µBlock for Firefox

by aerique • 12 years ago

707 222 12 years ago

They claim that when the extension gets added to addons.mozilla.org, it would start to auto-update.

ecaron2• 12 years ago

Auto-updating is possible even without using addons.mozilla.org, sites like Pinterest do it all the time for their plugin.

Mozilla rolls that option into their CFX builder - https://developer.mozilla.org/en-US/Add-ons/SDK/Tools/cfx#cf... - the update file just needs a consistent place to live. I use CloudFront for it.

cpeterso• 12 years ago

Unfortunately I doubt the auto-updates will work when the add-on's .xpi URL is not stable because it includes uBlock version number. He might be able to workaround that limitation by hosting a stable .xpi URL on a github.io website.

https://github.com/gorhill/uBlock/releases/download/0.8.5.7/...

louhike• 12 years ago

I haven't been able to do performance tests, which is supposed to be the best advantage of this extension. But at least, it seems to block ads properly on Chrome.

Has anybody made some tests outside of the developers of the extension?

whizzkid• 12 years ago

I have been using µBlock for 3 weeks now.(previously adblock plus). There is one irritating thing it has that almost makes me go back to adblock again.

It is often blocking the false positives.

So if developer has named one of their assets file with social media names like "twitter/facebook/etc", it blocks the file right away. Since it does not have custom configuration options for each site, you can either disable µBlock or go with the crashed site.

Not all the sites are written professionally by experts, and this becomes an issue when you are trying to purchase stuff from small online shops. (to support local sellers)

I am too busy for a pull request these days, but maybe this will be fixed soon by someone else. My point for µBlock is for now 5/10.

logn2• 12 years ago

You should file an issue on github at least. The developer is responsive and friendly.

joshschreuder• 12 years ago

That's an issue with the filter lists you choose, not uBlock. Also uBlock does allow you to disable on a domain or subdomain, so this is easily worked around.

uBlock is a bit more of a power user blocker than AdBlock and its variants, but I find it to be far better, both in customisability of filters, and resource utilisation.

simi_• 12 years ago

I thought this was one of those "used it for <x> <y>s and everything is super duper" and wanted to add my "+1". Anyway, I've been using it for 1-2 months and it's been smooth sailing so far. Faster than AdBlock and 99.9% of the coverage coverage (usually some obscure popup ads usually – they did get fixed pretty fast though). And no false positives for me at all.

rplnt• 12 years ago

Since it does not have custom configuration options for each site

What's the purpose of such tool really? It might sound weird, but I was happiest with opt-in (ad) blocking. Every single blocked content was (semi)manually entered by me. I really don't care if I see ads on a site I visit once in a lifetime.

aen0• 12 years ago

You can fined tune (almost like uMatrix) the blocking in the latest version by enabling "Advanced user feature".

aleem• 12 years ago

Similarly, it blocks all FB, Twitter buttons across all websites and there seems to be no way to white list those across all websites. Am I missing something?

gnud• 12 years ago

Well, this in itself seems like a good reason for me to install it.

me_bx• 12 years ago

Go To Preferences, Third-party filters, and uncheck "Easy Privacy" list. It should bring back the social buttons (everywhere).

zedpm• 12 years ago

In its options, select 3rd-party filters, and under Social, uncheck Fanboy's Social Blocking List.

odiroot• 12 years ago

Same here. I only use it because it has lower resources consumption but it annoys me when it blocks Disqus even though I have added their domains to the white list.

gorhill10• 12 years ago

Embedded Disqus works fine from here. If you have a URL where there is a problem, enter an issue on Github [0] -- and enumerate which filter lists you have selected.

Usually it all comes down to the filter lists, in which case I redirect to EasyList forum [1].

[0] https://github.com/gorhill/uBlock/issues

[1] https://forums.lanik.us/viewforum.php?f=64

hbbio• 12 years ago

Have to downvote.

You have powerful editing rules, so you could certainly tune all rules and lists to your liking: " List of your dynamic filtering rules.

Rule syntax: source destination type action. " followed by a GitHub wiki link to the doc.

G2P2• 12 years ago

It's possible in theory. I have customized my ABP rules a ton, switching off rules I didn't want (impossible in uBlock), adding targeted rules for anything from annoying animated avatars to slow domains or bloated mastheads you can't scroll past (shit's almost as bad as modal pop-ups), and I've been unable to do any of it in uBlock because it's way, way too much hassle.

jarcane2• 12 years ago

µBlock enables Fanboy's social blocking list by default. If you want your Twitter/FB buttons and so forth back, you can turn it off in the subscription options.

JohnTHaller5• 12 years ago

The problem is that it doesn't just block the buttons, it blocks assets that just happen to have those names that are unrelated to the buttons as well.

muppetman• 12 years ago

It hasn't blocked them by default for a while now. It used to though.

givehimagun• 12 years ago

Just installed on Firefox and it looks like Fanboy's social is no longer in the default list.

james246• 12 years ago

I had this issue on Adblock too. It was down to one of the pre-installed blacklists - I can't remember which one. Try unchecking them one at a time

gorhill10• 12 years ago

It is often blocking the false positives

It's the filter lists. Use the same filter lists with any other blockers which support ABP-filter syntax, and you will get the same result.

named one of their assets file with social media names like "twitter/facebook/etc", it blocks the file right away

I have removed Fanboy's Social Blocking list from the pre-selected lists since a while now.[1]

I have to say that I had assumed -- wrongly obviously -- that all users knew that what is blocked or not depends completely on what filter lists are selected. So in your case it would have been a matter of un-selecting Fanboy's Social Blocking list.

[1] https://github.com/gorhill/uBlock/commit/ce04053ae3054ff287a...

maxerickson2• 12 years ago

I wonder what would happen if you defaulted to 0 rules active, with a huge mention in as many places as possible that rules needed to be configured (and perhaps a short list of recommendations).

I expect you would get more complaints, saying it was stupid and didn't work. But it would be interesting to see the outcome.

tombh• 12 years ago

Didn't realise I could do that. Thanks for mentioning :)

misterdai• 12 years ago

The GitHub site also states that it's available for Chrome, Opera and Safari (not yet in the extension gallery).

Chrome: https://chrome.google.com/webstore/detail/cjpalhdlnbpafiamej...

Opera: https://addons.opera.com/en-gb/extensions/details/ublock/

Safari: https://chrismatic.io/ublock

Haven't tried it out myself yet but it's nice to see effort put into lowering the memory & CPU usage of such blockers.

Logmix• 12 years ago

Thanks for those links. While the earlier versions for Safari (like v0.8.2.0, found here https://github.com/gorhill/uBlock/issues/117) work well on Safari 5, these new versions on your Safari link do not. They crash the browser during installation.

anon1385• 12 years ago

Seems to be this issue: https://github.com/gorhill/uBlock/issues/547

wooger2• 12 years ago

Safari is on version 7, why would you care about v5?

provemewrong• 12 years ago

Yeah, I've used it on Chrome for half a year now. The news is that it's now available for Firefox.

neuronic• 12 years ago

From my experience of using this for a few weeks now on Chrome, I would recommend this over AdBlock Plus etc. I haven't done any specific performance tests and personally no numbers to back it up. However, I do have the subjective impression of improvement.

I'm using it in combination with µMatrix.

rahimnathwani• 12 years ago

I'm using it in combination with µMatrix.

I'm curious: how do you use it? Do you have to mass-enable stuff using the 'power' icon, for many sites? Or do you just enable the things you know you need, on a per-site basis? Or are your default just good enough?

The reason I ask is that I was curious about it, so tried it out for a couple of days. I found many sites were not usable with the default settings, e.g. Udemy's login box didn't show up until I turned off µMatrix.

mziulu2• 12 years ago

I haven't used uMatrix, since I use Firefox, but I can speak for RequestPolicy, which is kind of the same thing basically AFAICS. It's very very very rare that I end up whitelisting everything that's requested on a site. The more you use the extension, the more you learn to recognize what domains you need to allow in order to have the site working as intended, and this way you end up building your own whitelist: allowing requests from a domain is a one-time only thing most of the times (additionally, there's an extension you can install that syncs your whitelist to your Firefox Sync account).

oe• 12 years ago

On my slightly older MBP (2011) the plugin caused performance issues. Mainly hanging when opening a new tab and navigating somewhere. Other extensions have had same problems, so I might need to move into filtering ads at network level.

barrkel• 12 years ago

Hopefully at some point someone will do something similar for element-level blocking.

A lot of my custom ABP rules are actually blocking dynamic HTML slide-ins, overlays, animated carousels, etc.

anon4• 12 years ago

If you just want to remove elements from the page, rather than block connections to third-party servers, I recommend Stylish. You can just write custom CSS rules and make those elements display:none. Alternatively, write a user script that does the same.

loosescrews• 12 years ago

ABP prevents unwanted crap from being downloaded.

nexxer• 12 years ago

Remove it Permanently does this, adding a submenu to right-click: http://rip.mozdev.org/

jon-wood• 12 years ago

uBlock supports this - you can right click on any element and select "Block element", which then pops up an editor allowing you to refine the CSS selector to only get the bit you want removed.

nathan_long• 12 years ago

AdBlock (getadblock.com), competitor to Adblock Plus, has a wizard for blocking elements. Right click on the page, AdBlock -> Block This Ad -> adjust the slider for element-level specificity.

That creates a custom filter that you can go edit if you want.

molticrystal• 12 years ago

How is the performance for the firefox port? I might of missed it, but all I see are reports in comparison to adblockers on chrome.

msl09• 12 years ago

https://github.com/gorhill/uBlock/wiki/Firefox-version:-benc...

zobzu2• 12 years ago

Wah Chromium uses way more ram than Firefox. 425M (firefox+ublock) vs 1.04G (chromium+ublock)

in all cases memory is reduced :)

exprL2• 12 years ago

I'd appreciate details of CPU consumption as well. Minute amounts of memory are of no concern for many people, but everyone prefers snappier browsing, every time.

karon• 12 years ago

How is that even possible? Firefox with blocker uses less RAM than without? Does it block elements from issuing requests?

aerique2• 12 years ago

It isn't quite clear to me what add-ons this can replace. Obviously AdBlock, but perhaps also Ghostery and No-Script?

logn2• 12 years ago

It's a replacement for AdBlock. JavaScript is not blocked unless it's part of an ad. The Easy Privacy list is part of uBlock by default, so there's some effective overlap with Ghostery but they're still different.

gorhill10• 12 years ago

You can control javascript execution when enabling "advanced user" mode: https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-qu...

rmi_• 12 years ago

There are lists available that block the same things as Ghostery. So yes, it does replace that.

Not NoScript, though.

bmn_• 12 years ago

comparison charts between HTTPSB (the predecessor of this topic's software) and Ghostery, inter alia: https://gigaom.com/2014/05/11/not-all-ad-blockers-are-the-sa...

waxjar• 12 years ago

µBlock does have an option to disable "first-party" and "third-party" scripts. It's configurable globally and per-site (per-site takes precedence).

I don't think it blocks Flash. I let the browser to that anyway, so for me this isn't a problem.

hit8run• 12 years ago

Under OS X I like https://glimmerblocker.org/

Glimmerblocker works on operating system level and you don't really need an adblocker in your browser.

jkot• 12 years ago

Use /etc/hosts blocking if you are worried about CPU and memory. It also works on rooted Android devices.

__Joker• 12 years ago

Where do you get the filter list to modify /etc/host ? Or Is there a easier way to get the filter list from ABP or mu-block ?

Dosenpfand• 12 years ago

I use this list and it works quite well: http://someonewhocares.org/hosts/

mih2• 12 years ago

Quite a few sources actually. Beware, some of them can be too restrictive. If the hosts file is too big, it can also impact performance.

http://winhelp2002.mvps.org/hosts.zip

(too restrictive) http://hosts-file.net/download/hosts.zip

(ad-servers n tracking only) http://hosts-file.net/ad_servers.asp

http://pgl.yoyo.org/as/serverlist.php?hostformat=hosts&showi...

http://sysctl.org/cameleon/hosts.win

http://www.malwaredomainlist.com/hostslist/hosts.txt

UserRights• 12 years ago

Blocking at the DNS level produces a lot of requests to 127.0.0.1, which can be quite annoying e.g. if you are using a local webserver for development. Also if you do not have a local webserver on 127.0.0.1 the browser still will wait for answers to your request, what can be an annoying experience. Would be interesting to measure how much CPU and memory actually is wasted with many tabs waitung for elements from 127.0.0.1.

It is the better approach to not let these requests happen right in the browser, what this plugin does, if I get it right.

A warm and big THANK YOU to the developer of this great software, it is so important and good to see that many developers are helping users to protect against the morally challenged who are stealing the privacy of millions every day.

mike-cardwell• 12 years ago

If you choose to send the blocked requests to an IP address where you also choose to put a web server, then what do you expect? There's nothing stopping you from sending blocked requests to 127.0.0.2 and configuring your dev web server to listen on 127.0.0.1.

"the browser still will wait for answers to your request" - Shouldn't have to wait. You should get a near instant rejection if you attempt to connect to a TCP port on your local host and there's nothing listening there... Unless you screwed up your firewall.

marios3• 12 years ago

DNS blocking works quite well. It's also very effective if you can set it up on your gateway so that it blocks ads/malware for all devices (PCs, phones, tablets ... even your guests will get adblocking for free!). However, while the /etc/hosts trick works I don't think it's the best way. The reason is that while parsing a plaintext file is easy and generally fast, it doesn't scale well especially when you have to traverse several megabytes of it for _every_ DNS request.

The way I have done it is by installing unbound[0]. If you aren't using something else like dnsmasq, you will notice a speedup from the DNS caching alone. While unbound isn't supposed to serve authoritative answers (i.e.: don't use it to manage your zone) the possibility is there. The unbound-block-hosts script[1] can be used to convert Dan Pollocks' hosts file to the appropriate unbound syntax.

To avoid the timeout from localhost, my first approach was to setup a firewall rules that discards the request (the browser receives a connection refused message _immediately_)

Another way of proceeding is to setup nginx to serve a 1*1 transparent GIF for every request it receives. If you find nginx to be too big a dependency, there are alternatives such as pixelserv[2].

The issue is that you can't block a specific element, but you still catch a fair share of ads.

I have explored the possibility of running a http proxy to address this, but I haven't got around to it yet. (In addition, I'll probably need to MITM myself if I want to block elements in HTTPS; still needs some thinking :)).

[0] https://unbound.net/ [1] https://github.com/jodrell/unbound-block-hosts [2] https://github.com/h0tw1r3/pixelserv

efraim• 12 years ago

Use 0.0.0.0 instead of 127.0.0.1, it won't make requests to localhost.

https://en.wikipedia.org/wiki/0.0.0.0

mwj• 12 years ago

How does this compare/contrast with Privacy Badger?

Anthony-G• 12 years ago

Good question. It's a pity that the only response was a flag-killed irrelevancy. Only last week, I downloaded and started using Privacy Badger as an alternative to Ghostery. I'm liking it so far but my current laptop is 7 years old and only has 1GB RAM (running LXDE) so resource consumption is my main concern after safe-guarding my privacy.

cgarvis• 12 years ago

I've been using Privacy Badger for atleast 6 months now. I really like it. I've opened a ticket on github asking for a comparison.

https://github.com/gorhill/uBlock/issues/554

bad_user• 12 years ago

Does this also work for Firefox on Android?

EDIT: it seems that it's not compatible with Firefox 35 on my Android. Oh well, more patience required :-)

threedaymonk2• 12 years ago

Bluhell Firewall does work on Firefox for Android, if you're looking for an ad blocker while you wait for µBlock.

notfoss2• 12 years ago

And so do Adblock Plus and Adblock Edge. The reason I am interested in this is because of much lower resource consumption than either of those.

I haven't tried Bluehell Firewall though. Can you comment on its performance as compared to Adblock Plus/Edge?

silverwind• 12 years ago

For system level blocking on Android, I've come to like AdAway (root required).

fpgaminer4• 12 years ago

It seems like, if one were an evil web developer, one could thwart blockers like these with a few nasty tricks. Server-side: on each request of a resource, salt all linked resource URIs and encrypt (after the host name) before sending the final document to the client. The resources can still be fetched, because the server can decrypt any requests, but the client has no way of knowing whether a particular resource is an ad or not. That thwarts URI based filtering. To thwart DOM filtering, randomize element classes and ids.

Though impractical, I thought it was an evil/funny idea.

Drakim• 12 years ago

If the resource names are still "static" your resources can still be blocked. But if they are altered slightly every time, you may also thwart caching, right?

fpgaminer4• 12 years ago

Right, which is why I added the bit about salting the URIs before encryption. The salt could be per request, per session, or rotated after some period of time (say once per day). If only rotated once per day, it would still thwart ad blocking, but have less of an impact on caching. It would turn into an economic question of whether the extra ad impressions are worth the extra bandwidth.

perlgeek2• 12 years ago

Ad programs such as Google AdSense forbid modification of the ad code through their ToS. So sre, you could encrypt (and javascript-side decrypt) your ads, but Google would (or might) through you out.

rb2k_• 12 years ago

I guess the problem would be that this will make these requests basically uncachable in something like Varnish :)

DavideNL2• 12 years ago

And in response, blockers could then create lists of hashes of ads (pictures) instead of URIs and block those ?

fpgaminer4• 12 years ago

That would burn bandwidth and loading time, since the only way to check the hash is to download the content. Part of the point of ad blockers is to stop the request for the ad as early as possible.

Regardless, it's easy enough to salt the ads for each request, thwarting hash checks.

Perdition• 12 years ago

Messing with the URIs isn't going to work because most ads are from ad networks and their domains can be blocked. And no ad network is going to trust some system where they need to rely on the client server to not lie about ad impressions.

Adblock mostly misses self-hosted ads anyway.

dzhiurgis• 12 years ago

TPB mirrors used to do something similar and I swear I had adBlock filter that efficiently blocked them.

Direct• 12 years ago

This is awesome! I recently read this ticket[1] mentioning that porting of µBlock seems to be a starting point for gorhill to port µMatrix. In my perfect world, I would be using Firefox with nothing but µMatrix, as it is right now I'm having to use Chrome with µMatrix and sadly can't get rid of µBlock until µMatrix can hide blocked frames. Still, getting closer to that perfect world! The work done by gorhill is amazing.

[1] https://github.com/gorhill/uMatrix/issues/73

mcovey• 12 years ago

Check out Policeman: https://github.com/futpib/policeman

It's similar to uMatrix and is under very active development.

topdownjimmy3• 12 years ago

...the inalienable right to privacy.

Yes, you have a right not to visit any website you don't want to.

perlgeek2• 12 years ago

If all websites declared all privacy violations up-front, that might be a viable solution.

topdownjimmy3• 12 years ago

Turn off cookies and JavaScript.

JohnTHaller5• 12 years ago

If the author is here, please turn off the counter by default. We're blocking distracting things in our browser, we don't need another pointless distracting thing in our browser toolbar.

sergiotapia• 12 years ago

Counter opinion: I like the number because if there's a website working not quite right, I can easily see the number and disable uBlock to test out if that's the cause.

DavideNL2• 12 years ago

Seems already configurable:

-> Settings -> Show the number of blocked requests on the icon

JohnTHaller5• 12 years ago

But you can't, though. uBlock shows the total number of blocked items since you started Firefox. Not the number for a given page or site. Making it a basically superfluous mostly useless datapoint.

simon_vetter• 12 years ago

is this on addons.mozilla.org? I couldn't find it there.

sjwright4• 12 years ago

Amazing work.

One concern is that the EasyPrivacy‎ list -- which is in my opinion overly aggressive -- is enabled by default. Most pertinently, it entirely disables Google Analytics on every site.

Rovanion• 12 years ago

Does the deactivation of Google Analytics impact the user negatively?

coldpie• 12 years ago

Arguably the sites they visit will be receiving skewed analytics against their particular use-case, so the site owners won't cater to their needs as much. That said, I still block GA.

oconnore3• 12 years ago

They don't get the privilege of having their data analyzed and used to market products back to them.

Some of the marketing people on here will probably find that to be horrendous. Where is my relevant promoted content?!

sjwright4• 12 years ago

Not directly, but it will affect the webmasters of non-commercial non-advertising websites if such block-lists become a default.

If you've ever implemented GA, you know that Google has put a lot of effort into making their implementation extremely efficient and asynchronous. I personally think they should be rewarded for being considerate towards users' time and resources.

GrinningFool2• 12 years ago

it entirely disables Google Analytics on every site.

Some might find being tracked across most of the Internet to be a privacy concern.

People put google analytics on their site because of the 'free' data they get from google, and I suspect most don't consider that there is a cost - it's just their users that are paying it.

sjwright4• 12 years ago

If you think GA is a privacy concern, you should consider services like gmail to be a privacy concern too. Perhaps they should block that too.

"Paying for it"? GA doesn't do much that a webmaster couldn't otherwise learn by analysing their webserver log files.

gorhill10• 12 years ago

EasyPrivacy‎ [...] it entirely disables Google Analytics on every site

You are mistaken. Unless it changed since I ran the benchmark, EasyPrivacy doesn't always block Google Analytics.

See diff of uBlock vs. ABP, both with EasyPrivacy selected: https://www.diffchecker.com/r7v1cq6x

In uBlock, it is Peter Lowe's list, selected by default, which blocks Google Analytic with good reliability.

quadrangle5• 12 years ago

The aggressors here are the people tracking everyone's activities not the ones blocking that tracking.

danielsamuels• 12 years ago

I tried this out for a couple of weeks after the "Adblock makes things slower" article came out, and I found it was blocking more stuff - but not necessarily the right stuff. I was finding that sites were breaking, stuff was disappearing and it was because of uBlock. I think I was trying to log into Medium and the Twitter and Facebook had been hidden, literally breaking the functionality of the site. That's not what I want from an adblocker.

maxerickson2• 12 years ago

There's already a couple of threads here discussing that uBlock is using different filters by default than other adblockers.

There's also a comment from the developer mentioning that the filter you mention has been turned off (https://news.ycombinator.com/item?id=8916774 ).

Here's a good guideline: uBlock is not yet the right blocker for people that don't want to configure anything. It's not clear to me that it is even trying to be that thing, but it's clear enough that it isn't there yet.

meowface• 12 years ago

This happened to me as well, but for different sites. In the end I just had to whitelist 2 domains and I haven't run ino a problem since.

losvedir2• 12 years ago

Well, as the README says, it's not an "adblocker" but a generic blocker.

Hiding Twitter and Facebook log-in functionality on Medium is a feature not a bug for me. By including those javascripts, both companies can build up a history of the sites I visit.

So I gather this is more of a privacy+ad blocker rather than strictly ad blocker.

gorhill10• 12 years ago

Unfortunately, even with EasyPrivacy and "Fanboy's Social Blocking", you will find that blockers (ABP, AdBlock, uBlock, etc) do not prevent 100% connecting to Facebook, Twitter, and whatnot.[1]

This is one of the reasons I see dynamic filtering as a key feature: users have the last word, not the filter lists.[2]

For example, I currently block all Facebook, Twitter, Disqus, and any of similarly ubiquitous domains by default using dynamic filtering, so that I have now 100% certainty that no connections to these domains occur on any page, while such certainty is not possible when relying solely on the filter lists.

[1] https://www.diffchecker.com/pz6rv6lq

[2] https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-qu...

Too• 12 years ago

This is what i like about ghostery. It will pop up a list of blocked sites in the corner each time you navigate, and you can from this list whitelist on a site-site basis.

kbart• 12 years ago

Can't find the article now, but it was posted on HN that these social sites' share/like/login plugins track your online activity, so blocking them is a privacy feature, not a bug. Ghosterity blocks these buttons by default too but allows them be enabled in settings.

justignore• 12 years ago

Agreed - to quote the French Revolution, "an overabundance of zeal."

bigbugbag• 12 years ago

Great feature, I don't have twitter or facebook and I have to add separate extensions to block those annoying tracking features from every other sites.

To me any website that rely on facebook or twitter to log in is broken and I just don't use them.

I recently had one that required sending my info to xiti to display a js popup to log in with email. Too bad they lost a potential client for their service because their web page sucks and is designed with them in mind instead of the actual user.

danieltoomey• 12 years ago

My version of firefox (34.05 on mac) says the tool is corrupted

titolibowitz• 12 years ago

try installing it from here: https://github.com/gorhill/uBlock/releases

worked for me.

codychan• 12 years ago

I tried this for Chrome for a couple days and found that it really didn't block too much ads(I can say none ads were blocked) comparing to ABP.

teamhappy• 12 years ago

Does anybody know if I really need the "Malware domain list" if I have Chrome's malware and phishing protection activated at the same time? Sounds like they might contain the same sites anyway.

ecaron2• 12 years ago

Personally, I hope that this doesn't get added to addons.mozilla.org. Their arbitrary human-control editor policy would be the best thing to cause stagnation of innovative plugins such as this. If the author goes the self-hosted route, automatic updates are still achievable (and can even occur faster.)

+1 for not having this in AMO!

hurin2• 12 years ago

I'm curious as to what drives the creation of this multitude of add-blocking projects? What is their income model and what supports their development?

beagle32• 12 years ago

The obnoxious and spying nature of ads.

hurin2• 12 years ago

... I'm not asking about why you'd want one. - I'm asking about why you'd make a new one and who would pay for your work on a new one when others already exist?

mdellabitta3• 12 years ago

I decided to dump extension-based privacy stuff and installed Privoxy instead.

I used to have Ghostery, Disconnect, ABP, and some other things running simultaneously. When you think about it, that's a lot of JS running and iterating the DOM multiple times every time you load a page.

Now there's a single, purpose-built, standalone process written in C doing it. Not going back.

notsony• 12 years ago

Any issues connecting to sites over SSL using Privoxy? I'm thinking mainly of banking web-sites.

Nanzikambe• 12 years ago

I've used Privoxy since late 2002 on a Linux gateway box - never had a single issue with SSL.

In fact the only issue I've ever had was building it an forgetting to enable threaded mode ..

mdellabitta3• 12 years ago

I don't recall any problems, but I use Foxyproxy to connect to it. In the worst case, you can just toggle it off quickly for that site, then turn it on again.

aerique2• 12 years ago

I used to run Privoxy for years and then came the time of AdBlock, NoScript, etc. Perhaps it is indeed time to look back again.

sdfjkl2• 12 years ago

I've used Privoxy & friends (Glitterblocker on OS X) since the days of junkbusters.com, but with SSL on the rise this no longer works very well for me.

avree• 12 years ago

Anyone looking to follow up on this comment should search for "GlimmerBlocker", not GlitterBlocker.

Useful stuff, though, thanks!

dormento• 12 years ago

For anyone searching for a blocking solution on OSX, the name is actually Glimmerblocker. It still works on Yosemite.

X-combinator• 12 years ago

All I notice is that websites like Wired.com load faster with a ad-blocker.

mdellabitta3• 12 years ago

Privoxy blocks ads, too.

01Michael102• 12 years ago

I agree, you had to many things running... What is the advantage of Disconnect when have ABP and Ghostery installed?

ultramancool• 12 years ago

Disconnect is an open alternative to Ghostery as Ghostery has some sketchy sponsors.

driverdan• 12 years ago

What about when you're doing development work on a site that uses content you'd normally block (Analytics, ads, etc)? When I spend a day working I don't want to have to toggle Privoxy every time I want to search for something.

dserodio3• 12 years ago

Use FoxyProxy and create rules that "whitelist" the sites you're working on

Torgo• 12 years ago

You really probably want to use a separate browser profile with no plugins installed. It really sucks when you're trying to debug a problem and it turns out it's some combination of extensions you have installed causing the problem.

Tobu2• 12 years ago

This doesn't work with the push to HTTPS. Either you use proxy connect, and Privoxy is no better than /etc/hosts blocking. Or you'd rely on the proxy's poorer and slower implementation of TLS. Certificate verification will suffer (no certificate pinning, no certificate blacklist, no OCSP stapling, no way to verify incomplete chains), no SPDY, no sunsetting of bad ciphers or bad protocols.

pekk• 12 years ago

Is there some reason in principle why you can't constructively MITM yourself without using piles of Javascript in the browser?

exadeci2• 12 years ago

Did you manage to make it work with skype ? (it seems that skype doesn't use the proxy parameters for ads)

arthurfm• 12 years ago

To disable the banner ad you could add https://apps.skype.com/ to your restricted sites list.[1]

[1] http://www.reddit.com/r/LifeProTips/comments/27dihm/lpt_you_...

kogus• 12 years ago

I've found it effective to just watch Skype with Fiddler, and add whatever ad servers it touches to my hosts file, and redirect them to 127.0.0.1 Entries like this work for me:

  #BEGIN: Skype ad servers
  127.0.0.1       rad.msn.com
  127.0.0.1       a.rad.msn.com
  127.0.0.1       secure.adnxs.com
  127.0.0.1       m.adnxs.com
  127.0.0.1       ads1.msads.net
  #END: Skype ad servers

Mandatum3• 12 years ago

Unfortunately HTTPS makes proxy-based privacy stuff unusable without invalidating your SSL/TLS certificate in the browser. Extensions are the only reliable method AFAIK for browsing ad-free, securely. That is, if you consider the extension secure.

dsl• 12 years ago

Actually it can make your setup far more secure.

You could move all SSL validation off to your proxy, and generate certificates from your own CA on the fly. Then within your browser or OS you can remove everything except your own CA from the trust store.

pjc50• 12 years ago

It really ought to be possible to have a dynamic browser hook in Firefox's parsing phase to allow pre-manipulation of the DOM (or raw HTML) in native code. However actually finding the right spot in the giant codebase to do this is another matter.

HeXetic• 12 years ago

It would be nice if the link was to the top of the page, or the start of the Readme, instead of to #installation. A bit presumptuous there.

webwanderings• 12 years ago

Please get us uBlock for Chrome on Android and iOS.

Perceval• 12 years ago

I use Weblock on iOS: http://www.weblockapp.com/

austinsharp• 12 years ago

I'd recommend Javelin Browser[0] on Android.

[0] http://javelinbrowser.com/

chdir• 12 years ago

Can someone familiar with the code explain what's the difference between this & adblock/disconnect etc. Why is this lighter? (a little technical algorithm difference would be good to know)

edwintorok2• 12 years ago

I think uBlock only injects the CSS rules needed, not 14000+ like ABP: https://github.com/gorhill/uBlock/issues/161#issuecomment-52...

leke• 12 years ago

This came just in time. My Firefox was crawling with ABP. Now it's flying along again.

unethical_ban• 12 years ago

I like it, but so far anyway, I'm not feeling discernible differences in performance. That's just me though!

I would like to see something akin to Ghostery's interface where I can see exactly what trackers/ads are hitting me at a site, and whitelist by domain.

lars_francke3• 12 years ago

I've never had an (Ad) blocker as I'm relatively happy with most sites but there are some that are not behaving well.

When I last looked (at least two years ago) there wasn't a single blocker that supports a blacklist-only mode. Meaning: Allow everything unless I block a certain domain.

Does anyone have an idea if something like this exists now?

exadeci2• 12 years ago

Well if you disable all the filters of Ublock and add your block list to the "My filters" tab that should do what you want :)

lars_francke3• 12 years ago

Thanks but that's not what I'm looking for.

I don't want to maintain any block lists myself. I want to use all the 3rd-party Filters available but I only want them to be active on certain spammy websites. As far as I can tell ublock doesn't let me do that either.

Tobu2• 12 years ago

Just don't enable any filter lists. A while back you had to add them manually; now I think it's a matter of unchecking them in the first-run dialog.

ABP also makes it easy to create very specific rules: only block a particular resource when accessed from the current domain.

lars_francke3• 12 years ago

Thanks but that's not what I'm looking for. I want them all enabled! But I only want to enable the addon for certain blacklisted sites.

G2P2• 12 years ago

I've been using this port instead of Adblock Plus for a few weeks. I like the low overhead, but usability is bad.

- It's hard to list what filters are applied (though not impossible, if you like pain: hunt for the right icon using hovertext, find an empty page, hunt for icons again this time without hovertext; one icon will trigger something that will fill up a log, but it stalls a few seconds first and there's no progress indication).

- The big green “power” icon is the wrong metaphor. IMHO uBlock should just stop using icons.

- ABP has simple and obvious text menus, uBlock fails at making its features discoverable. This despite ABP being much more feature-complete.

- There's no way to enable and disable filters from a page.

- There's no easy way to reach uBlock preferences (though not impossible, if you click random areas of the main panel)

- There's no rule editor. ABP's rule editor makes the simple cases easy and the tricky ones possible.

- The element hiding picker is unusable. The ABP picker is well polished, but ABP also integrates with the Firefox developer tools. That simple feature makes it unnecessary to code a custom picker.

INTPenis• 12 years ago

I hear what you're saying but to me the advantage of ABP has been never having to see its preferences. I've used it for many years and I can't remember ever going into the preferences for any reason.

I've said this before but being a habitual user of noscript I feel that all I really need from an adblocker is to skip those annoying youtube commercials. Everything else noscript handles pretty well. So I'll have to see if uBlock can do that for me.

wernercd• 12 years ago

You need to atleast go into the preferences to select extra lists (if you want them) and to disable whitelisted sites (also, if you want to do that since ABP enables "some" ads by default).

(I'd probably enable the whitelisted stuff... IF I wasn't more concerned about adware than anything else over ad-networks)

findjashua4• 12 years ago

ublock doesn't work on quite a few sites, whereas I've never had an issue with adblock. Couple of examples off the top of my head:

1. giphy: it removes the share and twitter buttons

2. doesn't block ads on hulu

There were others as well that I seem to be forgetting (I remember having to disable it on quite a few sites). Good intention (lowering memory consumption), but the execution still has some way to go.

sprokolopolis• 12 years ago

Some of those share/tweet/like buttons can track you without no interaction, just by loading on the page. Removing them might be intentional for this reason.

findjashua4• 12 years ago

True, but imho an ad blocker should just block ads by default. I'm not sure if I'm representative of most users, but I don't really care as much about tracking, just about ads cluttering the page.

quadrangle5• 12 years ago

this is just different filter presets. You can change the filters. In my case, I had ABP doing all that same blocking, only I had to opt-in, whereas with ublock that blocking is opt-out.

findjashua4• 12 years ago

fair enough, but if you're going to compare ublock to ABP, as a user my expectations from it are going to be like those from ABP. By default it should work like an ad-blocker, with an option to block other stuff. For users like myself, who don't really care about tracking, just about ads cluttering up a page or delatying a video, blocking out stuff other than ads just 'breaks' the site.

pwr22• 12 years ago

Is this considered stable now? Last I checked it had some problems, if fixed already that is awesome

bsder• 12 years ago

Does this work on any of the mobile browsers? I'd kill for something to block stuff properly on mobile.

dpifke• 12 years ago

I just tried and was unsuccessful at installing it on Firefox for Android. (Fails to install silently after download.)

That said, Ghostery (and for that matter, HTTPS Everywhere) both work great.

tux3• 12 years ago

Awesome exactly what I was looking for. Because AdBlock Plus is extremely slow at times. Also uBlock provides many more filters. Thank You!

dserodio3• 12 years ago

The official XPI are here: https://github.com/gorhill/uBlock/releases

tux3• 12 years ago

Thanks :-) Will check it out.

tux3• 12 years ago

Installed it in Firefox 35 and Chromium 39 on Arch Linux, now browsing is noticeably faster :-) Whooohooo!

gorhill10• 12 years ago

Well while this is being seen by many, I just want to take the opportunity to reiterate what is said in the README of the project:

Without the preset lists of filters, this extension is nothing. So if ever you really do want to contribute something, think about the people working hard to maintain the filter lists you are using, which were made available to use by all for free.

Specifically, EasyList, EasyPrivacy, Fanboy Social, Malware domains, and a many more are the basis of many other blockers: Adblock Plus, AdBlock, AdGuard, BlueHell, and many others I am sure.

It seems such a tedious amount of work to maintain these lists, this needs to be acknowledged -- none of the above blockers would do very well without these lists.

µBlock for Firefox

Related Stories