4 ms·

So what are potential uses of this, with Manifest v3 around the corner? Could this run as an nginx JS module and filter traffic at the network level in my home

by sbarre 4y ago

So what are potential uses of this, with Manifest v3 around the corner? Could this run as an nginx JS module and filter traffic at the network level in my home as a local proxy? I'm already running a Pi Hole, would this be overkill?

pierrebarre 4y ago
Shameless plug: https://github.com/Barre/privaxy https://github.com/Barre/privaxy It’s a proxy that does just this.
- sbarre 4y ago
  Thank you! Also, do we have the same last name?
- RunSet 4y ago
  This seems like just the thing to finally get adblocking in Steam's integrated browser.
  - sumtechguy 4y ago
    wait... you are using a site that advertises and sells things to disable adverts? I am not following the use case for ublock here?
    - CBarkleyU 4y ago
      Hm? No, they're probably using the integrated browser to browse the internet while being ingame. They're not talking about the store itself.
- antman 4y ago
  Could this be used per client ip or time frame? Thinking about children filter etc
  - SparkyMcUnicorn 4y ago
    MITM for HTTPS means you'll need to set up each machine with an additional cert. And for this project, you need to configure each machine to funnel through the proxy anyways. https://github.com/Barre/privaxy#local-system-configuration https://github.com/Barre/privaxy#local-system-configuration Personally, I use NextDNS which allows you to block categories, IPs, and use blocklists. It's set up on the network level, and I have two separate NextDNS "networks" configured. One for the entire network, one for "privileged" users/devices.
- GekkePrutser 4y ago
  But with a big privacy risk if anyone ever gets their hands on the root CA (which I hope is generated fresh in every install). Also, Android blocks user-installed CAs by default now, apps have to opt in to accept user-added ones. That makes it pretty useless. Not sure how iOS deals with this.
  - themoonisachees 4y ago
    Blocking ads on mobile has been a non-supportes use-case for a while. If you really want to get rid of ads on android, rooting enables you to patch system SSL routines to disable certificate pinning and more. IOS is an apple product.
aposm 4y ago
Well I'm sorry to be a broken record, but I think the best answer is to switch to a browser (and/or browser engine) that isn't trying to kill content blocking & user choice for profit.
- deleted 4y ago
  [deleted]
- charcircuit 4y ago
  Manifest v3 doesn't kill content blocking. It's the chrome web store that doesn't want to accept extensions that have broad permissions like being able to read and modify data from any site from install.
  - CommanderData 4y ago
    The motiviation is extremely suspect. Manifest v2 works and while there's a minority of user effected by scrupulous extensions the vast majority of the time it works fine.
- sbarre 4y ago
  Of course that is indeed the ideal path. If only we lived in an ideal world. But we do not, and we need to work with what we have. I do use Firefox for all my personal browsing, but on my work machine I am more or less required to use Chrome. And it's not even a Manifest v2/v3 issue for me, but our corporate security policies include a whitelist of allowed extensions, and ad blockers are not on the list. Don't get me started on how dumb that is from a security standpoint, given the crap that can sometimes come in via ad networks, but it is what it is.

by sbarre 4y ago

pierrebarre 4y ago

Shameless plug: https://github.com/Barre/privaxy https://github.com/Barre/privaxy It’s a proxy that does just this.

sbarre 4y ago
Thank you! Also, do we have the same last name?
RunSet 4y ago
This seems like just the thing to finally get adblocking in Steam's integrated browser.
- sumtechguy 4y ago
  wait... you are using a site that advertises and sells things to disable adverts? I am not following the use case for ublock here?
  - CBarkleyU 4y ago
    Hm? No, they're probably using the integrated browser to browse the internet while being ingame. They're not talking about the store itself.
antman 4y ago
Could this be used per client ip or time frame? Thinking about children filter etc
- SparkyMcUnicorn 4y ago
  MITM for HTTPS means you'll need to set up each machine with an additional cert. And for this project, you need to configure each machine to funnel through the proxy anyways. https://github.com/Barre/privaxy#local-system-configuration https://github.com/Barre/privaxy#local-system-configuration Personally, I use NextDNS which allows you to block categories, IPs, and use blocklists. It's set up on the network level, and I have two separate NextDNS "networks" configured. One for the entire network, one for "privileged" users/devices.
GekkePrutser 4y ago
But with a big privacy risk if anyone ever gets their hands on the root CA (which I hope is generated fresh in every install). Also, Android blocks user-installed CAs by default now, apps have to opt in to accept user-added ones. That makes it pretty useless. Not sure how iOS deals with this.
- themoonisachees 4y ago
  Blocking ads on mobile has been a non-supportes use-case for a while. If you really want to get rid of ads on android, rooting enables you to patch system SSL routines to disable certificate pinning and more. IOS is an apple product.

aposm 4y ago

Well I'm sorry to be a broken record, but I think the best answer is to switch to a browser (and/or browser engine) that isn't trying to kill content blocking & user choice for profit.

deleted 4y ago
[deleted]
charcircuit 4y ago
Manifest v3 doesn't kill content blocking. It's the chrome web store that doesn't want to accept extensions that have broad permissions like being able to read and modify data from any site from install.
- CommanderData 4y ago
  The motiviation is extremely suspect. Manifest v2 works and while there's a minority of user effected by scrupulous extensions the vast majority of the time it works fine.
sbarre 4y ago
Of course that is indeed the ideal path. If only we lived in an ideal world. But we do not, and we need to work with what we have. I do use Firefox for all my personal browsing, but on my work machine I am more or less required to use Chrome. And it's not even a Manifest v2/v3 issue for me, but our corporate security policies include a whitelist of allowed extensions, and ad blockers are not on the list. Don't get me started on how dumb that is from a security standpoint, given the crap that can sometimes come in via ad networks, but it is what it is.