3 ms·

I haven't looked at AdGuard in specific, but fundamentally, AdGuard's Safari version can't be better than uBlock Origin on Firefox/Chrome, because Safari lacks

I haven't looked at AdGuard in specific, but fundamentally, AdGuard's Safari version can't be better than uBlock Origin on Firefox/Chrome, because Safari lacks the APIs to do what uBlock Origin does. The immediate problem is that Safari has a hard limit of 50,000 rules per extension. Some developers do try to get around this with various hacky strategies like splitting their adblocker up into multiple extensions, or moving their blocker to the OS-level, or trying to recompile the list on the fly. But at the end of the day it's just a really weird hoop to jump through, and it ends up being kind of error-prone, and there's no guarantee that Apple won't break those hacks in the future. More fundamental is the list itself -- Safari doesn't allow contextual, dynamic blocking, you have to put everything into a static list. This makes it impossible to build the kind of detailed filters[0][1] that uBlock Origin allows -- for example, there's no way to strip HTML content from a GET request in Safari before it gets parsed by the browser. And so on. See the privacy API[2], dns[3], which is used to block a newer bypass method where 3rd-party trackers are hidden behind 1st-party subdomains. Worse CSS/JS injection, etc... I'm not saying everyone else is crap at adblockers, I'm saying static blocklists are fundamentally less powerful and less capable than Firefox's APIs. That's especially true if AdGuard is doing something like system-wide DNS blocking. No shade at those tools, they have a place, but a browser-based extension will always be better than a setup like PiHole, because the browser has more access to a given request's current context. [0]: https://github.com/gorhill/uBlock/wiki/Static-filter-syntax https://github.com/gorhill/uBlock/wiki/Static-filter-syntax [1]: https://github.com/gorhill/uBlock/wiki/Dynamic-filtering https://github.com/gorhill/uBlock/wiki/Dynamic-filtering [2]: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/privacy https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... [3]: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/dns https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

stephenr 6y ago
> for example, there's no way to strip HTML content from a GET request I'm quite curious what legitimate use this has?
- danShumway 6y ago
  There are a couple of reasons, but the biggest one is that intercepting HTML at the network level allows you to filter inline script tags from documents[0]. If you want to stop an inline script from running (say to defuse an anti-adblocker popup/redirect), you can't wait until after it gets parsed to remove it. Once it gets added to the page, the browser will execute it. Of course, note that uBlock Origin also supports scriptlets[1] that can be used to rein in scripts after they get added to the page, instead of by doing resource rewriting. You're not restricted to only doing your filtering at the network level, HTML filtering is just another tool that filter authors have at their disposal. Helpfully, at the scriptlet wiki page I've linked each entry also shows a practical example rule that relies on the scriptlet. You can also take a look at the uBlock Origin's default filter lists[2] if you want more examples of people using both HTML filtering and scriptlets in the wild. Many of these block rules are impossible to implement in Safari. [0]: https://github.com/gorhill/uBlock/wiki/Inline-script-tag-filtering https://github.com/gorhill/uBlock/wiki/Inline-script-tag-fil... [1]: https://github.com/gorhill/uBlock/wiki/Resources-Library https://github.com/gorhill/uBlock/wiki/Resources-Library [2]: https://github.com/uBlockOrigin/uAssets https://github.com/uBlockOrigin/uAssets
  - specialist 6y ago
    Nice ELI5s/TLDRs, thank you. Sharing notion (dumb question) here, since you're smart about this stuff: At what point will "ad blocking" flip to "content scrapping"? All this cat & mouse, arms race seems like a bad ROI. I imagine an adaptive super reader view mode. Meaning emphasis on content scrapping rules vs ad blocking rules. Take snapshots of top websites, do some rendered page aware content diffing, with some user directed setting & curation, infer where the content is, distill that down to "good enough" scrapping rules. Any way. Thanks for answering some of my lingering questions.
    - danShumway 6y ago
      I am not an expert on this stuff, I've just spent slightly more time reading some of the wikis than other people. Take what I say with a grain of salt, other people who are actually building ad blockers or managing blocklists would have more insight. If you want to swap from a blacklist model to a whitelist model, there are a couple of problems to solve off the top of my head: - you need a way to refer to content that supports re-hosting. You need a way to convert the Facebook/Twitter link someone shares into the scraped version without you loading the original link. See IPFS, but also see Invidious, Nitter, and the Internet Archive for a lower-tech, more straightforward version of what that might look like. - you need good enough copyright exemptions that it's OK to re-host or proxy the content somewhere else. This is kind of a gray area, people are rehosting web content without getting sued, but it's not clear to me if that's scalable moving from sites like Youtube to the Internet as a whole. I guess nobody's called to take down Pocket, so maybe the situation there is better than I think. - You need the web to stay relatively semantic. There are a lot of sites that don't work with Pocket/reader mode. A lot of the sites that do work are because there isn't a highly adversarial relationship between Pocket and site operators. I'm not sure whether a cat-and-mouse game around content scraping would be better or worse than what we have. I can imagine it would be better in the sense that you'd only need to do it once per page, and then distribute the scraped version. But that's assuming that copyright would allow you to do that. And I suspect that breaking a scraper is easier than breaking an ad blocker. But maybe someone could prove me wrong there.

stephenr 6y ago

> for example, there's no way to strip HTML content from a GET request I'm quite curious what legitimate use this has?

danShumway 6y ago
There are a couple of reasons, but the biggest one is that intercepting HTML at the network level allows you to filter inline script tags from documents[0]. If you want to stop an inline script from running (say to defuse an anti-adblocker popup/redirect), you can't wait until after it gets parsed to remove it. Once it gets added to the page, the browser will execute it. Of course, note that uBlock Origin also supports scriptlets[1] that can be used to rein in scripts after they get added to the page, instead of by doing resource rewriting. You're not restricted to only doing your filtering at the network level, HTML filtering is just another tool that filter authors have at their disposal. Helpfully, at the scriptlet wiki page I've linked each entry also shows a practical example rule that relies on the scriptlet. You can also take a look at the uBlock Origin's default filter lists[2] if you want more examples of people using both HTML filtering and scriptlets in the wild. Many of these block rules are impossible to implement in Safari. [0]: https://github.com/gorhill/uBlock/wiki/Inline-script-tag-filtering https://github.com/gorhill/uBlock/wiki/Inline-script-tag-fil... [1]: https://github.com/gorhill/uBlock/wiki/Resources-Library https://github.com/gorhill/uBlock/wiki/Resources-Library [2]: https://github.com/uBlockOrigin/uAssets https://github.com/uBlockOrigin/uAssets
- specialist 6y ago
  Nice ELI5s/TLDRs, thank you. Sharing notion (dumb question) here, since you're smart about this stuff: At what point will "ad blocking" flip to "content scrapping"? All this cat & mouse, arms race seems like a bad ROI. I imagine an adaptive super reader view mode. Meaning emphasis on content scrapping rules vs ad blocking rules. Take snapshots of top websites, do some rendered page aware content diffing, with some user directed setting & curation, infer where the content is, distill that down to "good enough" scrapping rules. Any way. Thanks for answering some of my lingering questions.
  - danShumway 6y ago
    I am not an expert on this stuff, I've just spent slightly more time reading some of the wikis than other people. Take what I say with a grain of salt, other people who are actually building ad blockers or managing blocklists would have more insight. If you want to swap from a blacklist model to a whitelist model, there are a couple of problems to solve off the top of my head: - you need a way to refer to content that supports re-hosting. You need a way to convert the Facebook/Twitter link someone shares into the scraped version without you loading the original link. See IPFS, but also see Invidious, Nitter, and the Internet Archive for a lower-tech, more straightforward version of what that might look like. - you need good enough copyright exemptions that it's OK to re-host or proxy the content somewhere else. This is kind of a gray area, people are rehosting web content without getting sued, but it's not clear to me if that's scalable moving from sites like Youtube to the Internet as a whole. I guess nobody's called to take down Pocket, so maybe the situation there is better than I think. - You need the web to stay relatively semantic. There are a lot of sites that don't work with Pocket/reader mode. A lot of the sites that do work are because there isn't a highly adversarial relationship between Pocket and site operators. I'm not sure whether a cat-and-mouse game around content scraping would be better or worse than what we have. I can imagine it would be better in the sense that you'd only need to do it once per page, and then distribute the scraped version. But that's assuming that copyright would allow you to do that. And I suspect that breaking a scraper is easier than breaking an ad blocker. But maybe someone could prove me wrong there.