4 ms·

uMatrix

• mr_toad 9y ago
  The article seems to suggest that at least some sites are embedding the script to avoid same origin policy, which will also bypass uMatrix. This is equivalent to hosting something like JQuery from your own domain, instead of using a CDN. As a site owner you have to trust that scripts like JQuery aren’t going to do bad things. They could just as send the email addresses (and passwords) directly to third parties. It’s not clear whether the site owners are witting collaborators in this or if they don’t know what the scripts are doing.
  • leeoniya 9y ago
    there are companies that specifically market as CDNs to advertisers to allow third-party scripts to appear as first-party. it's nasty shit: "The company's technology disguises third-party network requests so they appear to be first-party network requests." https://www.theregister.co.uk/2017/08/11/ad_blocker_bypass_code/ https://www.theregister.co.uk/2017/08/11/ad_blocker_bypass_c... however, the demo page linked in this thread failed to work for me as uMatrix blocked an injected 3rd party script