TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

uBlock Origin CNAME uncloaking now supports filtering by IP address

292 pointsby gslin8 months ago

10 comments

vifon8 months ago
The title seems to be wrong, uBlock Origin supported it for many years at this point (only on Firefox). This seems to be a refactor of that code, not a whole new feature.
评论 #41771825 未加载
评论 #41773992 未加载
评论 #41772666 未加载
jeanlucas8 months ago
It did not hit me yet, but I'm already rewriting my extensions to firefox to switch if Chrome really axes uBO
评论 #41771842 未加载
评论 #41772003 未加载
评论 #41771912 未加载
评论 #41777554 未加载
评论 #41772020 未加载
itohihiyt8 months ago
uBlock Origin is what makes Firefox even greater and definitely one big reason I use Firefox over Chrome etc. It make the Internet browsable.
评论 #41771703 未加载
评论 #41772184 未加载
评论 #41777422 未加载
RockRobotRock8 months ago
CNAME cloaking? Does this mean an ad site may use a randomly generated subdomain pointing to a wildcard record?
评论 #41771735 未加载
评论 #41771557 未加载
tyingq8 months ago
This a good example of why manifest v3 sucks. By definition, it can&#x27;t do anything like this...no live code hueristics are possible.<p>It&#x27;s a war of escalation with advertisers. Google is the arms dealer to both sides. They won&#x27;t give you what you would need to win.
评论 #41772524 未加载
评论 #41772359 未加载
评论 #41772322 未加载
lelandbatey8 months ago
As an example of what CNAME cloaking is, let&#x27;s say that a SAAS provider A wants to provide you, company Q, with fancy ad tracking software. In the olden days, they&#x27;d tell you to embed a script at e.g. <a href="https:&#x2F;&#x2F;A-ads-tracking.example" rel="nofollow">https:&#x2F;&#x2F;A-ads-tracking.example</a> into your website at address <a href="https:&#x2F;&#x2F;q-company.example" rel="nofollow">https:&#x2F;&#x2F;q-company.example</a><p>To block those ads, blocklists that uBlock Origin use have rules then that say &quot;block requests being made to the <i>domain name</i> A-ads-tracking.example&quot;, which blocks the ads.<p>CNAME cloaking is where SAAS provider A sets up their ad-tracking services not on domain A-ads-tracking.example, but instead at a specific IP address of e.g. 29.1.2.3; then (and here&#x27;s the important part) SAAS A tells you Company Q that <i>you need to set up a subdomain of q-company.example which has a CNAME record pointing to 23.1.2.3</i>, a subdomain with an innocuous name like media.q-company.example; once you&#x27;ve set up that CNAME, you at Company Q add a script tag to your website for `media.q-company.example` and now SAAS A is able to track all the users on your site. This indirection allows for effectively infinite cat-and-mouse on the part of you the owner of the Q Company vs the blocklists that the public assemble.<p>To get around this CNAME cloaking problem, the software powering extensions like uBlock Origin need to be able to see not only the destination domain of requests by browsers, but the underlying IP addresses of those domains as well. This commit makes that behavior possible, or at least is related to making that code work better.
评论 #41772077 未加载
评论 #41771715 未加载
评论 #41771817 未加载
Exuma8 months ago
Is chrome going to block uBO im never up to date on the latest. I do know theyre allowing 3rd party cookies now... so maybe theres a chance
评论 #41771863 未加载
评论 #41772079 未加载
评论 #41771764 未加载
评论 #41772546 未加载
评论 #41771695 未加载
tbrownaw8 months ago
Don&#x27;t some DNS servers implement something that acts like a server-resolved CNAME, where the admin puts in a record that points to some other DNS name but the client just sees an A (out AAAA) record?
评论 #41772182 未加载
taftster8 months ago
uBO has had this feature for awhile, since 1.34.0 (or 1.25.0 in advanced settings).<p><a href="https:&#x2F;&#x2F;github.com&#x2F;gorhill&#x2F;uBlock&#x2F;wiki&#x2F;Dashboard:-Settings#uncloak-canonical-names">https:&#x2F;&#x2F;github.com&#x2F;gorhill&#x2F;uBlock&#x2F;wiki&#x2F;Dashboard:-Settings#u...</a><p>I think that&#x27;s around 2021 time frame. FYI.
marcell8 months ago
What is the uBI status on Brave, Edge and Opera?
评论 #41771971 未加载