tusfiles.net

[muzazu]

Site : tusfiles.com
issue : popup 3 times when click on page

[fanboy]

I couldn't reproduce any popups here.

[papadoc]

I'm seeing them as well, one after another. Pretty awful script they're running. My syntax isn't always perfect, but this works:

Code: Select all

||cloudfront.net/pop$script,domain=tusfiles.net

[papadoc]

Example: http://tusfiles.net/wbrwjn69zfld

There's one of those invisible flash overlays as well. Hiding it doesn't solve popups. This only seems to occur in Chrome.

[mele]

They are using websocket for the POP, thats why it's not working @ Firefox by default.

ws://document4u.info:8080/ data:
{"type":"init","data":"http://d2xsy1lxezptdm.cloudfront.net/pop?tid=600321"}
{"type": "script", "data": "uyh8BMq9Ae0KucV2D7VKhy06vMhZBMhPB..."}

[papadoc]

I figured that was the culprit, but I don't know how to block it. I tried a couple different filters with no luck. What's the proper filter?

[Khrin]

They are using websocket for the POP, thats why it's not working @ Firefox by default.

ws://document4u.info:8080/ data:
{"type":"init","data":"http://d2xsy1lxezptdm.cloudfront.net/pop?tid=600321"}
{"type": "script", "data": "uyh8BMq9Ae0KucV2D7VKhy06vMhZBMhPB..."}

I'm not sure of it, but it's not possible on Chrome to block websockets. By the way, we have the filter /pop?tid=, also with the latest version of EasyList you still view popups?

[infojunkie]

this will work:

Code: Select all

||cloudfront.net$script,domain=tusfiles.net

[papadoc]

@infojunkie, not in Chrome. If you look up in this thread, I offered basically the same filter a couple weeks ago but they switched it to websocket and now it doesn't block popups. Worse than that, whatever POS script they're injecting never removes the flash overlay so the site doesn't even function after the popup.

A good old hosts file entry does the trick, but it really shouldn't be necessary. I looked up websocket blocking in Chrome and it seems like an unresolved issue going back a while. Not only is this a problem for ABP, but I imagine it has pretty serious security implications when someone inevitably utilizes it for something far worse than popups.

[mele]

They are using websocket for the POP, thats why it's not working @ Firefox by default.

ws://document4u.info:8080/ data:
{"type":"init","data":"http://d2xsy1lxezptdm.cloudfront.net/pop?tid=600321"}
{"type": "script", "data": "uyh8BMq9Ae0KucV2D7VKhy06vMhZBMhPB..."}

I'm not sure of it, but it's not possible on Chrome to block websockets. By the way, we have the filter /pop?tid=, also with the latest version of EasyList you still view popups?

Yes, still pops.

Please add this filter:

Code: Select all

google-analytics.com/__utm.gif$popup,domain=tusfiles.com

It should work for now.

[papadoc]

They changed it back:

Code: Select all

||cloudfront.net$script,domain=tusfiles.net

works again.

[doctorman]

Code: Select all

google-analytics.com/__utm.gif$popup,domain=tusfiles.com

this helped me

Thank you