46 points
*

UBlock Origin
NoScript
HTTPSEverywhere

edit: “isn’t this implemented in-browser?” comments: maybe, but it’s to the browser’s implementation. These plugins are reviewable separate from their analogous browser implementation.

Belt & suspenders approach. Camp on it.

permalink
report
reply
29 points

“Sponsor Block” is a game changer as well

permalink
report
parent
reply
18 points
*

Isn’t NoScript redundant if you run UBO in medium mode?

Roughly similar to using Adblock Plus with many filter lists + NoScript with 1st-party scripts/frames automatically trusted. Unlike NoScript however, you can easily point-and-click to block/allow scripts on a per-site basis.

permalink
report
parent
reply
7 points

If you go in ublock origin settings, scroll all the way down, you can toggle a setting that disables JS by default. On each site you can whitelist it by clicking ubo and enable JS.

permalink
report
parent
reply
3 points

I wasn’t aware of this feature in UBO, but it doesn’t seem to be quite the same. As best I can tell (with a quick test), UBO lets me turn all scripts on or off for a site. I don’t see any sort of granular controls for selecting which domains to load scripts from (and I might just be missing it). For example, I may want to allow first party scripts to run on a site and maybe third party scripts from one or two domains. But, I don’t want scripts from other third party domains to execute. It’s very much a fine grained, least privileged style of script management. It’s a lot more work, as you often have to spend a few minutes sussing out which domains need to be whitelisted to allow a site to reach minimum functionality; but, you are not often caught offguard by a site doing strange things on your system.

permalink
report
parent
reply
21 points

I thought HTTPS everywhere was baked into browsers now and didn’t need to be installed anymore? Is that not correct?

permalink
report
parent
reply
10 points

Yes i think firefox will do it if configured correctly

permalink
report
parent
reply
6 points

Yeah HTTPS-everwhere was important 10+ years ago, but now the main browsers all do this by default.

permalink
report
parent
reply
6 points

I don’t understand your edit, how is more things doing the same thing better? It adds complexity, attack surface while taking resources.

permalink
report
parent
reply
2 points

Yeah, sorry… My head was in 1000 different places when I wrote that. Sloppy of me.

Overall I agree with the general statement that less code is better, except perhaps in this case it is not.

What I had been trying to say is in-browser privacy implementations are liable to be incomplete from the perspective of privacy minded users because the software publishers, say, Mozilla, are competing for market share of installed, default browsers. One way they maintain market share is by having the fastest and most accurate page renders for the widest base of use cases. To do this requires, in part, some cooperation from website developers whose vested interest in part is in driving ad serves.

Therefore, it’s in the browser publishers’ interest to implement enough privacy and blocking features to effectively stop malware and common nuisances, but not completely cripple ad blocking since ads are a key part of web site operators’ revenue. They’re trying not to alienate that part of the web economy such that their browser suddenly starts hitting those “please turn off you ad blocker or select another browser” paywalls.

Mozilla pretty much said this was the case a few years ago when they opted not to turn on the privacy features by default in new installs because the advertisers threatened to start hobbling websites for Mozilla browsers. I don’t know that the situation has really changed much since then.

Anyway, my point was that the in-browser privacy features are a good start and should be enabled, but also that they amount to little more than a fig leaf over the question of effectively blocking ads. Loading the adblockjng extensions accomplishes a few things for the user. First, the extensions grant a more complete, uncompromised blocking experience for the user. Second, it grants the user finer-grained control over the whole web experience, letting the user decide what ads and cross-site data sharing occurs. Finally, the code is independent of the browser and so it doesn’t alienate the site owners from the browser publisher.

For Mozilla, it shifts the responsibility of incomplete page loads and breakage onto the user, which in my opinion is where we want it.

That’s why I’m advocating for doing both in this case: because the browser publishers have a vested interest to remain relevant in an economy that wants you to see the ads, and will do everything it can to make you click them. The best defense against for the user that is a multilayered approach.

Finally, I do want to acknowledge that I’m using the terms “privacy” and “ad blocking” too loosely here since they are separate, distinctly nuanced topics. The extensions help more in the ad blocking space than the privacy space, but in what I wrote I think its fair to say that overall the extensions do improve outcomes where the two spaces intersect.

Anyway, nice chat. Thanks for keeping me honest

permalink
report
parent
reply
2 points

Wow, you are really confused. The argument about the functionality being already implemented by Firefox was about https everywhere. This has nothing to do with adblocking and it does break some sites (the one still not using https) but you can still access them with a click.

permalink
report
parent
reply
5 points
  • uBlock Origin (of course)
  • Snowflake by The Tor Project

YouTube:

  • Unhook: Remove YouTube Recommended Videos Comments
  • SponsorBlock - Skip Sponsorships on YouTube
  • FireMonkey/ViolentMonkey/Greasemonkey with the “YouTube Age Restriction Bypass” userscript
permalink
report
reply
3 points

I never remember the user scripts, gotta check that

permalink
report
parent
reply
3 points

uBO, Facebook container, Bitwarden, Privacy Badger. People say uBO already covers Privacy Badger but I like keeping it there because of the replace widget feature.

permalink
report
reply
1 point

What’s the replace widget feature?

permalink
report
parent
reply
1 point

I just enjoy usimg both

permalink
report
parent
reply
22 points

Im using Firefox/a fork of it - please note that many of the below mentioned extensions either only exist for Firefox or don’t work well with Chromium browsers due to manifest V3.

  • UBlock Origin
  • I still don’t care about cookies
  • CanvasBlocker
  • Multi account containers
  • Dark Reader
  • FlagFox
  • (Bitwarden)
permalink
report
reply
17 points

Id replace „still dont care about cookies“ with consent-o-magic. It actually deselects tracking cookies instead of ignoring/acknowleding them

permalink
report
parent
reply
4 points

Thanks for the tip!

permalink
report
parent
reply
4 points

FlagFox

This one is really useful, thanks!

permalink
report
parent
reply
24 points
*

Adnausem. Built on top of unlock origin it will simulate clicks on ads it hides to mess up your advertising profile. Also has an ad vault so you can see the adverts it is hiding.

Consent-o-matic. Run by a Danish uni, it will auto deny all cookie popups by actually opting out of everything for you.

permalink
report
reply

Asklemmy

!asklemmy@lemmy.ml

Create post

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it’s welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

Icon by @Double_A@discuss.tchncs.de

Community stats

  • 9.2K

    Monthly active users

  • 3K

    Posts

  • 50K

    Comments