Code: Select all
http://www.sandiegouniontribune.com/Code: Select all
@@*$image,domain=sandiegouniontribune.comsandiegouniontribune.com
sandiegouniontribune.com
this annoying g00 ads again.
suggested filter:
-
liracobopu
- Guest
Only works on the homepage. Full screen ads still appear when going to the article pages.theGamer wrote:Code: Select all
@@*$image,domain=sandiegouniontribune.com
Code: Select all
http://www.sandiegouniontribune.com/news/courts/sd-me-social-security-20161104-story.html
I get no ad on that specific page. Be sure you are using only 1 blocking extension.
Clear browsing data… or try in chrome portable.intense wrote:I get no ad on that specific page.
- http://i.imgur.com/ZT4R3AR.png
- http://i.imgur.com/t4Gja8j.png
@theGamer try
Code: Select all
@@||sandiegouniontribune.com^$generichide
@@|https://*$image,domain=sandiegouniontribune.comany news about it? looks like something is changed there.
still no ad for me
have you tried to use a US vpn in incognito? (not canary)intense wrote:still no ad for me
working for me:
Code: Select all
@@||sandiegouniontribune.com^$generichide
@@*$image,domain=sandiegouniontribune.com
sandiegouniontribune.com##.trb_header_adBanner_combo
Ads are reinserted on this site (and all the sites below) by a CDN called Instart Logic.
Their ad reinsertion technique only works on Chrome. So if you're using Firefox, everything looks good (adblock is working).
Another newspaper company, tronc (used to be called Tribune) is using same stuff 4 sites
And again, same adblock circumvention stuff has been reported here is running on...
Their ad reinsertion technique only works on Chrome. So if you're using Firefox, everything looks good (adblock is working).
Code: Select all
ottawacitizen.com
montrealgazette.com
leaderpost.com
thestarphoenix.com
theprovince.com
vancouversun.com
calgaryherald.com
edmontonjournal.com
windsorstar.comCode: Select all
orlandosentinel.com
sandiegouniontribune.com
sun-sentinel.com
mcall.comCode: Select all
Boston.com
Edmunds.com
PCMag.com
TimeAndDate.com
LolKing.net
Wowhead.com@Amsterdam, did you try the filters above ?
What adblocker are you using ?
What adblocker are you using ?
@intense I'm using ABP and yes the filters work. I posted in this thread all those sites because it seems that this technique from InstartLogic is cropping up on more and more sites. How many sites does it have to be on before something universal is added to the EasyList filter for everybody?
There are no general filters which can be added to easylist but only similar filters (like those above) for all those sites you listed. But all this is up to easylist maintainers. Otherwise just create your own filters, or create a custom list with such filters.
Cannot see anything, even with using Chrome...
Try a us vpn (and don't use ABP dev panel)
Reproducible in ubo too
Reproducible in ubo too
Thank you!
it's not only the hiding filters issue in ABP
in ubo for example, using a us ip (to be sure)
go to chicagotribune.com
left / right side banners can be hidden using
chicagotribune.com###checkm8Ad_1
chicagotribune.com###checkm8Ad_2
but a lot of g00 elements are generated slowing down the page
if you want to block them
||g00.chicagotribune.com
some parts of the page are broken
in ubo for example, using a us ip (to be sure)
go to chicagotribune.com
left / right side banners can be hidden using
chicagotribune.com###checkm8Ad_1
chicagotribune.com###checkm8Ad_2
but a lot of g00 elements are generated slowing down the page
if you want to block them
||g00.chicagotribune.com
some parts of the page are broken
same anti adblock reported here:
https://forums.lanik.us/viewtopic.php?f=62&t=32980&p=108822#p108822 (lolking.net)
https://forums.lanik.us/viewtopic.php?f=62&t=34245&p=108556#p108556 (torrentsgroup.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34196&p=108360#p108360 (sun-sentinel.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34194&p=108351#p108351 (mcall.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34192&p=108339#p108339 (boston.com)
updated list:
https://forums.lanik.us/viewtopic.php?f=62&t=32980&p=108822#p108822 (lolking.net)
https://forums.lanik.us/viewtopic.php?f=62&t=34245&p=108556#p108556 (torrentsgroup.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34196&p=108360#p108360 (sun-sentinel.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34194&p=108351#p108351 (mcall.com)
https://forums.lanik.us/viewtopic.php?f=62&t=34192&p=108339#p108339 (boston.com)
updated list:
Code: Select all
ottawacitizen.com
montrealgazette.com
leaderpost.com
thestarphoenix.com
theprovince.com
vancouversun.com
calgaryherald.com
edmontonjournal.com
windsorstar.com
orlandosentinel.com
sandiegouniontribune.com
sun-sentinel.com
mcall.com
Boston.com
Edmunds.com
PCMag.com
TimeAndDate.com
LolKing.net
Wowhead.com
torrentsgroup.com
suggested rule:
Code: Select all
@@||ottawacitizen.com^$generichide
@@||montrealgazette.com^$generichide
@@||leaderpost.com^$generichide
@@||thestarphoenix.com^$generichide
@@||theprovince.com^$generichide
@@||vancouversun.com^$generichide
@@||calgaryherald.com^$generichide
@@||edmontonjournal.com^$generichide
@@||windsorstar.com^$generichide
@@||orlandosentinel.com^$generichide
@@||sandiegouniontribune.com^$generichide
@@||sun-sentinel.com^$generichide
@@||mcall.com^$generichide
@@||boston.com^$generichide
@@||edmunds.com^$generichide
@@||pcmag.com^$generichide
@@||timeanddate.com^$generichide
@@||lolking.net^$generichide
@@||wowhead.com^$generichide
@@||torrentsgroup.com^$generichide
@@|https://*$image,domain=ottawacitizen.com,montrealgazette.com,leaderpost.com,thestarphoenix.com,theprovince.com,vancouversun.com,calgaryherald.com,edmontonjournal.com,windsorstar.com,orlandosentinel.com,sandiegouniontribune.com,sun-sentinel.com,mcall.com,boston.com,edmunds.com,pcmag.com,timeanddate.com,lolking.net,wowhead.com,torrentsgroup.comperhaps you mean
domain=ottawacitizen.com|montrealgazette.com|leaderpost.com| ....
domain=ottawacitizen.com|montrealgazette.com|leaderpost.com| ....
yes sorry my mistake.
I am getting the same ads, and more people have reported about those ads, mark you are the only one here that can't see them and I don't know why, and frankly I don't care, I just want them to be blocked, trust me, this is not a malware.
also, g00 string has now been removed from view-source:http://www.chicagotribune.com/ and trust me, I've seen it 10 min ago.
so I get the feeling that the "Network" that is working in this site has seen this post and removed the script.
also, g00 string has now been removed from view-source:http://www.chicagotribune.com/ and trust me, I've seen it 10 min ago.
so I get the feeling that the "Network" that is working in this site has seen this post and removed the script.
Can you see this script ?
You can see inside all those sites which are provide g00 crap.
http://d3d3lm5hbm92axnvci5pbw00.g00.chicagotribune.com/g00/2_d3d3LmNoaWNhZ290cmlidW5lLmNvbQ%3D%3D_/TU9SRVBIRVVTMSRodHRwOi8vd3d3Lm5hbm92aXNvci5pby9AcDEvY2xpZW50L21vcnBoZXVzL2luc3RhcnQuanM%3D_$/$/$/$/$You can see inside all those sites which are provide g00 crap.
and this is the second script:
Code: Select all
http://d3d3lm5hbm92axnvci5pbw00.g00.chicagotribune.com/g00/2_d3d3LmNoaWNhZ290cmlidW5lLmNvbQ%3D%3D_/TU9SRVBIRVVTMSRodHRwOi8vd3d3Lm5hbm92aXNvci5pby9AcDEvY2xpZW50L21vcnBoZXVzL2luc3RhcnQuanM%3D_$/$/$/$/$I checked a couple of sites here, and I can't get the g00 stuff with uBO or ABP + US VPN.
I've looked into the g00 stuff recently, it's from Instart Logic. When the issue occurs, one can see Instart Logic's inline script at the top of the page (use view-source:, not dev console), the purpose of that script is to hijack a lot of built-in javascript calls. It's a nasty thing, it's designed to disable itself when it detects that the dev console is opened, probably to make it difficult to investigate for those who care to do so. I also have observed that the server will not serve g00 crap for those using Firefox (server-side detection -- so possible simple UA spoofing might work), possibly because the dev console detection does not work on Firefox.
I did finally track down the piece of code which detects about whether the dev console is opened or not, and I could mimic with a scriptlet that the dev console was opened. It worked for wowhead.com (just checked, it has apparently been removed), where it was causing huge amount of data to be dowloaded (see https://www.reddit.com/r/wow/comments/5exq2d/wowheadcom_sucking_bandwidth/).
The fact that I can't reproduce could be because the g00 stuff may be partially rolled out, some wil have it, others not.
One thing is for sure, I will do whatever it takes to neuter their nastiness.
I've looked into the g00 stuff recently, it's from Instart Logic. When the issue occurs, one can see Instart Logic's inline script at the top of the page (use view-source:, not dev console), the purpose of that script is to hijack a lot of built-in javascript calls. It's a nasty thing, it's designed to disable itself when it detects that the dev console is opened, probably to make it difficult to investigate for those who care to do so. I also have observed that the server will not serve g00 crap for those using Firefox (server-side detection -- so possible simple UA spoofing might work), possibly because the dev console detection does not work on Firefox.
I did finally track down the piece of code which detects about whether the dev console is opened or not, and I could mimic with a scriptlet that the dev console was opened. It worked for wowhead.com (just checked, it has apparently been removed), where it was causing huge amount of data to be dowloaded (see https://www.reddit.com/r/wow/comments/5exq2d/wowheadcom_sucking_bandwidth/).
The fact that I can't reproduce could be because the g00 stuff may be partially rolled out, some wil have it, others not.
One thing is for sure, I will do whatever it takes to neuter their nastiness.
adding
stops the stuff but could also break some functionalities on page (videos for example). So, probably they mixed some crap with normal things.
Code: Select all
||g00.*/g00/$scriptone of the above scripts:
http://pastebin.com/qgN39MjJ
http://pastebin.com/qgN39MjJ
if you will investigate their script you will see those strings:
washingtonpost.com, trustedreviews.com, weather.com, destinydb.com, lolking.net, moatads.com, monkeybroker.com, zam.com, adsrvr.org, nexac.com, opshead.com, sandiegouniontribune.com, viafoura.com, extremetech.com, computershopper.com, orlandosentinel.com and more.
looks like all of those are sites that they are working with / plan to work with.
I think that this is sourcepoint script.
washingtonpost.com, trustedreviews.com, weather.com, destinydb.com, lolking.net, moatads.com, monkeybroker.com, zam.com, adsrvr.org, nexac.com, opshead.com, sandiegouniontribune.com, viafoura.com, extremetech.com, computershopper.com, orlandosentinel.com and more.
looks like all of those are sites that they are working with / plan to work with.
I think that this is sourcepoint script.
another site reported:
viewtopic.php?f=62&t=34465
viewtopic.php?f=62&t=34465