3 ms·

OT, but is anyone here also redirected to "https://guce.advertising.com/collectIdentifiers?sessionId=3_cc-session_<session> https://guce.advertising.com/collect

OT, but is anyone here also redirected to "https://guce.advertising.com/collectIdentifiers?sessionId=3_cc-session_<session> https://guce.advertising.com/collectIdentifiers?sessionId=3_...", which gets blocked by µBlock Origin? It's a HTTP redirect. This only happens with my IPv6 landline internet connection (german carrier Telekom), via IPv4 mobile internet (T-Mobile) it loads fine. Happens with two different devices, so it shouldn't be a compromised device, Techcrunch TLS certificate is valid, so it also should not be a compromised router or my ISP. Are they A/B testing?

deleted 4y ago
[deleted]
markovbot 4y ago
Yeah, I'm getting this too. TechCrunch somehow managed to get even worse. edit: https://spectrum.ieee.org/pacman-hack-can-break-apple-m1s-last-line-of-defense https://spectrum.ieee.org/pacman-hack-can-break-apple-m1s-la... seems to cover the same thing with less spyware
jeroenhd 4y ago
Not on my side, but it wouldn't be the first time some third party advertising server would be serving malware. Malvertising will restrict itself to only some visitors to make sure it's not detected and blocked too quickly. The massive cookie wall I'm met with when opening this site makes it clear that it's probably impossible to determine which third party is responsible this time. You can read the article safely here: https://12ft.io/proxy?q=https%3A%2F%2Fweb.archive.org%2Fweb%2F20220610142204%2Fhttps%3A%2F%2Ftechcrunch.com%2F2022%2F06%2F10%2Fapple-m1-unpatchable-flaw%2F https://12ft.io/proxy?q=https%3A%2F%2Fweb.archive.org%2Fweb%... The web archive also seems to be redirected for some reason, though that might as well be intentional. Edit: thinking about it, this might also be an attempt to use first party tracking to bypass third party cookie restrictions. Maybe they're A/B testing a new advertising tool?
- Nextgrid 4y ago
  A domain "advertising.com" is basically the definition of malware. It's Yahoo/Oauth's spyware domain and as the URL suggests it "collects identifiers" presumably takes a browser fingerprint and sets tracking cookies.
- deleted 4y ago
  [deleted]
Rexxar 4y ago
I have this errors on techcrunch for years. I don't remember the last time I read something on this site.
ev1 4y ago
This is Techcrunch first-party native. If it can't set a third party tracking and fingerprint cookie, instead it will forcefully HTTP redirect you through that to drop a "first party" cookie. NB: techcrunch is basically advertising.com (via aol/yahoo/oath/verizon media/whatever else)
0daystock 4y ago
Your browser shouldn't even be capable of resolving advertising.com You can use https://github.com/StevenBlack/hosts https://github.com/StevenBlack/hosts as your hosts file, but even better is TLD and wildcard domain blocking with dnsmasq or dnscrypt-proxy.
deleted 4y ago
[deleted]

deleted 4y ago

[deleted]

markovbot 4y ago

Yeah, I'm getting this too. TechCrunch somehow managed to get even worse. edit: https://spectrum.ieee.org/pacman-hack-can-break-apple-m1s-last-line-of-defense https://spectrum.ieee.org/pacman-hack-can-break-apple-m1s-la... seems to cover the same thing with less spyware

jeroenhd 4y ago

Not on my side, but it wouldn't be the first time some third party advertising server would be serving malware. Malvertising will restrict itself to only some visitors to make sure it's not detected and blocked too quickly. The massive cookie wall I'm met with when opening this site makes it clear that it's probably impossible to determine which third party is responsible this time. You can read the article safely here: https://12ft.io/proxy?q=https%3A%2F%2Fweb.archive.org%2Fweb%2F20220610142204%2Fhttps%3A%2F%2Ftechcrunch.com%2F2022%2F06%2F10%2Fapple-m1-unpatchable-flaw%2F https://12ft.io/proxy?q=https%3A%2F%2Fweb.archive.org%2Fweb%... The web archive also seems to be redirected for some reason, though that might as well be intentional. Edit: thinking about it, this might also be an attempt to use first party tracking to bypass third party cookie restrictions. Maybe they're A/B testing a new advertising tool?

Nextgrid 4y ago
A domain "advertising.com" is basically the definition of malware. It's Yahoo/Oauth's spyware domain and as the URL suggests it "collects identifiers" presumably takes a browser fingerprint and sets tracking cookies.
deleted 4y ago
[deleted]

Rexxar 4y ago

I have this errors on techcrunch for years. I don't remember the last time I read something on this site.

ev1 4y ago

This is Techcrunch first-party native. If it can't set a third party tracking and fingerprint cookie, instead it will forcefully HTTP redirect you through that to drop a "first party" cookie. NB: techcrunch is basically advertising.com (via aol/yahoo/oath/verizon media/whatever else)

0daystock 4y ago

Your browser shouldn't even be capable of resolving advertising.com You can use https://github.com/StevenBlack/hosts https://github.com/StevenBlack/hosts as your hosts file, but even better is TLD and wildcard domain blocking with dnsmasq or dnscrypt-proxy.

deleted 4y ago

[deleted]