Easylist Vs. Noscript?!
Easylist Vs. Noscript?!
OK. So recently, Giorgio Maone released a build of noscript that was breaking several other content-blocking extensions, most notably adblock plus.
NoScript forum members were quick to point out that this was happening. I pointed out just how bad it was by showing how it broke several other extensions as well.
two updates were issued, fixing the glitches. Things should've been fine, right?
-----------------------------------
Apparently not. OK, I'm with some of you in that I'm extremely suspicious that NoScript's so-called "glitches" only activated on sites that support noscript development. But I gave Giorgio the benefit of the doubt.
But some of you have not. According to the development version page at noscript.net/getit , EasyList's author(s) have launched a campaign specifically against noscript.net, hackacemix.net, flashgot.net, and informaction.com .
Is this true?
This is important because Giorgio has responded with what even I consider a major breach of ethics by including in his newest build a mandatory filterset whitelisting his sites (but you can disable them -- allegedly. I'm not trying the build).
Imagine if every extension author did this. What a cluster**** that would be, right?
I want to call a truce between easylist and noscript, but I will have to side with easylist because of one thing: noscript's "glitches" were specific only to Maone's sites. It really does seem suspicious.
Giorgio you have some 'splaining to do before a cease-fire can be called.
NoScript forum members were quick to point out that this was happening. I pointed out just how bad it was by showing how it broke several other extensions as well.
two updates were issued, fixing the glitches. Things should've been fine, right?
-----------------------------------
Apparently not. OK, I'm with some of you in that I'm extremely suspicious that NoScript's so-called "glitches" only activated on sites that support noscript development. But I gave Giorgio the benefit of the doubt.
But some of you have not. According to the development version page at noscript.net/getit , EasyList's author(s) have launched a campaign specifically against noscript.net, hackacemix.net, flashgot.net, and informaction.com .
Is this true?
This is important because Giorgio has responded with what even I consider a major breach of ethics by including in his newest build a mandatory filterset whitelisting his sites (but you can disable them -- allegedly. I'm not trying the build).
Imagine if every extension author did this. What a cluster**** that would be, right?
I want to call a truce between easylist and noscript, but I will have to side with easylist because of one thing: noscript's "glitches" were specific only to Maone's sites. It really does seem suspicious.
Giorgio you have some 'splaining to do before a cease-fire can be called.
- Adblock Plus Fan
- Posts: 1255
- Joined: Sat Feb 24, 2007 11:08 am
Re: Easylist Vs. Noscript?!
It's already in place as far as I can figure.asdf wrote:cease-fire
As of this writing, the redirects to circumvent Easylist has been removed and the filters targeting Giorgio's sites has been removed.
I don't think there's anything that can be done about this. If I'm guessing right, the whitelist is made in preparation for this: http://adblockplus.org/development-buil ... king-addedasdf wrote:This is important because Giorgio has responded with what even I consider a major breach of ethics by including in his newest build a mandatory filterset whitelisting his sites (but you can disable them -- allegedly. I'm not trying the build).
Since the Easylist circumvention only has limited lifetime left.
ABP video download trick / Want to help? Test new builds/report bugs you find.
Re: Easylist Vs. Noscript?!
Wrong. Recently, Giorgio Maone released a build (or three) of NoScript that contained obfuscated code to go specifically after Adblock Plus and manipulate it in such a way that ads on Giorgio's sites can no longer be blocked. That's not a speculation, I found that code and analyzed it - and asked Giorgio to remove it immediately.asdf wrote:So recently, Giorgio Maone released a build of noscript that was breaking several other content-blocking extensions, most notably adblock plus.
That's only one part of the picture. Giorgio's sites used tricks to prevent Adblock Plus from blocking ads there. EasyList author decided that this went on long enough and blocked specifically Giorgio's ad scripts on these sites. At which point Giorgio decided to use more tricks - which resulted in more site-specific rules on EasyList side.But some of you have not. According to the development version page at noscript.net/getit , EasyList's author(s) have launched a campaign specifically against noscript.net, hackacemix.net, flashgot.net, and informaction.com .
I agree - even though this is still much better than his previous solution (which I would consider as malware given that it manipulates an unrelated extension without even informing the user). Not that any of this is really new - NoScript has been shipping with whitelists for Giorgio's own sites for years. At some point I even demonstrated that these sites are susceptible to XSS attacks and put users at risk - just for the sake of displaying Giorgio's ads.This is important because Giorgio has responded with what even I consider a major breach of ethics by including in his newest build a mandatory filterset whitelisting his sites
Re: Easylist Vs. Noscript?!
You're halfway right. The redirects have been removed, but the seven EasyList filters which target Giorgio's sites still remain and break some of the content that isn't ad related. Reported by MonztA and me in the EasyList and NoScript forums.Adblock Plus Fan wrote:As of this writing, the redirects to circumvent Easylist has been removed and the filters targeting Giorgio's sites has been removed.
- Adblock Plus Fan
- Posts: 1255
- Joined: Sat Feb 24, 2007 11:08 am
Re: Easylist Vs. Noscript?!
Actually they don'tAlan wrote:and break some of the content that isn't ad related.
If you examine the blockable items list, you'll see the scripts that are blocked are what's supposed to be blocked to begin with.
Yeah I guess I spoke too soon without examining it closer in the list itself. But in any case as you can see from the screenshot, none of the currently active filters are targeting. Then at this point, I assume the request of removal of those filters is more of a symbolic thing? Because none of his locally served scripts are being blocked.Alan wrote:but the seven EasyList filters which target Giorgio's sites still remain
As it stands the filters in Easylist doesn't hit anything and are essentially useless so they'll probably get removed soon.
ABP video download trick / Want to help? Test new builds/report bugs you find.
Re: Easylist Vs. Noscript?!
I think you're looking at the wrong page, Fan. Look at the NoScript get it! page. The link to the development build is hidden by one of the filters. It is blocked by noscript.net#*(href*=informaction.com)(href*=noscript). Reported by MonztA at http://forums.lanik.us/viewtopic.php?p=15169#p15169 two days ago.
- Adblock Plus Fan
- Posts: 1255
- Joined: Sat Feb 24, 2007 11:08 am
Re: Easylist Vs. Noscript?!
Alan wrote:The link to the development build is hidden by one of the filters. It is blocked by noscript.net#*(href*=informaction.com)(href*=noscript). Reported by MonztA at http://forums.lanik.us/viewtopic.php?p=15169#p15169 two days ago.
Works fine for me...
Maybe it's because I'm using version 1.9.2.2 which might have crippled ABP so element hiding doesn't work?
Either way your point stands I guess.
So I was wrong, it's still going on:
The stable/official noscript build is still crippling ABP.
And the Easylist is still retaliating the sites.
But it's just a matter of time before these both are resolved in the end.
ABP video download trick / Want to help? Test new builds/report bugs you find.
-
- Posts: 126
- Joined: Wed Dec 24, 2008 1:15 pm
Re: Easylist Vs. Noscript?!
I tried NoScript yesterday and noticed that ads on the author's web site were not blocked. There being no way to block them I immediately removed that extension never to be reinstalled.Wladimir Palant wrote:Recently, Giorgio Maone released a build (or three) of NoScript that contained obfuscated code to go specifically after Adblock Plus and manipulate it in such a way that ads on Giorgio's sites can no longer be blocked.
-
- Posts: 10
- Joined: Wed Nov 12, 2008 7:31 pm
- Location: Germany, Baden-Wuerttemberg
- Contact:
Maone seems to look for a better 'donation'...
Well, as long as Maone don't realize that he made a mistake becoming corrupt, his AddOn's are suspect for me in every aspect. I often found that people with such an understanding of integrity and trust 'develop' their rare point of view... and not always in a way to become trustworthy again. Corrupt people usually don't even realize their sickness, which makes some of them becoming much more than only a nuisance (since they believe in their so called 'rights').
Egoism is sick!
Egoism is sick!
Re: Easylist Vs. Noscript?!
I wanna be the only one who add filters/filter subscriptions.Wladimir Palant wrote:Wrong. Recently, Giorgio Maone released a build (or three) of NoScript that contained obfuscated code to go specifically after Adblock Plus and manipulate it in such a way that ads on Giorgio's sites can no longer be blocked. That's not a speculation, I found that code and analyzed it - and asked Giorgio to remove it immediately.asdf wrote:So recently, Giorgio Maone released a build of noscript that was breaking several other content-blocking extensions, most notably adblock plus.
This feels like a security hole.
Can you make sure that other addons can't add filters.
- Adblock Plus Fan
- Posts: 1255
- Joined: Sat Feb 24, 2007 11:08 am
Re: Easylist Vs. Noscript?!
To clarify, the part you quoted refers to code in Noscript which cripples ABP.Fox wrote:I wanna be the only one who add filters/filter subscriptions.
This feels like a security hole.
It is unrelated to the new Aids that Noscript is now injecting into ABP. Two different issues.
ABP video download trick / Want to help? Test new builds/report bugs you find.
- Adblock Plus Fan
- Posts: 1255
- Joined: Sat Feb 24, 2007 11:08 am
Yeah, I understand how you feel.Fox wrote:But this feels like a security hole, because i did not add that subscription, NoScript did.
To add to your concern, you can't even delete the injected Aids, it'll reappear after a browser restart. You can only keep it disabled.
ABP video download trick / Want to help? Test new builds/report bugs you find.
When you install an extension in Firefox, you basically give it permission to do anything on your computer. ABP could try to make things harder for other extensions (and I think it would be a good move if ABP started to prompt the user when other extensions added a subscription just as it is asking when the user manually adds a subscription). But in the end there's no way to prevent other software from tampering with Adblock Plus...
Looks like this is already done...Dr. Evil wrote:When you install an extension in Firefox, you basically give it permission to do anything on your computer. ABP could try to make things harder for other extensions (and I think it would be a good move if ABP started to prompt the user when other extensions added a subscription just as it is asking when the user manually adds a subscription). But in the end there's no way to prevent other software from tampering with Adblock Plus...
Quote from http://adblockplus.org/development-builds/Changed the way “add subscription” links work, these can now only be triggered by user clicking a link