walla.co.il

Here you should report unblocked ads, trackers, social media items, annoyances or leftovers from blocked content.
Locked
Dzr561
Site Member
Site Member
Posts: 10
Joined: Tue Nov 22, 2016 8:27 pm

walla.co.il

Post by Dzr561 »

Hi,

A serious bug in the easylist blacklist/ whitelist - you can see an example at www.walla.co.il

Using this bug they can bypass the adblock with a simple HTTP request although the domain is already in the blacklist. They trick the easylist with using a 'whitelisted' domain as a sub-domain (with no connection to the acceptable ads rules).

Explanation:

The ad blocked domain (REAL domain): umamdmo.com (already blocked in the Heb list).
The main easy list has a record with the rule: @@||comeadvertisewithus.com*/ads.js (source: eastlist)

They are using the sub-domain called "comeadvertisewithus.com" for the domain "umamdmo.com" which generates this URL, for example,

Code: Select all

https://comeadvertisewithus.com.umamdmo.com/i161eee4/?w=w&q=/ads.js
The Adblock consider the URL https://comeadvertisewithus.com.umamdmo.com as a whitelisted domain, and the ad block is unable to distinguish between REAL domain and the sub-domain, and since the whitelisted rule is stronger than the blacklisted rule, the domain is bypass easily the adblock.

see this: https://github.com/easylist/EasyListHebrew/issues/211

https://cloud.githubusercontent.com/ass ... fd6924.png

Thanks
User avatar
LanikSJ
Site Owner
Site Owner
Posts: 1806
Joined: Thu Feb 15, 2007 7:44 am
Location: /dev/null

Post by LanikSJ »

Dzr561 wrote: A serious bug in the easylist blacklist/ whitelist - you can see an example at www.walla.co.il
That's not a bug, a bug would be a typo. That's someone taking advantage of the exception rules to benefit themselves. Happens too often unfortunately.

One of the EasyList authors will have to fix that.
"If it ain't broke don't fix it."
WarFame
Postaholic
Postaholic
Posts: 713
Joined: Fri Nov 27, 2015 1:35 pm

Post by WarFame »

Might be a typo though. viewtopic.php?p=107271#p107271
User avatar
smed79
Liste AR/FR Author
Liste AR/FR Author
Posts: 15839
Joined: Sun Jan 17, 2010 4:00 am
Location: EasyList Forum

Post by smed79 »

•► Read RULES / Use forum Search
••► Don't post clickable links
•••►Upload screenshots at imgbb.com
rhanajoy
AdBlock Community Manager
AdBlock Community Manager
Posts: 292
Joined: Fri Jul 03, 2015 10:40 am

Post by rhanajoy »

Hey guys. What should I tell our users who report unblocked ads on walla.co.il? This discussion seems to indicate they can't be blocked by EasyList or the Hebrew list until the list maintainers fix that exception rule exploit. Is there a custom filter or filters that will get around this?
Rhana
AdBlock Community Manager

Posting on behalf of AdBlock (not ABP), when users come to us first and we have some reason to get involved with the discussion. http://help.getadblock.com
User avatar
LanikSJ
Site Owner
Site Owner
Posts: 1806
Joined: Thu Feb 15, 2007 7:44 am
Location: /dev/null

Post by LanikSJ »

One of the authors will need to fix the list. Then what they're doing will stop working.
"If it ain't broke don't fix it."
Khrin
EasyList Author
EasyList Author
Posts: 3562
Joined: Fri Mar 26, 2010 8:50 pm

Post by Khrin »

I haven't seen any of our filters being abused to deliver adverts. I don't know Hebrew but also I haven't seen any evident advert still unblocked.
nomaed
New Member
New Member
Posts: 1
Joined: Thu Apr 06, 2017 8:03 pm

Post by nomaed »

I made a report about ads appearing on news.walla.co.il

Here are the details:
Chrome Version 57.0.2987.133 (Official Build) (64-bit)
macOS Sierra 10.12.3 (16D32)
AdBlock VERSION 3.9.1

I created a new Chrome profile ("test") and installed the AdBlock extension and added "Hebrew + EasyList" in the languages section.
Then opened the URL: http://news.walla.co.il

It appears when window width is 1003 pixels or more (otherwise, their responsive UI removes these elements).

The top ad appears in a div on the main page with class name "slot-top-desktop".
The right skyscraper is in a div with id of "skyscraper-desktop".
The ads themselves are in canvases that are buried inside 3 levels of iframes, although that might be less relevant.

The banners do not appear with ABP on Firefox 52.0.2 with the EasyList/Hebrew filter added.

Screenshot: http://i.imgur.com/b0aKeQx.png
IsraeliAdblocker
HebrewList Author
HebrewList Author
Posts: 31
Joined: Thu Jul 21, 2016 10:59 am

Post by IsraeliAdblocker »

Firefox is already solved there but Chrome is different, I suggest to use Ublock Origin for now which is working great.
Please open an issue inside the HebrewList Github.
-Mark-
Postaholic
Postaholic
Posts: 382
Joined: Tue Jul 05, 2016 7:46 pm

Post by -Mark- »

What should I tell our users who report unblocked ads on walla.co.il?
A behind-the-scenes WebRTC connection is taking place through which ads are being fetched. On Chromium, open

Code: Select all

chrome://webrtc-internals
in a new tab.

Patched on uBO via uBO-Extra.
Locked