2 ms·

I block the ads, how could I block this? Also, just because evil ad companies exist, why should we accept this?

by oefnak 3y ago

gabereiser 3y ago
You can't. Every call you make to a server includes your browser's user-agent/client-hints as well as your IP. Those cookie consent screens are provided by 3rd party but integrated via 1st party. So the company's website you visit doesn't even have to know it's going on, all they have to do is setup the MarTech correctly with the vendor and create a DNS entry. This, while being used to track you, could be used for good - it's not. Some companies are trying to own some of this to prevent nefarious uses of the data but in the end it's been the wild west of data tracking for the last 10 years or so.
- gabereiser 3y ago
  Challenge: Open up your favorite website (not HN :D) and watch the XHR's and network calls in your browser's devtools. How many of those are for the same origin? How many of those are ad calls being blocked by your extension (which also has access to your data)? How many of them are calls for a single pixel gif? Some javascript? favicon.ico? Do some spelunking on WHOIS for each of those domains. All it takes is one of them to proxy the headers. Proxy the headers and check if ad was served by looking at logs of both ad request and page request, if no ad request was found, require them to disable adblocker...
ignoramous 3y ago
Your Android would need to be connected to an external firewall at all times through which you can monitor and control traffic. pfsense / firewalla are some of the popular firewall devices. Don't forget to remove the SIM card (airplane mode isn't enough). May need a wifi / cellular jammer too, to be absolutely sure the device will always connect via home router / firewall. You could use an on-device firewall app, too; but OEMs / ODMs can always bypass it as they pretty much control not only the software but the hardware, as well.

I block the ads, how could I block this? Also, just because evil ad companies exist, why should we accept this?

by oefnak 3y ago

I block the ads, how could I block this? Also, just because evil ad companies exist, why should we accept this?

You can't. Every call you make to a server includes your browser's user-agent/client-hints as well as your IP. Those cookie consent screens are provided by 3rd party but integrated via 1st party. So the company's website you visit doesn't even have to know it's going on, all they have to do is setup the MarTech correctly with the vendor and create a DNS entry. This, while being used to track you, could be used for good - it's not. Some companies are trying to own some of this to prevent nefarious uses of the data but in the end it's been the wild west of data tracking for the last 10 years or so.

gabereiser 3y ago
Challenge: Open up your favorite website (not HN :D) and watch the XHR's and network calls in your browser's devtools. How many of those are for the same origin? How many of those are ad calls being blocked by your extension (which also has access to your data)? How many of them are calls for a single pixel gif? Some javascript? favicon.ico? Do some spelunking on WHOIS for each of those domains. All it takes is one of them to proxy the headers. Proxy the headers and check if ad was served by looking at logs of both ad request and page request, if no ad request was found, require them to disable adblocker...

ignoramous 3y ago

Your Android would need to be connected to an external firewall at all times through which you can monitor and control traffic. pfsense / firewalla are some of the popular firewall devices. Don't forget to remove the SIM card (airplane mode isn't enough). May need a wifi / cellular jammer too, to be absolutely sure the device will always connect via home router / firewall. You could use an on-device firewall app, too; but OEMs / ODMs can always bypass it as they pretty much control not only the software but the hardware, as well.