Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

www.sueddeutsche.de anti-adblock #174

Closed
mario98 opened this issue Oct 24, 2016 · 15 comments
Closed

www.sueddeutsche.de anti-adblock #174

mario98 opened this issue Oct 24, 2016 · 15 comments

Comments

@mario98
Copy link

mario98 commented Oct 24, 2016

The german newspaper website sueddeutsche.de (Sueddeutsche is one of the largest german newspapers) recently implemented an anti-adblock technique, locking out users with adblock enabled. uBO recently successfully cracked other anti-adblock techniques, like those used on the german newspaper BILD.de, therefore I wonder if you have any ideas on how to crack this one as well.

URL(s) where the issue occurs

http://www.sueddeutsche.de/

Describe the issue

When uBlock Origin is installed, the user will be redirected to http://www.sueddeutsche.de/adblock immediately after visiting http://www.sueddeutsche.de/, cannot read any articles.

Screenshot

Image of Issue

Versions

  • Browser/version: Firefox, but affects other as well I guess
  • uBlock Origin version: 1.9.12

Settings

I'm using "Easylist German" in addition to the default filter lists.

Appendix

A german security blogger investigated how many tracking and advertisement scripts are included by Sueddeutsche, and the results are quite shocking: https://blog.fefe.de/?ts=a6f0d544 So disabling adblock is not a solution if you care for privacy.

@yoshimo
Copy link

yoshimo commented Oct 24, 2016

Can you confirm that it doesn't appear if you disable cookies?

@mario98
Copy link
Author

mario98 commented Oct 24, 2016

Indeed, if you disable cookies through Firefox' per-site permission manager, this doesn't appear. Maybe it's because if you are a registered user, you can continue to use adblock. (for some reason...) So when you disable cookies, this may break the detection of whether the user is registered. But disabling cookies by uMatrix on the other site doesn't work. You really have to block it through your webbroswer.

@gorhill
Copy link
Member

gorhill commented Oct 24, 2016

@@||sueddeutsche.de^$generichide works here.

If you confirm it works, this should be submitted to EasyList Germany.

@mario98
Copy link
Author

mario98 commented Oct 24, 2016

Works, but I noticed that uMatrix (all host files enabled) is then detected as the "ad-blocker".
But only if I use the filter rule, disabling cookies works even with uMatrix enabled. Sueddeutsche seems to check if a certain script can be executed. I found out that scrip.ioam.de is responsible for this. (If you enable this script in uMatrix, it's not detected any more.)

@yoshimo
Copy link

yoshimo commented Oct 24, 2016

how about

www.sueddeutsche.de##script:contains(AdBlock)
instead?

http://pastebin.com/dPXJsrnV has the deminified source of http://media-cdn.sueddeutsche.de/globalassets/js/sde-header-desktop.js

maybe there is a nicer solution as well

@gorhill
Copy link
Member

gorhill commented Oct 24, 2016

Should avoid using script:contains, ability to block execution of specific inline script tags will be removed in Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1286822.

@mario98
Copy link
Author

mario98 commented Oct 24, 2016

That's bad news. I use this script:contains a lot for my private filter rules, because nearly half of the german websites use this stupid AdDefend now. script:contains(uabInject) or similar was the only thing that has worked... So sad that Google has so much power that they can just eliminate a web standard...

@gorhill
Copy link
Member

gorhill commented Oct 24, 2016

Try ...##script:inject(uabinject-defuser.js). I stopped creating ...##script:contains(...) fitlers, now I favor what works on all browsers.

@yoshimo
Copy link

yoshimo commented Oct 24, 2016

as far as i can see there is no uab function in that file so the ad defend thing won't help.

@gorhill
Copy link
Member

gorhill commented Oct 24, 2016

I was just answering to

I use this script:contains a lot for my private filter rules, because nearly half of the german websites use this stupid AdDefend now. script:contains(uabInject) or similar was the only thing that has worked

@TonyTough
Copy link

TonyTough commented Dec 7, 2016

They changed the Anti-Adblock-script:
Disabling Cookies no longer works, also
@@||sueddeutsche.de^$generichide
no longer works.

www.sueddeutsche.de##script:contains(AdBlock)
still works.

@gorhill gorhill closed this as completed in 9af4f76 Dec 7, 2016
@ghosty141
Copy link

ghosty141 commented Oct 31, 2017

Actually it doesn't work for me anymore, Safari, uBlock 0.9.5.2

@okiehsch
Copy link
Contributor

okiehsch commented Oct 31, 2017

ublock 0.9.5.2, you are not using uBlock Origin , you are using uBlock.

@ghosty141
Copy link

ghosty141 commented Oct 31, 2017

Thanks! When I first installed uBlock there was no safari version out yet, thanks for pointing me to it! The problem remains though, even using the "www.sueddeutsche.de##script:contains(AdBlock)" filter it shows the adblock site ~90% of the time. Sometimes it does work, like when you click on anything but the front-page.
screen shot 2017-11-01 at 01 10 57

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

7 participants
@yoshimo @gorhill @TonyTough @okiehsch @ghosty141 @mario98 and others