search

uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.15k stars 773 forks source link

atozmath.com: detection #15338

Closed KyceAbdallah closed 1 year ago

KyceAbdallah commented 2 years ago

Prerequisites

URL address of the web page

https://atozmath.com/Functions2.aspx?q=symmetry&q1=3x%5E2%2B12x-4%60%60symmetry&do=1

Category

detection

Describe the issue

It detected ublock Origin https://user-images.githubusercontent.com/90739617/196804351-0dbea8d4-c68c-460a-a6b4-eb0adc7756a2.png

Screenshot(s)

Screenshot(s)

Configuration

```yaml uBlock Origin: 1.44.4 Chromium: 105 filterset (summary): network: 87162 cosmetic: 38668 scriptlet: 18162 html: 0 listset (total-discarded, last updated): default: user-filters: 0-0, never easylist: 61938-53, 5h.58m easyprivacy: 30774-1170, 5h.57m plowe-0: 3675-865, 5h.56m ublock-abuse: 76-0, 5h.28m ublock-badware: 4380-105, 5h.26m ublock-filters: 33123-112, 5h.25m ublock-privacy: 257-1, 5h.24m ublock-quick-fixes: 391-22, 5h.23m ublock-unbreak: 1875-42, 5h.22m urlhaus-1: 10031-0, 5h.21m filterset (user): [empty] modifiedUserSettings: [none] modifiedHiddenSettings: [none] supportStats: allReadyAfter: 2899 ms (selfie) maxAssetCacheWait: 1091 ms popupPanel: blocked: 3 blockedDetails: bhavanijewellery.in: 1 google-analytics.com: 1 translate.googleapis.com: 1 ```
stephenhawk8054 commented 2 years ago

I can't reproduce the issue. Check if you are using any:

okiehsch commented 2 years ago

I can only reproduce if I disable uBO-filters.

KyceAbdallah commented 2 years ago

I can't reproduce the issue. Check if you are using any:

  • Custom filters,
  • Other extensions,
  • Browser's built-in blocker,
  • DNS blocking methods,
  • Blocking softwares outside browser,
  • OS' hosts file to block domains.

I'm not using anything custom

KyceAbdallah commented 2 years ago

I can only reproduce if I disable uBO-filters.

All I did was go on that site, put in the equation, and then when I hit solve, what was shown in the screenshot appeared

mapx- commented 2 years ago

chromium

if not chrome => did you disable the various shields, builtin blockers, protection tracking (in brave, edge, vivaldi, opera etc) ?

KyceAbdallah commented 2 years ago

chromium

if not chrome => did you disable the various shields, builtin blockers, protection tracking (in brave, edge, vivaldi, opera etc) ?

I'm running ChromeOS on a chromebook

MasterKia commented 2 years ago

What browser are you using? Google Chrome?

KyceAbdallah commented 2 years ago

What browser are you using? Google Chrome?

Yes it's the only one you you can use on ChromeOS

mapx- commented 2 years ago

what requests are allowed / blocked => open the logger, select allowed / blocked items, repeat the steps to get the issue, post here a screenshot with such items

my logger: image

KyceAbdallah commented 2 years ago

what requests are allowed / blocked => open the logger, select allowed / blocked items, repeat the steps to get the issue, post here a screenshot with such items

my logger: https://user-images.githubusercontent.com/10303732/196956186-895a237c-32e7-48ae-803f-da175b29ca9e.png

Sorry I forgot how to open the logger, how do you do it again?

mapx- commented 2 years ago

click uBO icon, then: image

KyceAbdallah commented 2 years ago

click uBO icon, then: https://user-images.githubusercontent.com/10303732/196962983-324a59ec-6a03-426b-80c4-bef9cf000791.png

Thank you. Here's a ss image

mapx- commented 2 years ago

Did you select only the images ?

mapx- commented 2 years ago

maybe you should:

KyceAbdallah commented 2 years ago

maybe you should:

  • close / reopen chrome
  • reset uBO to default setup
  • test again

Still detects

mapx- commented 2 years ago

Did you select only the images ?

see my screenshot => In yours I see no +js filters

KyceAbdallah commented 2 years ago

image There you go. Sry for the mistake I'm still pretty new to GitHub

mapx- commented 2 years ago

Same ss, take a look at my ss and you'll see a lot of +js filters

for example

image

KyceAbdallah commented 2 years ago

Same ss, take a look at my ss and you'll see a lot of +js filters

for example

https://user-images.githubusercontent.com/10303732/196978082-4b6cd9ff-59b9-47e2-a29e-e283b5b03cf8.png

Tbh I'm very confused. Here's the link for you to take a look for yourself

https://atozmath.com/Functions2.aspx?q=symmetry&q1=-2x%60%60symmetry&do=1

mapx- commented 2 years ago

well, that's another link not that above, however I click "find" and no anti adblocking .. just the expected solution.

You'll have to investigate on your side, sorry.

ghajini commented 2 years ago

i can reproduce firefox desktop stable, ubo dev

STR= on going atozmath.com try solving equations=> enter some=> click solve=> no antiadb

now go back to homepage => try above procedure => solve=> antiadblock comes

after 2-3 tries it detects adblock....may be it is detecting cookies

KyceAbdallah commented 2 years ago

i can reproduce firefox desktop stable, ubo dev

STR= on going atozmath.com try solving equations=> enter some=> click solve=> no antiadb

now go back to homepage => try above procedure => solve=> antiadblock comes

after 2-3 tries it detects adblock....may be it is detecting cookies

That is what happens

okiehsch commented 2 years ago

How about simply hiding it? atozmath.com###lblAdContent

ghajini commented 2 years ago

How about simply hiding it? atozmath.com###lblAdContent

tried already, intended function of site will not work

stephenhawk8054 commented 2 years ago

How about simply hiding it? atozmath.com###lblAdContent

Actually if the dectection happens, it means the solution won't be displayed, or it will show wrong solutions.

For example, with the old issue https://github.com/uBlockOrigin/uAssets/issues/10815, the solution won't display because of ##+js(no-xhr-if, /^/)

@ghajini @KyceAbdallah Can you test these filters?

atozmath.com#@#+js(no-xhr-if, /^/)
atozmath.com##+js(no-xhr-if, /prebid|quantumdex|e-planning|criteo|aralego|rubicon|a-mx|id5-sync/)
@@||services.bilsyndication.com/cli/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/vld/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/obj/$xhr,domain=atozmath.com

You might need change to other VPNs to test as the site will always show anti-adblock for 24 hours after a few times detected if I remember correctly.

ghajini commented 2 years ago

still detects on 2nd try

KyceAbdallah commented 2 years ago

How about simply hiding it? atozmath.com###lblAdContent

Actually if the dectection happens, it means the solution won't be displayed, or it will show wrong solutions.

For example, with the old issue https://github.com/uBlockOrigin/uAssets/issues/10815, the solution won't display because of ##+js(no-xhr-if, /^/)

@ghajini @KyceAbdallah Can you test these filters?

atozmath.com#@#+js(no-xhr-if, /^/)
atozmath.com##+js(no-xhr-if, /prebid|quantumdex|e-planning|criteo|aralego|rubicon|a-mx|id5-sync/)
@@||services.bilsyndication.com/cli/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/vld/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/obj/$xhr,domain=atozmath.com

You might need change to other VPNs to test as the site will always show anti-adblock for 24 hours after a few times detected if I remember correctly.

Yeah it still detects

gorhill commented 2 years ago

Clear cookies for the site and try:

atozmath.com##+js(cookie-remover, BAdBlock1)

The warning is shown by the server when the cookie BAdBlock1 is set to 1.

Never mind, not very reliable. The site is definitely using cookeis however, see with view-source:https://atozmath.com/, search for "Blocking".

stephenhawk8054 commented 2 years ago

Can anyone else test

atozmath.com#@#+js(no-xhr-if, /^/)
atozmath.com##+js(no-xhr-if, /prebid|quantumdex|e-planning|criteo|aralego|rubicon|a-mx|id5-sync/)
@@||services.bilsyndication.com/passback/$script,domain=atozmath.com
@@||services.bilsyndication.com/cli/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/obj/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/vld/$xhr,domain=atozmath.com

I think the passback scripts need to be allowed. I followed the steps by @ghajini and anti-adblock does not appear any more for me.

MasterKia commented 2 years ago

I still get detection using Firefox desktop and +171 requests on the uBO badge.

MasterKia commented 2 years ago

I notice a lot of cookies: https://user-images.githubusercontent.com/17685483/197124169-ca3b32f6-1faa-4efe-a5be-43ef63793578.png

mapx- commented 2 years ago

cookies, server side .. I guess it's not something fixable without massive whitelisting maybe something on firefox if we'd have some replace scriptlet ?!

atozmath.com#@#+js()
@@*$xhr,script,domain=atozmath.com
*$frame,domain=atozmath.com,redirect-rule=noopframe
MasterKia commented 2 years ago

This doesn't work either (first time no anti-blocker and the second time I get detection):

atozmath.com##^script:has-text(Blocking)
atozmath.com##^responseheader(set-cookie)
KyceAbdallah commented 2 years ago

cookies, server side .. I guess it's not something fixable without massive whitelisting maybe something on firefox if we'd have some replace scriptlet ?!

atozmath.com#@#+js()
@@*$xhr,script,domain=atozmath.com
*$frame,domain=atozmath.com,redirect-rule=noopframe

I'm not using firefox though, I'm using google chrome on ChromeOS

mapx- commented 2 years ago

I'm not using firefox though, I'm using google chrome on ChromeOS

it does not matter: just test those filters

ghajini commented 2 years ago

cookies, server side .. I guess it's not something fixable without massive whitelisting maybe something on firefox if we'd have some replace scriptlet ?!

atozmath.com#@#+js()
@@*$xhr,script,domain=atozmath.com
*$frame,domain=atozmath.com,redirect-rule=noopframe

doesn't work,still detected it's like allowing all ads(@@*$xhr,script,domain=atozmath.com)

not worthy,can workaround by clearing cookies

MasterKia commented 2 years ago

can workaround by clearing cookies

So this works?

atozmath.com##^responseheader(set-cookie)
atozmath.com##+js(cookie-remover, /^/)
ghajini commented 2 years ago

can workaround by clearing cookies

So this works?

atozmath.com##^responseheader(set-cookie)
atozmath.com##+js(cookie-remover, /^/)

No

MasterKia commented 2 years ago

AdGuard:

It looks like that it's server-side anti-adblock and it's checking some cookies

Vanilla JS fix: https://github.com/AdguardTeam/AdguardFilters/commit/e46213395a5d6a16f15fffb4ab07d687c765a22f

gorhill commented 2 years ago

I wanted to try the below filter yesterday but I am no longer able to get any content from that site:

atozmath.com##+js(cookie-remover, /BAdBlock\d+|BAdSvi\d+/)
ghajini commented 2 years ago

but I am no longer able to get any content from that site:

i didn't get what you just said still get detected on 2nd try

KyceAbdallah commented 2 years ago

I'm not using firefox though, I'm using google chrome on ChromeOS

it does not matter: just test those filters

Yeah it still detects with these filters:


atozmath.com#@#+js(no-xhr-if, /^/)
atozmath.com##+js(no-xhr-if, /prebid|quantumdex|e-planning|criteo|aralego|rubicon|a-mx|id5-sync/)
@@||services.bilsyndication.com/cli/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/vld/$xhr,domain=atozmath.com
@@||services.bilsyndication.com/obj/$xhr,domain=atozmath.com
stephenhawk8054 commented 2 years ago

but I am no longer able to get any content from that site:

i didn't get what you just said still get detected on 2nd try

I think he's got IP banned from that site (when getting anti adb too many times).

krystian3w commented 1 year ago

https://github.com/uBlockOrigin/uAssets/issues/15338#issuecomment-1285503818

Possible install:

JobcenterTycoon commented 1 year ago

Try

atozmath.com#@#+js()
*$image,redirect-rule=2x2.png:5,domain=atozmath.com
@@||assets.bilsyndication.com/plugins/cmptcf2/cmp-v2.0.1.js$script,domain=atozmath.com
@@||services.bilsyndication.com/passback/?t=$script,domain=atozmath.com
@@||services.bilsyndication.com^$xhr,domain=atozmath.com
atozmath.com###vi-smartbanner
atozmath.com##.adsbyvli:style(opacity: 0 !important; pointer-events: none !important;)
JobcenterTycoon commented 1 year ago

@mapx- does the solution works for you?

mapx- commented 1 year ago

It seems working now .. @ghajini could you test too ?

ghajini commented 1 year ago

yes it did worked now

MasterKia commented 1 year ago

@JobcenterTycoon After some tries, I get detection again.

JobcenterTycoon commented 1 year ago

Works fine for me. Its important to accept the privacy banner first before clicking on find because the script checking the accept status.