Ask HN: What's the best setup for ad blocking and tracker blocking?

277 点作者 whitepoplar超过 5 年前

I currently use uBlock Origin + Privacy Badger, but I've become frustrated with having to disable one or both of the above for too many sites--they just break functionality for a good chunk of the web. What's the best setup these days for ad-blocking + privacy/tracker-blocking that doesn't break the web? Thanks!

65 条评论

Fnoord超过 5 年前

I recommend multiple layers. Why? Because some devices/apps will circumvent one of these layers one way or another.I use Pi-Hole plus WireGuard to route all my devices through my home broadband connection (so even on a hotel/train WiFi, when on LTE, etc). I forward it to Unbound which uses DNSSEC and DNSCrypt. I'm using an EdgeRouter Lite for that purpose. It does add a little bit of latency, but I don't mind, as it also increases my privacy on the insecure link. It also works on say a smart TV or an official Android device (I use a rooted Android device with microG which doesn't implement GAds). My partner sees barely any ads at home due to this setup (I did not bother to setup WireGuard on her smartphone as of yet).On each individual client device I also use a layer 7 firewall ("personal firewall"). On macOS I use Little Snitch and LuLu. On Linux I use OpenSnitch. I don't use Windows, but if I would I'd at least remove all the tracking stuff (for example with O&O ShutUp). On Android, I don't use a layer 7 firewall which is my bad.For browser, on every OS I use a configured Firefox (which I did NOT document; my bad!) with a bunch of addons. uBlock Origin (mainly to manually block "you are blocking ads" notices). I use uMatrix, Cookie AutoDelete, Smart Referer, Privacy Badger, Decentraleyes, HTTPS Everywhere, containers for Amazon/Facebook/Google (would like to add Microsoft), CanvasBlocker, Tracking Token Stripper, Forget Me Not, Terms of Service; Didn’t Read, and Buster: Captcha Solver for Humans.uMatrix will break the web. However it is more user-friendly than NoScript ever was. You are going to have to configure such. For websites you regularly use, you can save the temporary changes, or just not use such bloated websites. Also, I recommend the addon Dark Reader and the feature Reader Mode.To test your setup on your browser, try ipleak.net. One of the things I configured in Firefox, is to disable WebRTC. I don't use an addon for that.

评论 #20786382 未加载

评论 #20786907 未加载

评论 #20792556 未加载

评论 #20786617 未加载

tyfon超过 5 年前

I have "pi-holed" my openbsd router using both ip blocklists for the firewall and dns blocklists for unbound that refresh automatically every night.All my clients run firefox with ublock origin and https everywhere. I ran no script for a while but it is quite painfull to manually allow scripts on a lot of pages so I think I have found a nice balance. I have also turned off wasm support in firefox.If a site doesn't work with the above or shoves large nasty inline popups with "we value your privacy" etc and do not show a clear reject button I leave.edit: I also pay subscription to most of the websites I use often that support payment and if they don't I email them and tell that I don't want ads and that I'd like to pay for it. Usually one can come to an arrangement.

评论 #20784541 未加载

评论 #20786144 未加载

评论 #20785976 未加载

评论 #20783957 未加载

评论 #20784203 未加载

stubish超过 5 年前

If uBlock Origin + Privacy Badger give you too many problems, what you are after is a worse setup. You want a less aggressive system that allows the ad-tech that those sites are relying on to work, which will also allow that ad-tech to display some ads and invade some privacy, but its a perfectly reasonable choice.Personally, I use uBlock Origin + Privacy Badger (and NoScript for work, per policy). In most cases, if a site doesn't work I've realized I really don't want to be there (and the Internet is likely better off without adding my rant to the comments section of that click bait article I really shouldn't be wasting my time with). It is fairly rare to find a broken site and rarer still to actually need to use it (airlines are the worst), so I don't sweat the time to temporarily disable protection or work out the white list.

评论 #20786416 未加载

评论 #20786628 未加载

ignoramous超过 5 年前

The best setup acc to me for web is Firefox + uMatrix + CanvasBlocker + WebRTC Blocker + DecentralEyes + HTTPS Everywhere + Smart Referrer + StartPage / DuckDuckGo + any DNS over HTTPS provider of your choice. Be prepared for the recaptcha time sink. You could turn on Firefox's resistFingerpriting setting, too. Use Brave or Bromite as an alternative browser for websites that break.For phones, you could run DNSCloak with AdGuard DNS (iOS) or Blokada (Android). There's AdGuard Pro, Lockdown Firewall, and Guardian VPN+Firewall for iOS that are super neat.NoRoot Firewall, NetGuard, and GlassWire Firewall for Android that I've found to have acceptable privacy policies. LittleSnitch or LuLu Firewall for Mac, GlassWire Firewall for Windows are some of the other options.Pi-Hole your routers too for other devices connecting to Internet.

评论 #20786197 未加载

评论 #20786633 未加载

dantondwa超过 5 年前

Apart from the usual recommendations, to Firefox users I recommend enabling first-party isolation by setting "privacy.firstparty.isolate" to true. In this way, the data of every website will be isolated from each other. It is like the Facebook/Google container extension, but for every single website there is. It has yet to break something after one year of use and it has certainly made my browsing feel much less invasive.

评论 #20786806 未加载

keiraarts超过 5 年前

I've been using <a href="https://www.nextdns.io" rel="nofollow">https://www.nextdns.io</a> for the last month.It's PiHole as a Service.

评论 #20783838 未加载

评论 #20786428 未加载

评论 #20785712 未加载

评论 #20783906 未加载

评论 #20785396 未加载

评论 #20783847 未加载

评论 #20785325 未加载

rococode超过 5 年前

I'm curious, what websites are breaking for you? I use the same (+ Facebook Container) and I rarely notice breakage. PrivacyBadger is the only one that's broken something for me before (image links from a CDN), I can't recall uBlock Origin ever breaking a site for me unless the site has an anti-adblocker.If you're talking about the "please disable your adblocker to continue" messages, you can consider something like Anti Adblock Killer [1] which can help bypass those kinds of blocks.As far as the best setup I think what you have is fairly close to "the best" already without getting more hands-on. You can check out Pi-hole which I've heard is superior, but harder to setup [2].[1] <a href="https://github.com/reek/anti-adblock-killer" rel="nofollow">https://github.com/reek/anti-adblock-killer</a>[2] <a href="https://pi-hole.net/" rel="nofollow">https://pi-hole.net/</a>

评论 #20784199 未加载

评论 #20794129 未加载

评论 #20783736 未加载

gorhill超过 5 年前

> I've become frustrated with having to disable one or both of the above for too many sites--they just break functionality for a good chunk of the webFor uBlock Origin[1], the best solution is to report the breakage to filter list maintainers.Keep in mind that all the lists are community-contributed, with filtering issue addressed as users report them. So you benefit from these when using a content blocker making use of these community-maintained lists.So when you report a broken site and that as a result the lists are updated, then you contributed back to have the issue addressed for others as well when they visit the site.The basic default lists/settings should have minimal breakage issues.* * *[1] Side note: uBO is a content blocker, not an "ad blocker" -- I never ever referred to uBO as an "ad blocker". I consider this an important distinction.

forgotmypw3超过 5 年前

Edit: I forgot to mention the most important piece: When a site says that it won't work without JS, I accept this and close the tab. Unless it's Google Maps.My browser has built-in URL-based filters.I browse with JS disabled except for a handful of sites, which I enable for the session whenever I need it.My browser makes it easy, with a three-key shortcut to toggle it.This is about the extent of it.I used to use uBO, which I still think is great, and enough for more Chrome and Firefox users. Many blessings to its maintainer.

评论 #20814034 未加载

codezero超过 5 年前

General advice: make sure you have a solution on all platforms. TV, IoT, phone on wifi, phone on mobile network, etc...At home you need to first subvert your ISP.Make sure you have a router doing blocking, like a PiHole. For mobile devices always use a VPN and DNS protection like dns-crypt. Use Cloudflare’s mobile DNS over HTTPS solution even though that’s a single point of failure, decide for yourself how risky you think that is.Besides browser specific plugins you should implement a host block. The host block lists are not too exhaustive so if you use dns-crypt configure it to log every dns request and add any new hosts to your block list that look surprising.It’s a lot of work, but if that’s what you’re looking for you may find some fun ways to automate this workflow :)

tambeb超过 5 年前

For mobile I use <a href="https://blockerdns.com/" rel="nofollow">https://blockerdns.com/</a> (full disclaimer: that's my creation). It's ad blocking through DNS-over-TLS on Android 9 and above.For home I just run my own bind DNS servers internally. And then for friends and family I have them set their routers to a couple bind DNS servers (same config as my internal ones) in the cloud.For all of the above I use the same block list. It currently has about 25k entries, and is built with some data from a few of the well known public lists. But I augment that with domains I find by regularly auditing specific websites that are particularly aggressive with ads and specifically trackers.But with that said, since I've got friends, family and paying users working from that list, I do actively try to prevent the breaking of popular sites and services. For example, personally I'd outright block anything related to Facebook since I quit them years ago, but too many people still use it, so for my list I try to keep a good balance by blocking their pixel and stuff like that, while allowing the resources absolutely necessary for the site.

评论 #20785205 未加载

评论 #20786233 未加载

评论 #20784054 未加载

murat124超过 5 年前

The best setup is cli browser links or lynx.Next best is Firefox with uBlock Origin, uMatrix, Privacy Badger, Cookie Autodelete, Decentreleyes, and a bunch of about:config alterations. Some sites will break. If a site breaks I either forget about it or open it in incognito.

评论 #20791903 未加载

ElFitz超过 5 年前

On macOS I mostly use LittleSnitch, with a few lists, then manually add trackers and calls to weird domains made by apps that shouldn't make them. Upside is, it's system-wide.Wrote a post about that <a href="https://weekly.elfitz.com/2019/02/12/block-ads-and-trackers-on-your-mac-with-little-snitch/" rel="nofollow">https://weekly.elfitz.com/2019/02/12/block-ads-and-trackers-...</a>But the best setup (still haven't done it) would probably be pi-hole, remotely accessible over some vpn (because you don't want to manage what would otherwise amount to a publicly accessible DNS server). It would cover all your apps and devices.

z_open超过 5 年前

My setup is Firefox with the usual about:config modifications (search for it)uMatrixAd NauseumSmart RefererDecentralized Eyeshttps everywhereCookie autodeleteVPN with ipv6 turned off since they don't reroute thatWith uMatrix I also block all first party cookies and scripts by default and white list as needed.This only breaks websites the first time you visit them. Only thing that becomes an issue is uMatrix but as you Whitelist the sites you need it just ends up not being a big deal.

评论 #20783613 未加载

sathomasga超过 5 年前

I'm mildly surprised that no one has mentioned [Better](<a href="https://better.fyi" rel="nofollow">https://better.fyi</a>). Works very well for me.The pitch:Better uses our own list of blocking rules, curated and maintained by Ind.ie. We use the principles of Ethical Design to decide what should be blocked. This is our only blocking criteria, advertisers cannot pay us to compromise our integrity and unblock them.Better does not block respectful ads. Respectful ads respect human rights, human effort, and human experience. For an example of respectful ads, see The Deck network, winner of our first Cloud of Fame award.

评论 #20786610 未加载

评论 #20786748 未加载

jkfd73bls9超过 5 年前

<a href="https://technitium.com/dns/" rel="nofollow">https://technitium.com/dns/</a>You block domains at the dns, you can download a variety of block lists and you can also create your own. You can log the dns lookups to find out what domains are being used which can be used to further create a block list. The advertising code and tracking code never gets downloaded. Runs on the window pc so you don't have to worry about making changes to anything else upstream, great for laptops and road warriors who use a variety of internet connections.

jacobheric超过 5 年前

I use firefox with ublock origin and privacy badger and I can't recall the last time I ran into a site that was broken because of it. But, I visit a fairly narrow section of the internet regularly so there might not be much overlap between what I browse and you browse.I also use the multi-account container add on and the temporary container add on. This allows me to pin a few big sites to their own containers (google, amazon, etc) and open all other new tabs in temporary containers. This setup works great and appears to help keep firefox fast over time. I use duck duck go to search but firefox makes it trivial for me to re-run a search with google if I need to.I also run an ad blocking vpn on google cloud using Algo. I use google cloud because the vpn can run on the permanently free tier and I only pay for network traffic (which is near zero), and I also enjoy the irony of it. I have wireguard clients setup on all of my devices to use the vpn either permanently (phone) or on demand (laptops). Having this vpn is nice as it makes it easy to block ads in apps on my kids mobile devices.This vpn setup works ok but not quite as well as when I ran the same thing using Streisand and open vpn clients. I only say this because I have a homebrew whole-house audio setup with a bunch of google audio chromecasts and no matter how I tweak the wireguard client settings I cannot get that casting to work properly. With open vpn clients, those settings are a cinch.

评论 #20786968 未加载

评论 #20787199 未加载

craze3超过 5 年前

I'm also curious about this. A couple years back, I switched from 'AdBlock Plus' to 'uBlock Origin' and the difference was night and day (it blocked SO many more ads).I've been out of the game for awhile, so I'm wondering what beats uBlock nowadays... Any recommendations?

评论 #20785348 未加载

评论 #20783629 未加载

评论 #20783594 未加载

euske超过 5 年前

Although this isn't exactly blocking, I tend to use Reader View a lot these days. I installed an extension that allows to force using it for any page, and I wish that FF made it default.

评论 #20786151 未加载

plg超过 5 年前

A Raspberry Pi running Pi-hole[1] works really well in my household. We have 20+ devices and 2 adults, 2 kids, connecting to a combination of wifi and ethernet and all get DNS automatically assigned to the Pi-hole. I routinely see ~ 20-30% of all outgoing DNS requests blocked by the Pi-hole.Note you don't need a Raspberry Pi to run Pi-hole, you can run it using a Docker image too.[1] <a href="https://pi-hole.net" rel="nofollow">https://pi-hole.net</a>

评论 #20786879 未加载

diafygi超过 5 年前

I'd recommend starting with Firefox, and configuring Firefox's cookie settings to always block third party cookies.Next, if you have a good password manager that can auto-fill logins, set Firefox to delete all cookies (and everything else) when you close the browser. That way, every time you open your browser you're starting from a clean slate. I promise you'll quickly get used to logging in every time, and it won't be that hard.Next, enable Firefox's Multi-Account Containers add-on. This basically allows you to isolate sites you commonly use into their own cookie realms. Create containers for the sites you want to isolate (Google, Facebook, LinkedIn, etc.) and set those domains to always open in that domain's container. That way, when you click on a link to Facebook it will auto open a new tab in that Facebook container.Next, install uBlock Origin. I don't think there's a need to install Privacy Badger since you're already blocking third party cookies, but others please correct me.Next, for websites that don't work with uBlock Origin, create a dedicated container for that domain and set to always open in that container. Then, whitelist in uBlock Origin whatever tracker on that site you need to run things properly. That way, the tracker is isolated to just that domain's container.Overall, Firefox's Multi-Account Containers are extremely powerful for isolating site cookies and trackers. I wish they would allow you to set different cookie settings per container, so you could by default clear cookies when you close Firefox and add exceptions for specific containers, but even given that deficiency, is still the most powerful browser feature that's come out since tabs.

ankit219超过 5 年前

Might not be the best setup, but this gives me minimal issues.1/ Chrome browser with extensions - Disconnect (<a href="https://disconnect.me/" rel="nofollow">https://disconnect.me/</a>), Ad blocker, and Anti-Adblock killer script with Tamper monkey.2/ Cookies disabled by default.3/ Any sites which refuses to function without them, open in incognito or guest window.This gives me minimal problems. Most of the tracking is out via Disconnect, many ads are blocked automatically, and the remaining ones I block manually. I will definitely be tracked by a few websites and third-parties, but this gives me a better balance than just focusing on complete block.To add to it, google provides you an option for not recording searches and location. Also, keep deleting cookies regularly for the ones you have enabled.

tofu_ink超过 5 年前

I use that setup + a hosts block file, and i recently started using a pi-hole. I also use stylus to block a few custom elements and change themes for a few sites. I mostly visit news sites and some random sites.The only issues i have had have been on pinterest. What sites do you have issues on?

评论 #20784242 未加载

XzetaU8超过 5 年前

IMO uBlock Origin in Medium blocking mode is the best "less is more" setup.[1]: "uBlock Origin in Medium mode for Lighter and Stronger Protection, with Less websites breakage and hassle"<a href="https://malwaretips.com/threads/ublock0rigin-in-medium-mode-for-lighter-and-stronger-protection-with-less-websites-breakage-and-hassle.93311/" rel="nofollow">https://malwaretips.com/threads/ublock0rigin-in-medium-mode-...</a>[2]: Blocking mode: medium mode<a href="https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode" rel="nofollow">https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium...</a>

ropiwqefjnpoa超过 5 年前

Currently using Brave Browser, AdBlock Plus and Privacy Badger. For my daily usage, I only have a few sites I need to whitelist.

评论 #20785494 未加载

评论 #20786042 未加载

t0astbread超过 5 年前

I use a slightly customized version of the Energized Protection[1] block list, which acts as a DNS sinkhole but is really just a text file that you paste into /etc/hosts. Before that I was using Pi-Hole but I found it too cumbersome to maintain properly. (Additionally /etc/hosts entries are way easier to scan, modify and verify for non-maliciousness IMO.)In my browser I use uMatrix since it gives me fine-grained control over what websites can do. I have very strict default policies that break most sites but you can set them to whatever you want.Additionally I've written my own regex-based request blocker[2] for YouTube midroll- and page ads since I don't trust other, more opaque ad blocking solutions that handle those (like AdBlock Plus). It does break all other Google services I'm aware of however. (Which I could patch but I don't really mind.)[1]: <a href="https://github.com/EnergizedProtection/block" rel="nofollow">https://github.com/EnergizedProtection/block</a> [2]: <a href="https://addons.mozilla.org/en-US/firefox/addon/ytblocker" rel="nofollow">https://addons.mozilla.org/en-US/firefox/addon/ytblocker</a>

评论 #20784268 未加载

评论 #20784343 未加载

KiDD超过 5 年前

I use a custom built pfSense router running pfBlocker. The web broken, websites that won't function without adtracking doesn't deserve to be visited.

alecco超过 5 年前

Besides disabling JavaScript you can put hosts file blocklists. This is much faster.Simple corporation block list (e.g. Facebook, Google) <a href="https://github.com/jmdugan/blocklists/tree/master/corporations" rel="nofollow">https://github.com/jmdugan/blocklists/tree/master/corporatio...</a>"Someone Who Cares" list <a href="http://someonewhocares.org/hosts/" rel="nofollow">http://someonewhocares.org/hosts/</a>Ultimate Hosts Blacklist: 1 million blocked domains (once in a while you might need to unblock something) and also a bonus known hacking IP blocklist (prevents common hacking sources). <a href="https://github.com/mitchellkrogza/Ultimate.Hosts.Blacklist" rel="nofollow">https://github.com/mitchellkrogza/Ultimate.Hosts.Blacklist</a>If you have iOS device install an ad blocker app like AdBlock Fast, this plugs to practically all web sessions in the phone.

calmchaos超过 5 年前

Cookiebro is a great cookie manager since it supports both blacklist and whitelist and can even block single cookies. It also has a built-in Cookie Editor and Cookie Log for monitoring which sites are trying to set cookies.<a href="https://nodetics.com/cookiebro/" rel="nofollow">https://nodetics.com/cookiebro/</a>

hprotagonist超过 5 年前

at home, <a href="https://pi-hole.net/" rel="nofollow">https://pi-hole.net/</a> on the go, i use some combination of ublock, noscript, and their equivalents

cassianoleal超过 5 年前

pi-hole over ZeroTier so I can get it wherever I am and latest Firefox with the most secure custom privacy setup. Nothing seems to break but I don't use things like Facebook and Twitter so wouldn't know about them (seems pointless to try to stay private if you're on them anyway.)

idrock超过 5 年前

PiHole + Little Snitch + JSBlocker on macOS MojaveJSBlocker is cranked up to to the max - no inline JS, or frames or videos, etc. Then as I go about info surfing I progressively enable services that are vetted like some content delivery services, common JS frameworks, etc.Makes the web actually tolerable.

jamesponddotco超过 5 年前

I posted this somewhere else before, so I will just repost as the answer did not change that much.I use Safari with JS and cross-tracking disabled on macOS and iOS, Firefox with a custom user.js on elementaryOS. I enable JS only when necessary — looking at you, Help Scout.For actual blocking, I run a Pi-hole on a VPS that connects to multiple DNSCrypt servers that I control, which block everything I want while improving privacy. Planning on replacing Pi-hole with AdGuard Home for DNS over HTTPS and DNS over TLS, since I want to have this server public at some point, for others to use.If anyone is interested in testing, shoot me an email at root@jamespond.co. No logging, DNSSEC, disk encryption, Canonical Livepatch, 24/7 monitoring and completely open source.:)

garbre超过 5 年前

I'm using that exact setup and I can't remember when it broke anything. Now uMatrix breaks everything, but that may be for the best. If the modern web is working, you're the product.

Shanesor超过 5 年前

Check out the no script Firefox add on. If u go to a website that pops up a big screen saying disable ad block u can right click the screen blocking and remove it and bam website works perfect

Farfromthehood超过 5 年前

AdGuard for Android works fairly well. I may spring for the premium version.Elsewhere I use LittleSnitch on my Mac, followed by Firefox (w/associates plugins like everyone else).

6gvONxR4sf7o超过 5 年前

Cookie Autodelete is a good one. Simple to configure what cookies you want. Doesn't get in the way while still deleting the cookies you don't opt to keep.

SylvieLorxu超过 5 年前

I use a Pi-Hole and on top of that uBlock Origin. Seems a pretty nice combination. For privacy though, you need to know what level of privacy you're aiming for. At a certain point, adblockers and tracking protectors won't help and you're better of with something like Tor. For like, general daily use though, I very much recommend a Pi-Hole + uBlock Origin. Oh, and Firefox, not Chrome, for obvious privacy reasons.

sdan超过 5 年前

<a href="https://someonewhocares.org/hosts/" rel="nofollow">https://someonewhocares.org/hosts/</a> and AlgoVPN

DanieI超过 5 年前

I use Brave browser plus adguard dns. They support dnscrypt and I've got it enabled on my OpenWrt router. Adguard does break the internet a little bit because they block those tracking links that quickly redirect you to the website that you wanted to go to. I think that the Pi-hole is a better option if you need or want to do any personalized customization to your block list.

jmartinpetersen超过 5 年前

I'm not that paranoid and I don't really care about blocking ads, just the most egregious tracking. So I use Disconnect and rarely see ads or "please disable your ad blocker", and when I do see ads, I just shrug it off.I don't know how efficient it is for tracking, but at least I have the moral high ground of going after blocking tracking, not ads in general ...

jszymborski超过 5 年前

so, this isn't for everyone, but I like the uBlock Origin + uMatrix combo.This will break a lot at first, but uMatrix allows you to build a whitelist easily, and slowly over time website won't be broken half as much, and it'll be exceptionally rare for you to have to disable the whole extension whenever you want things to get working again.

评论 #20783868 未加载

subbz超过 5 年前

I'm using Firefox with uBlock Origin (+ social network blocking lists), Decentraleyes and Firefox Multi Account Containers.I put every "big data" collector (Google, FB, etc.) in a single container using FMAC.(And to be honest: I tried uMatrix but it was too work intensive.)

kyriakos超过 5 年前

Pihole unfortunately doesn't block YouTube ads anymore. Anyone found a solution for that?

jvagner超过 5 年前

UBlock Origin on Mac and 1Blocker X on iOS. Pretty happy, only have to whitelist occasionally. But it’s usually a surprise and I struggle until I realize one of my blockers is interfering with a site I want access to.

true_tuna超过 5 年前

Pihole on a raspberry pi ZeroW and ublock origin for desktop and Adblock plus for mobile.I love ublock’s ability to easily block individual elements of a page such as distracting video or moving crap.

3xblah超过 5 年前

What are the sites that are not "working" with your setup?

Sir_Cmpwn超过 5 年前

I use uBlock Origin and disable JavaScript by default, then instead of enabling those things when sites break, I choose to be more discerning about the websites I visit instead.

enz超过 5 年前

The following doesn't break my everyday browsing:uBlock Origin, Decentraleyes, httpseverywhere, DNS over HTTPS (currently Cloudflare, but plan to use my own resolver soon)

earenndil超过 5 年前

I honestly get relatively little site breakage; so I'm just fine with that. But if you're having issues I would suggest reek anti-adblock killer.

lota-putty超过 5 年前

Setups which are data sinks giving minimal info about end users are the best.If you outsource processing/filtering, that data has commercial value eventually.

andrethegiant超过 5 年前

I use Pi-hole on the network level, then 1Blocker as a content blocker. It blocks add and analytics trackers, and works on macOS and iOS.

tssenek超过 5 年前

z_open's setup is really good. Very similar to mine. A site that has helped me learn enormously about this is privacytools.io. I designed my config based on their suggestions. There are a tons of privacy conscious alternatives to everyday software.Many of the configs you are going to see here can be reasoned through the suggestions at their site.

xthestreams超过 5 年前

> What's the best setup these days for ad-blocking + privacy/tracker-blocking that doesn't break the web?If one doesn't want to break the web, they shouldn't block ads since most of the web is free thanks to ads.I use a blacklist approach and only block ads on those websites which clearly have no consideration for usability (popups, autoplaying videos, ...) or for privacy.I have found that Unlock Origin is great for this approach.

评论 #20787324 未加载

erikpukinskis超过 5 年前

I use PolicyControl in Chrome and it works great. I can have fine grained control over each site.

anujdeshpande超过 5 年前

PiHole with Cloudflare DNS

mrweasel超过 5 年前

I just use DuckDuckGo’s privacy plugin, that seems to kill most ads.

Brajeshwar超过 5 年前

Pi-Hole at the Home Router.1Bocker for Safari.uBlock Origin for Chrome.

Jailout2000超过 5 年前

I have a multi-tiered adblocking environment at home and abroad.At home, I have AdGuardHome installed in a VM acting as my home network's DNS. It's pretty effective and is an alternative to PiHole. This is a first-tier filter I have while at home for all my devices. <a href="https://github.com/AdguardTeam/AdGuardHome/" rel="nofollow">https://github.com/AdguardTeam/AdGuardHome/</a>On the web browser, I have the AdGuard Firefox extension. <a href="https://adguard.com/en/adguard-browser-extension/firefox/overview.html" rel="nofollow">https://adguard.com/en/adguard-browser-extension/firefox/ove...</a>For my mobile phone, it's a little obtuse but relatively straightforward. I have a non-rooted Android phone. I've installed AdGuard for Android there as well. The way it works is it runs a local VPN on my phone, so all device traffic goes through a localhost proxy, which filters the DNS and unencrypted TCP traffic. For HTTPS filtering, it installs a local TLS CA to perform re-signing of websites (you can configure it to ignore EV certificates, as I have, which are more common with online banks and more secure sites). It works pretty well with exception to apps that have built-in ad platforms like Instagram. It blocks 100% of ads in apps like Wunderground, Reddit, and Firefox. <a href="https://adguard.com/en/adguard-android/overview.html" rel="nofollow">https://adguard.com/en/adguard-android/overview.html</a>. There's also an iOS version of the app on their website.I have a Google Play Music subscription which comes with YouTube Premium. However, more and more YouTubers are diversifying their revenue, and have gone to completely sponsored videos with embedded ads. For sponsored clips in YouTube, SponsorBlock extension: <a href="https://github.com/ajayyy/SponsorBlock" rel="nofollow">https://github.com/ajayyy/SponsorBlock</a>Decentraleyes [sic] is another extension that I use primarily on my phone, but also at work. It allows the web browser to use local versions of CSS/JS frameworks and fonts that would otherwise have to load from CDNs that track your requests. Things like jQuery, Bootstrap, AngularJS, FontAwesome, etc. are all loaded from local copies through this extension. This benefits the user by saving bandwidth and page load time as well as stopping unwanted tracking from the remote party. <a href="https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/" rel="nofollow">https://addons.mozilla.org/en-US/firefox/addon/decentraleyes...</a>Don't Fuck With Paste. This extension prevents websites from disabling pasting in form fields. Extremely useful when you are using a password manager to enter form data or just copying and pasting from another location. Websites that break paste are just as bad as websites that serve ads in my book. <a href="https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-with-paste/" rel="nofollow">https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-wi...</a> (it's also available for Chrome).If you know someone or you yourself actually still use Facebook, I also highly recommend Social Fixer. Not only does it block Facebook ads and other page elements, but it lets you keep track of other events like who unfriends you. It has a lot of options and I've been using it for years. <a href="https://socialfixer.com/" rel="nofollow">https://socialfixer.com/</a>Worth checking out are NoScript extension, PiHole, and UBlock Origin. I don't use these but I've heard good things about them and everyone seems to recommend them.

newfromblammo超过 5 年前

Nobody mentioned Waterfox?

forgotmysn超过 5 年前

step one is definitely to get off chromecli or FFX + ublock origin, ABP, FB container

nijaru超过 5 年前

privacytools.io

mp3geek超过 5 年前

Use Brave :)

auslander超过 5 年前

For Apple folks: Ka-Block! for Safari, both iOS and Mac, second Firefox Focus's content blocker on iOS. Always on VPN mobile and desktop. Always Private browsing mode everywhere. Kills 99% of germs :)

njn超过 5 年前

I don't mess with browser extensions anymore, I just use Brave: <a href="https://brave.com" rel="nofollow">https://brave.com</a>