5 ms·
I decided to dump extension-based privacy stuff and installed Privoxy instead. I used to have Ghostery, Disconnect, ABP, and some other things running simultan
by mdellabitta 12y ago
I decided to dump extension-based privacy stuff and installed Privoxy instead.
I used to have Ghostery, Disconnect, ABP, and some other things running simultaneously. When you think about it, that's a lot of JS running and iterating the DOM multiple times every time you load a page.
Now there's a single, purpose-built, standalone process written in C doing it. Not going back.
- notsony 12y agoAny issues connecting to sites over SSL using Privoxy? I'm thinking mainly of banking web-sites.
- Nanzikambe 12y agoI've used Privoxy since late 2002 on a Linux gateway box - never had a single issue with SSL. In fact the only issue I've ever had was building it an forgetting to enable threaded mode ..
- mdellabitta 12y agoI don't recall any problems, but I use Foxyproxy to connect to it. In the worst case, you can just toggle it off quickly for that site, then turn it on again.
- deleted 12y ago[deleted]
- aerique 12y agoI used to run Privoxy for years and then came the time of AdBlock, NoScript, etc. Perhaps it is indeed time to look back again.
- sdfjkl 12y agoI've used Privoxy & friends (Glitterblocker on OS X) since the days of junkbusters.com, but with SSL on the rise this no longer works very well for me.
- X-combinator 12y agoAll I notice is that websites like Wired.com load faster with a ad-blocker.
- mdellabitta 12y agoPrivoxy blocks ads, too.
- 01Michael10 12y agoI agree, you had to many things running... What is the advantage of Disconnect when have ABP and Ghostery installed?
- ultramancool 12y agoDisconnect is an open alternative to Ghostery as Ghostery has some sketchy sponsors.
- 01Michael10 12y agoUnfortunately, Disconnect (new version is $5/month for any protection) is not as good as Ghostery and the sketchy part of it is Ghostrank which is easily disabled. Your answer was unrelated to my question... mdellabitta stated he was running Disconnect with ABP and Ghostery all together which is redundant and I was asking why he would be doing that.
- driverdan 12y agoWhat about when you're doing development work on a site that uses content you'd normally block (Analytics, ads, etc)? When I spend a day working I don't want to have to toggle Privoxy every time I want to search for something.
- dserodio 12y agoUse FoxyProxy and create rules that "whitelist" the sites you're working on
- Torgo 12y agoYou really probably want to use a separate browser profile with no plugins installed. It really sucks when you're trying to debug a problem and it turns out it's some combination of extensions you have installed causing the problem.
- Tobu 12y agoThis doesn't work with the push to HTTPS. Either you use proxy connect, and Privoxy is no better than /etc/hosts blocking. Or you'd rely on the proxy's poorer and slower implementation of TLS. Certificate verification will suffer (no certificate pinning, no certificate blacklist, no OCSP stapling, no way to verify incomplete chains), no SPDY, no sunsetting of bad ciphers or bad protocols.
- pekk 12y agoIs there some reason in principle why you can't constructively MITM yourself without using piles of Javascript in the browser?
- euid 12y agoThere is no reason in principle, and you can even do it for kicks.[1] The only issue here is a practical one, as the parent poster described: from an end-user perspective, browsers do SSL/TLS better than ad-blocking proxies. [1]: An example from the other side of the coin: http://www.wired.com/2010/03/packet-forensics/ http://www.wired.com/2010/03/packet-forensics/
- exadeci 12y agoDid you manage to make it work with skype ? (it seems that skype doesn't use the proxy parameters for ads)
- arthurfm 12y agoTo disable the banner ad you could add https://apps.skype.com/ https://apps.skype.com/ to your restricted sites list.[1] [1] http://www.reddit.com/r/LifeProTips/comments/27dihm/lpt_you_can_turn_off_the_annoying_skype_banner/ http://www.reddit.com/r/LifeProTips/comments/27dihm/lpt_you_...
- kogus 12y agoI've found it effective to just watch Skype with Fiddler, and add whatever ad servers it touches to my hosts file, and redirect them to 127.0.0.1 Entries like this work for me: #BEGIN: Skype ad servers 127.0.0.1 rad.msn.com 127.0.0.1 a.rad.msn.com 127.0.0.1 secure.adnxs.com 127.0.0.1 m.adnxs.com 127.0.0.1 ads1.msads.net #END: Skype ad servers
- Mandatum 12y agoUnfortunately HTTPS makes proxy-based privacy stuff unusable without invalidating your SSL/TLS certificate in the browser. Extensions are the only reliable method AFAIK for browsing ad-free, securely. That is, if you consider the extension secure.
- dsl 12y agoActually it can make your setup far more secure. You could move all SSL validation off to your proxy, and generate certificates from your own CA on the fly. Then within your browser or OS you can remove everything except your own CA from the trust store.
- Mandatum 12y agoThat would open up sniffing on your local machine/network would it not? I see the benefit of blocking malicious domains at a proxy or hosts file level. But aren't you sacrificing a lot of usability by blocking at a network level?
- pjc50 12y agoIt really ought to be possible to have a dynamic browser hook in Firefox's parsing phase to allow pre-manipulation of the DOM (or raw HTML) in native code. However actually finding the right spot in the giant codebase to do this is another matter.