uBlockOrigin / uBlock-issues

This is the community-maintained issue tracker for uBlock Origin
https://github.com/gorhill/uBlock
936 stars 79 forks source link

no-strict-blocking: * true should included in the default configuration #2503

Closed h2559 closed 1 year ago

h2559 commented 1 year ago

Prerequisites

I tried to reproduce the issue when...

Description

I always have to write no-strict-blocking: true every time i install ublock origin somewhere, whether on a new browser or someone else's computer etc, because without no-strict-blocking: true the blocking is too strict!

lots of shopping sites use referral links, and lots of in-place widgets on various websites get blocked and have to click-to-enable without no-strict-blocking: * true enabled. it is a hassle for the user to click to confirm everytime a referral link or something that triggers it gets the prompt to come up.

i love ublock origin but no-strict-blocking: * true needs to be enabled by default otherwise i can't just blanket recommend this blocker to everyone because non-techies/regular people would find it a hassle to click-to-enable certain webpages because that is not what normally happens when you browse the internet.

(the method to modify the setting to no-strict-blocking: * true is also a hassle and NOT straightforward, so telling people to change the setting themselves won't be a realistic option)

URL(s) where the issue occurs.

Screenshot(s)

https://user-images.githubusercontent.com/20052727/219903411-404d212f-7343-4e3d-a58d-ddcca5e9a321.png

uBO version

1.46.0

Browser name and version

Brave v1.48.167

Settings

no-strict-blocking: * true

Notes

No response

gwarser commented 1 year ago

URL(s) where the issue occurs.

* lots of sites

A sample perhaps?

gwarser commented 1 year ago

have in-place widgets that require clicking to enable

How?

u-RraaLL commented 1 year ago

It was added for a reason. It definitely won't be disabled by default.

But I do think having an option in the Settings > Privacy to "Disable strict-blocking" could be to the benefit (usage-wise) of some regular users.

gorhill commented 1 year ago

I don't think adding a setting "Disable strict-blocking" is a good idea -- as this also mean "Do not prevent navigation to malware sites", let alone disabling strict blocking by default.

Declined.

garry-ut99 commented 1 year ago

no-strict-blocking: * true should included in the default configuration

If it would be as default, then other users would complain the same way backward: that they want it to be removed as default, because they need to remove it every time they install uBO, because malware getting inside, and we would see the same opposite-issue aka ping-pong created on the tracker.

h2559 commented 1 year ago

no-strict-blocking: * true should included in the default configuration

If it would be as default, then other users would complain the same way backward: that they want it to be removed as default, because they need to remove it every time they install uBO, because malware getting inside, and we would see the same opposite-issue aka ping-pong created on the tracker.

I see what you mean.

I am not a Mac so the chance of malware is incredibly low.

I used to have to click on the button when the stop message pops up, only when I was fed up and did a google search that I found out the guide to remove no strict blocking and I always keep this screenshot because if i ever reinstall my OS or install ublock on someone's elses computer then i would remove the strict blocking just so the browser can be usable without the hassle of having the exceptions popup and then the user would have to manually OK it to override.

https://user-images.githubusercontent.com/20052727/219982845-251a4aba-92ea-413b-90a8-5ae973a6b2a7.png

I do not have a screenshot of the exceptions page where i would have to click on it to move to the next page, because i have used no strict blocking almost ever since i have used ublock origin. i only used it without nostrict blocking for about a week until i was fed up and googled for a way to turn it off.

To a non-techie they might get confused and not know whether or not to accept it. That is why i cannot blanket recommend ublock origin to people i meet until you remove no strict blocking, i would rather have 10 ads come thru + no popup, instead of having 10 ads blocked + 1 hassle pop-up exception to manually overide. Usability is the most important part of software.

gorhill commented 1 year ago

You say "I" a lot in your comment. I configure uBO for the majority of people, I do not configure it according to the taste of specific people.

i cannot blanket recommend ublock origin to people i meet

Fine, I have no ambition regarding user count, there is no point using this as an argument.

iam-py-test commented 1 year ago

I am not a Mac so the chance of malware is incredibly low.

It is trivial to click "Proceed" on any block page, or disable strict blocking on any setup you use if you do not wish to have protection from malicious websites, click through tracking, etc. You can export your settings and then just restore them on any new install. You also can check the checkbox to unblock referal links forever while not unblocking malware (i.e. the ~4,000 entries in uBo badware)

I don't speak for gorhill or the uBo team. Just a random internet user sharing his opinion.

uBlock-user commented 1 year ago

To a non-techie they might get confused and not know whether or not to accept it. That is why i cannot blanket recommend ublock origin to people i meet until you remove no strict blocking, i would rather have 10 ads come thru + no popup, instead of having 10 ads blocked + 1 hassle pop-up exception to manually overide. Usability is the most important part of software.

It's best you install Adblock Plus, uBO is not meant for you. From the OP I can tell, you clearly fail to understand/neither care to understand the concept behind strict blocking.

garry-ut99 commented 1 year ago

It is trivial to click "Proceed" on any block page

Not necessarily, if one has to do it X times in a row: https://github.com/uBlockOrigin/uBlock-issues/issues/2476#issuecomment-1416766302

You can export your settings and then just restore them on any new install.

That's neither faster nor easier than pasting no-strict-blocking: * true into My Rules panel

h2559 commented 1 year ago

I am not a Mac so the chance of malware is incredibly low.

  • Mac malware does exist (although I think there is less than Windows)
  • uBo also blocks phishing, scams, etc by default all of are platform agnostic.

It is trivial to click "Proceed" on any block page, or disable strict blocking on any setup you use if you do not wish to have protection from malicious websites, click through tracking, etc. You can export your settings and then just restore them on any new install. You also can check the checkbox to unblock referal links forever while not unblocking malware (i.e. the ~4,000 entries in uBo badware)

I don't speak for gorhill or the uBo team. Just a random internet user sharing his opinion.

see reply below, the one with the screenshot

To a non-techie they might get confused and not know whether or not to accept it. That is why i cannot blanket recommend ublock origin to people i meet until you remove no strict blocking, i would rather have 10 ads come thru + no popup, instead of having 10 ads blocked + 1 hassle pop-up exception to manually overide. Usability is the most important part of software.

It's best you install Adblock Plus, uBO is not meant for you. From the OP I can tell, you clearly fail to understand/neither care to understand the concept behind strict blocking.

i came over from AdblockPlus (or Adblock, i forget now, they are always confusing, whoever thought it was a good idea to name 2 companies with nearly the same logo and same name is not very smart) because one day it did'nt block youtube ads without a huge amount of slowdown. so yes, i am glad i stumbled upon ublock origin long ago because it is a better everything blocker from compared to adblock (plus/nonplus)

It is trivial to click "Proceed" on any block page

Not necessarily, if one has to do it X times in a row: #2476 (comment)

You can export your settings and then just restore them on any new install.

That's neither faster nor easier than pasting no-strict-blocking: * true into My Rules panel

it seems the internet agree with you, and i as well, can you imagine clicking proceed everyday on various new websites because the blocking rules are so strict!? I couldn't take it, i am grateful i found a guide on the internet to remove no strict blocking.

https://user-images.githubusercontent.com/20052727/220065941-7291662e-8f55-4504-8420-1e33e8dc6610.png

This reminds of the extension Ghostery (i used it a long time ago, i never used it for years so it might have changed now), it was garbage because some of the rules were so strict that it would break websites by default, so i would have to turn off blocking for that entire sites (which i didnt do because i was stubborn), so instead i had to switch on and off tracker blockers to test one which rule was too strict and then permanantly disable that rule. no normal non-techie human would go through with what I did to fix it, they would have just uninstalled that extension that breaks the websites they visited. you know, i dont use ghostery anymore because of the very strict blocking, you can learn from ghostery and dont make the same mistakes they did.

garry-ut99 commented 1 year ago

To a non-techie they might get confused and not know whether or not to accept it.

There is already on-going opened related issue: https://github.com/uBlockOrigin/uBlock-issues/issues/2476 so that non-techies will know why the site has been blocked.

i am grateful i found a guide on the internet to remove no strict blocking.

It's time to start reading manuals then, because it's in the official uBO manual :

https://github.com/uBlockOrigin/uBlock-issues/wiki/Strict-blocking: Tip: If you wish, you may entirely disable strict blocking everywhere by adding the rule no-strict-blocking: * true to the My rules pane in the dashboard (don't forget to click Commit to make the rule stick).

You also can read about badware the strict-blocking tries to stop : https://github.com/uBlockOrigin/uBlock-issues/wiki/Badware-risks The strict-blocking purpose is :

The block page is there to remind users to be cautious, particularly non-technical users.

The question is: what is more annoying/important to a typical uBO user:

The both solutions have their's pros/cons, but only one solution can be choosen, it's about "safety vs convenience".

h2559 commented 1 year ago

You say "I" a lot in your comment. I configure uBO for the majority of people, I do not configure it according to the taste of specific people.

i cannot blanket recommend ublock origin to people i meet

Fine, I have no ambition regarding user count, there is no point using this as an argument.

I see, I can certainly understand this, it is your extension and you feel you can do what you want with it, and I agree with you in a way and of course you are not wrong.

I also want to mention uBlock origin is probably the 2nd or 1st choice everything-blocker for a lot of people, so in a way it has become bigger than you, so having some rules that are too strict is only going to put off many internet users, who really shouldn't have to suffer and dont have the time to spend an hour or two googling for answers on how to disable no-strict-blocking (thank god someone found a way to do it and actually posted on their website, otherwise i wouldnt even be using uBlock origin today, i would have just continued using adblock (or is it adblock plus, i never really know, they are way too damn similar) with youtube.com whitelisted so i can still watch the videos without the slowdown.

So I ask you:

one: seriously consider adding the no-strict-blocking OFF as the default, and have it in the settings to turn it ON for power users, paranoid people, people on their work computers with confidential info, etc.

and/or

two: split up the no strict blocking into parts/sections, have a section with a checkbox to disable blocking badware (so i mean this is ON by default) (which i am perfectly fine with, i skimmed the page linked above and i dont want miners or whatever to be running in the background when i browse either)

plus

have a checkbox section for blocking shopping referral links, disqus widgets, spotify widgets, or whatever that gets dragged into the default, turned OFF in the settings (so a user has to click to enable). when browsing, i dont want a click-to-proceed popup to show up every 15 minutes just because of overly strict rules.

if all of part two above can be done, it would probably require some planning, but i dont mind, i have no-strict blocking turned on forever, but i will be glad that future versions of ublock origin will have its usability much improved.

u-RraaLL commented 1 year ago

so having some rules that are too strict is only going to put off many internet users, who really shouldn't have to suffer

What are these strict "rules" (filters, in actuality) that you keep talking about? The only times I've encountered multi-layer strict-blocking pages were when I went to some cashback/coupon websites. I can't even recall the last time I've been stopped in normal browsing.

and dont have the time to spend an hour or two googling for answers on how to disable no-strict-blocking

uBO's popup > Dashboard > Support > Documentation > Open > [Ctrl]+[F] > "strict" > Click > Read.

That should take two minutes max.

Better yet, just click the ⚠ icon on the strict blocking page.

True, this icon is not the most intuitive way of reaching the docs - you either know it leads there or you don't. So I think adding a text link such as "Click here to find out what this page is for." next to it, could be an improvement. @gorhill

one: seriously consider adding the no-strict-blocking OFF as the default, and have it in the settings to turn it ON for power users, paranoid people, people on their work computers with confidential info, etc.

He already declined.

two: split up the no strict blocking into parts/sections, have a section with a checkbox to disable blocking badware (so i mean this is ON by default) (which i am perfectly fine with, i skimmed the page linked above and i dont want miners or whatever to be running in the background when i browse either)

While you wrote this in a confusing way, I guess having an option to disable strict-blocking excluding malware lists, would be a good idea.

Unfortunately, this would likely take a lot to implement and gorhill has better things to spend his time on.


Anyway, back to your theory of blocking being too strict - please provide actual examples. If it's really shopping referrals, etc. All it takes it to click "Don't warn me about this site" once for each referral/tracker and you won't be bothered in the future. So that's a few clicks to agree to being tracked and you're still protected from malware sites. Seems like a much better choice than disabling warnings altogether. Especially since you're saying you're installing uBO for others. Why lower their defenses?
I'm sure they agreed to it if you introduced the problem as "this is an annoying popup that will keep stopping you from navigating between websites" rather than "this is a feature that keeps you protected from malware and trackers, where you can decide whether you want to keep seeing it in the future or not".

h2559 commented 1 year ago

so having some rules that are too strict is only going to put off many internet users, who really shouldn't have to suffer

What are these strict "rules" (filters, in actuality) that you keep talking about? The only times I've encountered multi-layer strict-blocking pages were when I went to some cashback/coupon websites. I can't even recall the last time I've been stopped in normal browsing.

and dont have the time to spend an hour or two googling for answers on how to disable no-strict-blocking

uBO's popup > Dashboard > Support > Documentation > Open > [Ctrl]+[F] > "strict" > Click > Read.

That should take two minutes max.

Better yet, just click the ⚠ icon on the strict blocking page.

True, this icon is not the most intuitive way of reaching the docs - you either know it leads there or you don't. So I think adding a text link such as "Click here to find out what this page is for." next to it, could be an improvement. @gorhill

one: seriously consider adding the no-strict-blocking OFF as the default, and have it in the settings to turn it ON for power users, paranoid people, people on their work computers with confidential info, etc.

He already declined.

two: split up the no strict blocking into parts/sections, have a section with a checkbox to disable blocking badware (so i mean this is ON by default) (which i am perfectly fine with, i skimmed the page linked above and i dont want miners or whatever to be running in the background when i browse either)

While you wrote this in a confusing way, I guess having an option to disable strict-blocking excluding malware lists, would be a good idea.

Unfortunately, this would likely take a lot to implement and gorhill has better things to spend his time on.

Anyway, back to your theory of blocking being too strict - please provide actual examples. If it's really shopping referrals, etc. All it takes it to click "Don't warn me about this site" once for each referral/tracker and you won't be bothered in the future. So that's a few clicks to agree to being tracked and you're still protected from malware sites. Seems like a much better choice than disabling warnings altogether. Especially since you're saying you're installing uBO for others. Why lower their defenses? I'm sure they agreed to it if you introduced the problem as "this is an annoying popup that will keep stopping you from navigating between websites" rather than "this is a feature that keeps you protected from malware and trackers, where you can decide whether you want to keep seeing it in the future or not".

Im installing it for normal people, meaning people who are not interested in technology as a hobby, and just want to browse the internet without ads. clicking on random warning popups might freak them out, what if they don't know if a certain blocked item on the page is "good" or "bad"? do they still click proceed or quit the browser just to be safe?

as for your request,

I dont see any example websites with the strict blocking anymore because i have mostly always used uBO with the no-strict blocking enabled

i did some searching and here is an example (3 years old though, and google was blocked, i hope it was fixed already, if not then you can definitely understand why people want this feature turned off): https://www.reddit.com/r/uBlockOrigin/comments/dmcm6b/how_to_disable_ublock_strict_blocking_popup/

https://user-images.githubusercontent.com/20052727/220141985-a403fa27-e623-4976-9652-35e22126a0ff.png

u-RraaLL commented 1 year ago

i did some searching and here is an example (3 years old though, and google was blocked, i hope it was fixed already, if not then you can definitely understand why people want this feature turned off)

Look at what filter is causing the block. And where it is located. It's a filter the OP created himself and added it to "My filters".

h2559 commented 1 year ago

i did some searching and here is an example (3 years old though, and google was blocked, i hope it was fixed already, if not then you can definitely understand why people want this feature turned off)

Look at what filter is causing the block. And where it is located. It's a filter the OP created himself and added it to "My filters".

that is definitely not a good example, i apologize for that. i don't have any personal examples since no-strict-blocking is enabled. I suggest browsing some frugal shopping websites like slickdeals or bigcrumbs and click on some links and see if you get the popup as shown above.

stephenhawk8054 commented 1 year ago

If gorhill agrees to turn off strict blocking, how about I open another issue to seriously ask him consider turning it on by default, because I don't want malicious page to be opened by default for me and my family, and I don't want to enable strict blocking every time I set it up for others? And there are many others in this thread also refuse to turn it on by default too. What should he do then?

garry-ut99 commented 1 year ago

That is exactly what I already said in my comment: https://github.com/uBlockOrigin/uBlock-issues/issues/2503#issuecomment-1436112883

iam-py-test commented 1 year ago

One example of strict blocking "getting in the way" is awstrack[.]me, which I remember getting in an email (I can't remember where the email came from though, and I don't have the original link). This is blocklisted by Peter Lowe for tracking. A likely situation is that someone clicks on a link in an email and sees a block page (Peter gets a ton of emails about exactly this). While I like this (I don't want to have my clicks tracked, and I have the knowledge to bypass it), many people would be confused, and will not realize that this is uBo doing exactly what it is supposed to do. However, disabling strict blocking by default is (in my opinion) a horrible solution. This opens people up to malware, and to click through tracking (I feel click through tracking is probably the biggest issue).

I think the best solution is to give users the information needed to chose (and, in cases where the URL is included as a query parameter, bypass the redirect). uBo recently redesigned the block page for exactly this purpose, and there are several proposals for providing more information to the user (each with their own problems). I think https://github.com/uBlockOrigin/uBlock-issues/issues/2476 is promising, as the wording and localization is in the hands of gorhill, rather than filterlist maintainers, who lack the time and knowledge to have versions for more than one or two languages. The only problem is that while uBo's built-in lists are only ever intended for uBo and can use uBo-specific syntax, lists such as EasyList and Peter Lowe need wider support. uBo also does display the list blocking the request (which I think AdGuard does not), but exactly how helpful this is varies from list to list. Peter Lowe’s Ad and tracking server list is somewhat self explanatory - it blocks ads and trackers, and is made by a person named Peter Lowe - while EasyList would probably leave people wondering what a list that is easy has to do with their computer. Online Malicious URL Blocklist should be even easier, provided people know what a URL is (it blocks malicious URLs). Thank you for reading my long unprompted and unneeded rant.

h2559 commented 1 year ago

i decided to give it a chance and i removed the no strict blocking. i took a screenshot of the link that caused this popup, i checked "dont warn me again" and proceeded

you can see how if this showed up on my mom's computer she would be asking me what to do

for me, i can handle the occasional clicking, but for normal people, ideally they shouldnt have to put up with too-strict blocking

https://user-images.githubusercontent.com/20052727/220668529-0af464b9-49ca-4bfc-a2a9-81e1d673770c.png

stephenhawk8054 commented 1 year ago

Again, if I want the malicious site to be blocked for my family, what should gorhill do then? This is an advertisement link that's put on some Vietnamese sites: https://bcsite.io/3X4KpAx. With no-strict-blocking: * true, it redirects to https://linktr.ee/bitcacrypto with gambling sites on there, even when it's blocked by ||bcsite.co^.

The entities that everyone should go after are the websites that put those tracking, affiliated, scam... links that make people block it (evyy.net), not the extension relaxing the privacy/security feature for them. The websites would simply go crazy with tracking links as they know all the tools would go easy with it for "convenience".

Any software/app cannot satisfy all users, especially with the features that require total different directions. In those cases, it goes down to that product's philosophy set by developers, and users can decide if they feel good with it or not. If not, they can move on to other products. I personally did not agree with Adblock Plus' approach, so I simply dropped it when knowing about uBO.

Best way in this situation for me is what iam-py-test has commented about adding more information, not disabling strict blocking by default.

mapx- commented 1 year ago

Everything has already been said on the subject and the proposal has also been rejected.