ebayrtm

[Wladimir Palant]

A message from an eBay employee (reached me indirectly, so I cannot ask more questions):

I have a pressing question regarding a recent
update to Adblock Plus' Easylist banner blocking strings. They have (as
of 4th March) pushed out an update that blocks *.ebayrtm.* URLs.

The issue we're having is that *.ebayrtm.* serves up content within the
eBay site, not off it. The content it serves are not adverts, but
targeted messages to users. For example:

* Recently purchased items on a my-eBay mini window
* On-site campaign messages, specific to eBay (not third parties)
* Browser download targeting (for example, the eBay Companion is
messaged via the *.ebayrtm.* domain)

As such, the whole site experience is significantly changed with this,
and the site appears as if there are errors.

As mentioned, this is eBay targeting on the site, rather than off the
site.

I must say, I am somewhat confused - EasyList doesn't have generic blocking for ebayrtm, there are two specific filters for this domain. Both didn't change recently, so I don't know where "4th March" comes from. But maybe you can see the breakage he mentions.

[Wladimir Palant]

I tried to figure out what the blocked scripts do. An example page: http://cgi.ebay.com/ws/eBayISAPI.dll?Vi ... 0323806932

If you look at "Buyer protection on eBay", it is empty. If you disable ".ebayrtm.com/rtm?rtmcmd&a=json" however, you will see
http://pics.ebaystatic.com/aw/pics/payp ... brella.gif. Same happens with "Buy safely" instructions above. Why this kind of information is being inserted dynamically is beyond me.

Another change from the same script is an internal ad (e.g. http://rtm.ebaystatic.com/0/RTMS/Image/ ... 112x22.gif) appearing in the upper-right corner. Then you have http://rtm.ebaystatic.com/0/RTMS/Image/ ... 160x22.gif appearing in the header next to "Shops" - apparently internal advertising again. "Make no payments & pay no interest for 3 months with an eBay MasterCard" - yet another piece of internal advertising, this time immediately above article description. And one 1x1 iframe pointing to tags.bluekai.com without any content, apparently tracking (on other pages this spot is used for more internal advertising, 160x600 format).

If I look at the main page, it seems that this script has no useful payload whatsoever. It is all dedicated to internal advertising - three Flash objects, six image ads.

My eBay page: two internal ads (same ones as on the auction pages).

To sum up: so far the only useful functionality that I see blocked is buyer protection info but I fail to see changed/broken site experience. Given that ebayrtm is typically used for internal advertising (including some that it is pretty annoying) and that blocking these ads individually will require significantly more effort - I cannot confirm that we have a false positive here. But maybe somebody knows where I can find "my-eBay mini window".

[rick752]

I find it odd that this person would bring up a generic *.ebayrtm.* that (like you said) I don't have in the list. Even stranger is the fact that nothing has been added/modified with those strings for quite some time ... they are not new. No one else has complained of any false-positives from there for months.

I don't have a string in the EasyList named *.ebayrtm.*. I realized a lonnnng time ago that I could not just use *.ebayrtm.* as it DID create false-positives. He needs to check where that generic string is coming from ....it's not from me

[fanboy]

non-ad:

Code: Select all

http://srx.main.ebayrtm.com/rtm?RtmCmd&a=json&cb=parent.ebay.oDocument.oPage.watcheditem&p=111:112:113:116:308:306:307:283:280:433:876&c=1H4sIAAAAAAAAAE1RTWvCQBC9C%2F6HKe2xDTOzH8kKc6mmtoeAqIUevKgNWGgaqRXqv%2B9md8Ce3u6br%2FdmbteHMzTbbyAGtBPrJ%2BShWa2BEcN4dGSpLEYkY4QSsmAxMChkQigzSZKSPCtSTi7dvyRrB3L%2F8S7EmzMikstAmDElaaXF1ImxUix1LKmOPImNlYcQEhFyIDbAsnCpiIWifPQumPQnLSI5Hfpj0e62l2LfdymG8rbrf8F4hMWybl5eG5hvuxam%2Fdep%2F2xhdTn9tB14nD%2FC82wGi3r5VE%2FXm5thqBvkqQ6nAq149ad2qVR0V7%2BVEa5senGqY3ISxWB2y9HuHeN9%2Bg9EpVeorov1SpVxrzZJCEGMQRNvFQyxH4%2F%2BAJTnf1bmAQAA&g=6d96faec11f0a0e203019841fff0186f&uf=0&z=10&ord=1236858379864&bw=1024&cg=6d96faec11f0a0e203019841fff0186e&v=3&enc=UTF-8

ad:

Code: Select all

http://srx.uk.ebayrtm.com/rtm?RtmCmd&a=json&p=184:660:185:688:569:701:439:441:387:523:433:876&g=eade268511f0a026986277a2fffeb110&uf=0&c=1H4sIAAAAAAAAAKVOuw7CMBDbkfiHSMxUd5eUNki3sDPByFL6EBUlTUqriH49acofsJx1tmV7d31M4lwMAkmAOip9RCnOl6sgAL3dWNQpm97Up%2BKTlP0rMKSIMSoyIinkrrBjb4UH54R5%2Bnn9nXNpMw7Pd1vNVmqUjuoSwnmRCsZmqDrruzmGgGZYEGFFqXivw4CyrRjpNgFALM1V1DGXLCk%2FRCuy9z5pCnPvl5GJmQMt4efMsv%2FnYXb4haW8D8QXUyi2LDYBAAA%3D&ord=1236858553974&e=USC:1&z=10&bw=1024&enc=UTF-8&v=4&cb=vjo.dsf.assembly.VjClientAssembler._callback0

[fanboy]

how about something like this,

Code: Select all

*.ebayrtm.com/rtm?RtmCmd&*assembly.*

[Wladimir Palant]

Fanboy, whay you quote as "non-ad" has mostly ad content in it. Looks like this link is coming from an auction page, see above for a detailed analysis of what that script inserts into the page.

PS: The "callback" parameter is a reference to the code that will be processing the results - it doesn't have any influence on the data being returned.

[rick752]

I agree.
If I remember correctly, I used the *callback* info before ,,, but it did not yield the expected results. It seemed it was just a part of the "called" code and was really not part of the blocking solution.