrood]

Read the source code for pi-hole or don't.  I'm not sure what you want from me.

[Leslieann]

Check out Pi-Hole if you want. Network wide ad-blocking and can setup so you can use on your phone while you're away form your home wifi if you want (this requires a fair bit more setup, but it's definitely possible.

I've considered it.
I've basically got the same protection with what I have, they use the same lists, you're just offloading it to another system.

I don't really want more hardware on my network and I've learned not to depend on Pi's. They REALLY need some onboard memory to be reliable, as it is if you cut power at the right time your sdcard is corrupted. Had it happen twice on a Pi and seen it three times on 3d printers.

This does not detract or take credit away from all the contributors,   but this unwavering trust in Open-source is overly optimistic.[/size][/color]

It's happened before (not long ago in fact), someone spent months(?) slipping what looked like random bits of code in different places, it only made sense when taken as a whole so it was not easy to spot. However, this sort of thing is not easy or common and at least you/the community has a chance to catch it, unlike proprietary code.

And to be fair, you can catch most of this stuff without even looking at code by just watching your network activity. I've tracked down infected systems on a network this way as well as watched Windows do shady things.

[tp4tissue]

Read the source code for pi-hole or don't.  I'm not sure what you want from me.

Tp am already on da-pi.

Just cautioning young peeps against blinding trust in the term Open-Source.

[xtrafrood]

Don't trust, just read the code.

[tp4tissue]

Don't trust, just read the code.

So, here we have a door.

The Lock, the Key, the Hinges, the Frame, the Panel, the Screws,  ALL designed by different people.

NO one knows perfectly the entirety of the door.  NO one person COULD KNOW the entirety.


Now, the Asassins guide, slips a member into this Entrance maker's party as the Hinge man.

The Hinge Man creates JUST enough play in the pin so it could be popped off.


No user of this door will be able to truly know this door is secure in all ways.

As the complexity of the door increases, these factors grow exponentially.



Open Source does not make something secure / instantly trusthworthy / being able to access/ read the source as an end user will not help..

[xtrafrood]

READ THE CODE.  Or like Leslieann and I said, watch the network traffic.  It's really that simple.