Faceblock: FB targeted tracking event assessment & protection

[lukemulks]

• Did you search for similar issues before submitting this one?
  Y

• Describe the issue you encountered:
  Within FB and outside of FB, minimal shields are currently applied. We need to update to apply targeted blocking of privacy threats, as FB has folded Atlas agency-level ad tracking into social widgets, etc. in the wild.

• Platform (Win7, 8, 10? macOS? Linux distro?):
  desktop - all, mobile

• Brave Version (revision SHA):
  v0.13.1

Need to capture session outside of FB and list events.
Need to capture session w/in FB and list events.
Need to ensure webcompat is considered.
Need to form and submit rules to appropriate shields.

[lukemulks]

FYI - I'm rolling this issue into a parent initiative that I'm working on for social media network ads (w/in networks, and in embedded widgets and SDKs in the larger Web) - Tracking that initiative here for reference: #7678

[lukemulks]

Run checks in FB today, and out of the 3 major blockers (AdBlock Plus, AdBlock, uBlock Origin), uBO is the only one of the three that is effectively blocking within FB.

I focused on uBO, and these are the filters they have in place to block FB ads:

REQUEST filter rules | (I'm going to add these to brave/adblock-lists as custom filters)

||facebook.com/ajax/*logging

• found in: EasyPrivacy

||facebook.com/xti.php?

• found in: EasyPrivacy

||facebook.com^*/impression_logging/

• found in: EasyPrivacy

CSS/DOM ELEMENT hiding filters

facebook.com##:xpath(//div[@id="stream_pagelet"]//div[starts-with(@id,"hyperfeed_story_id_")][.//h6//span/text()="People You May Know"])

• found in: uBlock filters

facebook.com##.ego_section:has(a.adsCategoryTitleLink)

• found in: uBlock filters

##.adsCategoryTitleLink

• found in: EasyList

facebook.com###stream_pagelet div[id^="hyperfeed_story_id_"]:has(a[data-hovercard][href*="hc_ref=ADS"])

• found in: uBlock filters

facebook.com###pagelet_ego_pane a[ajaxify*="&eid="]

• found in: EasyList

cc: @bbondy

[lukemulks]

Update: I've done some checking into FB ad and tracking APIs, and have a shortlist for what we can block for tracking outside of FB (as 3rd party tracking)

Need to run a quick test on these, but these are probable:

||connect.facebook.net/*/fbevents.js$third-party
||facebook.com/tr^$image,third-party
||graph.facebook.com^$third-party

Holding off on 1p FB filters, confirming that google and other 3p ads are blocked in FB.

Once tests complete, will update adblock-lists with the filters above.

[lukemulks]

Migrating issue to: brave/adblock-lists#21 for resolution.
Closing issue here given the notes above.

[luixxiul]

Is there any PoC site?