gorhill / uBlock

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.
GNU General Public License v3.0
47.76k stars 3.17k forks source link

FEATURE REQUEST: Website Reporting (malicious sites) #2389

Closed bandaid closed 7 years ago

bandaid commented 7 years ago

Looking for an addon to uBlock Origin to report malicious sites, the data collection and implementation to block these sites doesn't necessarily have to be controlled by uBlock Origin developers, but by the script writers for filters and other mainstream developers. The more honest people involved the better. I would suggest the reporting tool provide the user the ability to report a malicious webpage (ie: demanding Flash installation, spoofed Microsoft fatal errors, critical alters about a 'found' virus, etc..) and collect the page URL and data, which will then be anonymously (or not) sent to all the filter writers and uBlock Origin for review.

In the aspect of review, you can have thousands of users reporting *cnn.com as a malicious site (well... not really, but their journalists are nimble-minded just as many media outlets), versus lets stay a real crap malware site as https://f190211.4privacybrowsing.com ([**].4privacybrowsing.com)... is one of the tens-of-thousands of malware sites and it's one of many that still is not blocked. Get the point?

Malicious sites are seriously intrusive and very annoying to advanced users, not only, the elderly and inexperienced user will likely fall victim to the scams on these websites by just clicking areas where the site demand's a user to select an affirmative action or download malicious software... whereas causing either a virus, sensitive data being stolen, or even worse ransom-ware.

***I do not have any type of social media account, nor subscribed to the Mozilla uBlock Origin support page. I will not sign up to them, period. So, I highly doubt this will get noticed here on Git but it's an attempt.



(**PS: If someone could make a tool to redact mainstream media sites from spewing out incoherent nonsense about subjects or 'news' they think they know the answers to, especially in this generation, that would be great. The only concern the Media has today is viewer-ship, not facts about a matter... they rather spew out garbage to attain headlines, The media use to actually report the news, but today... journalists have to spew their mindless inexperienced ideologies into the mix, which then a bunch of mindless sheep jumping onto a bandwagon begin following journalist nutjobs, including senators, Elon Musk, and other notable individuals. Sad.)

uBlock-user commented 7 years ago

Usually malicious websites get reported and get blocked by Malware filterlists which saves the time for review and discussion. I doubt anyone here would bother to undertake the responsibility to review, report and maintain the list which is already being done by the aformentioned Malware filterlists.

bandaid commented 7 years ago

You're correct, however, there are tens of thousands of malicious sites that Malware filterlist's do not catch, especially pop-ups (*which is why HOSTS file is important too). But that's the purpose for requesting a website reporting tool within uBlock Origin to help report cheesy-malicious sites. You're right that uBlock Origin developers don't need to involve themselves specifically to maintaining lists (don't expect that), but rather implement a feature in uBlock Origin to hand off (manually by the user) data regarding a malicious site[s] in the reporting to known Malware filterlist/host developers.

Of course this feature would require manual reporting of such sites, but all the specific details required (ie: URL and screenshot) would be automatically captured to help the user report the information.

Perhaps, a better implementation rather than just sending the data to known Maleware filterlist/host developers would be for the uBlock Origin Website Reporting Tool to provide the user the ability to manually capture the data as described above and be provided the option to upload user submitted snapshots to a GIT dump where all known Malware filterlist/host developers can view and make adjustments to their filters.

uBlock-user commented 7 years ago

Users interested in reporting such domains on daily basis are hardly existing. Most of them, prefer "install uBO/generic adblocker and forget forever" approach, so to built in a tool would rather be a waste of time for the dev himself. Either, run your own list and add the domain yourself or contact the malware domains lists maintainer(s) and report.

There's no one spot/ GIT dump as you mention, where all malware list maintainers meet and greet unfortunately, but if there was, that would save a lot of time though.

bandaid commented 7 years ago

Well, "users interested in reporting such domains on a daily basis are hardly existing" is by far a very naive statement. You clearly have no understanding of how people browse the internet, most people are also not aware of tools to report websites, because they are non-existent and tedious. It's far from a waste of time and wouldn't take a developer no more than a couple hours to to create one. The entire purpose of the request is on the basis of community reporting.... but obviously there are people like you who cannot comprehend the basics of community, which is one reason why malware sites are so rampant.

Case in point: Adblock Plus has a reporting tool, used for both bug tracking and reporting websites.

If users were provided the ability to do such things they may indeed report, but they're not provided those options.

As for personal lists, it's very obvious that I create my own, also create my own HOSTS file as previously stated. The Feature Request was a request in the mindset of the community as a whole, the more users reporting the more information to create stable lists. Of course there aren't many users "reporting" sites, as previously mentioned, because there are hardly any tools which provide such functionality. There may be little interest at first, but eventually it'll become mainstream. AND eventually malware will be a thing of the past, but some cannot comprehend that.

I maintain my own hosts, my own filterlists, every malware site I come across immediately goes into my HOSTS and filterlist and is also reported. My HOSTS file is 30,000 unique lines of malware sites and growing. Can you comprehend the amount of time this takes? If you do then why argue. That's the main reason most people do not report, because it's horribly time consuming and not for the novice user. That's why there ought to be a reporting tool as an addon with adblocking extensions.

gorhill commented 7 years ago

Adblock Plus has a reporting tool, used for both bug tracking and reporting websites

uBO is serverless. If ever EasyList/EasyPrivacy's server supports reporting, I will consider integrating support in uBO.

bandaid commented 7 years ago

gorhill, I understand uBlock is serverless. There shouldn't be no overhead for such request. Perhaps you have a better idea to implement.

uBlock-user commented 7 years ago

is by far a very naive statement. You clearly have no understanding of how people browse the internet, most people are also not aware of tools to report websites, because they are non-existent and tedious.

Instead of calling for a rebuttal, it's you who forgets people don't care and those who want to, have no direct means to do it and no have idea how to do it and teaching them is a pain in the ass. Secondly, most of these suggestions get declined and so did yours, I was only saving you the time. You're welcome. It won't happen, so don't bother. It's not naive, it is the fact of life. You can live in denial by offering more idiotic rebuttals or accept it and move on. As gorhill mentioned, uBO is serverless and will remain like that, so someone has to be willing to offer a reporting system, which is not gonna happen as ABP will simply tell you to install their adblocker and use it, they don't have any intentions on doing uBO users any favour.

If users were provided the ability to do such things they may indeed report, but they're not provided those options.

It was gorhill's decision to make it server-less, stop comparing those two or use ABP if you love that feature so much.

but obviously there are people like you who cannot comprehend the basics of community, which is one reason why malware sites are so rampant.

I could care less about malware personally, as I simply run uMatrix which takes cares of all third party crap and malware and I'm subscribed to all major malware hosts list all of those which get updated periodically and I have yet to face any malware whatsoever, if only everyone started doing that we wouldn't need a reporting tool despite your desperate claims. Lastly, common sense helps, which unfortunately is uncommon. If only people would avoid websites which appear shady, they wouldn't get infect ever, but they don't, they like to experiment and then whine when they get infected and ask to get it blacklisted. It's you who is simply too moronic to comprehend to understand my argument, so keep on living in your denial as you would.

I'm out.

bandaid commented 7 years ago

@uBlock-user ,

Thank you for proving your naivety.