Skip to content

ppss.kr #9717

Closed
Closed
ppss.kr#9717

Description

@JobcenterTycoon
JobcenterTycoon
opened on Aug 6, 2021

Prerequisites

I tried to reproduce the issue when...

  • uBO is the only extension
  • uBO with default lists/settings
  • using a new, unmodified browser profile

URL(s) where the issue occurs

https://ppss.kr/

Describe the issue

browser fingerprinting (canvas, audio, domRect, browser info like screen, cpu, ...)

Screenshot(s)

No response

uBlock Origin version

1.37.2

Browser name and version

Firefox developer

Settings

  • Enabled uBlock filters – Annoyances

Notes

with
*$script,redirect-rule=noopjs,domain=ppss.kr
@@||ppss.kr^$generichide
i get way less requests

Activity

  1. uBlock-user commented on Aug 7, 2021

    @uBlock-user
    uBlock-user
    on Aug 7, 2021
    Member

    Not seeing any slew of network requests there...explain what you see as per the logger.

  2. uBlock-user
    added
    unable to reproduce
    on Aug 7, 2021

  3. JobcenterTycoon commented on Aug 7, 2021

    @JobcenterTycoon
    JobcenterTycoon
    on Aug 7, 2021
    ContributorAuthor

    xhr https://ppss.kr/hyBqrFr6m5jeT5.otf (its random and the end is random too). Logger output:
    Unbenannt

    Data sended to the site: MkkQR0dbVhAIEAdXAwtUU1FTH1ABC1QfBgtWUB8KAQUCHwIDBAQHBFdWAQUKVxAeEF1AW1VbXBAIEEJCQUEcWUAQHhBHQF4QCBBaRkZCQQgdHUJCQUEcWUAdEB4QW0FtU1ZQXl1RWRAIVFNeQVceEFtBbVBeXVFZW1xVbVNRUVdCRlNQXldtU1ZBEAhUU15BVx4QVFtcVVdAQkBbXEYQCBACUFQHBFQAVAsLAlcGAwsLUwpTBgFUAwsHUAECU1EAVxBP

    when i remove the script (not the base64 encoded script from adshield, i mean the tracking script on top of the site) with a filter like ppss.kr##^script:has-text(getPrototypeOf) the request with the data inside no longer appears (Data showed in the console not in the logger). Just 3 requests from Adshield are left but with no data.

    Unbenannt

    When you see way more requests add the filter from the issue to get rid of them.

  4. uBlock-user
    removed
    unable to reproduce
    on Aug 7, 2021

  5. uBlock-user commented on Aug 8, 2021

    @uBlock-user
    uBlock-user
    on Aug 8, 2021
    Member

    Those XHRs are used for detecting adblock, blocking them will cause adblock detection which will trigger the anti-adblock script to throw Error contructor which will cause in aborting of site load. Adding ppss.kr##^script:has-text(getPrototypeOf) doesn't affect anything I still see 8+ XHRs being fired as per the logger/

    browser fingerprinting (canvas, audio, domRect, browser info like screen, cpu, ...)

    You have to yet to show that happening in any XHR that's fired there.

  6. JobcenterTycoon commented on Aug 8, 2021

    @JobcenterTycoon
    JobcenterTycoon
    on Aug 8, 2021
    ContributorAuthor

    Ok here a better option to see that:
    When i defuse ad shield with ppss.kr##^script:has-text(createElementNS) (only for testing) all ad shield XHRs are gone. Just one is left with hashed data sended the the server. Its coming from the tracking script.

    Unbenannt

  7. uBlock-user commented on Aug 8, 2021

    @uBlock-user
    uBlock-user
    on Aug 8, 2021
    Member

    ppss.kr##^script:has-text(createElementNS)

    Breaks thumbnails on the homepage.

  8. uBlock-user commented on Aug 8, 2021

    @uBlock-user
    uBlock-user
    on Aug 8, 2021
    Member

    I have to yet to see a filter you post that defuses ad-shield XHRs without triggering anti-adblock or breaking the site. So closing as wontfix.

  9. uBlock-user
    closed this as completedon Aug 8, 2021
  10. uBlock-user
    added
    wontfix
    on Aug 8, 2021

  11. JobcenterTycoon commented on Aug 8, 2021

    @JobcenterTycoon
    JobcenterTycoon
    on Aug 8, 2021
    ContributorAuthor

    The first one was only to show the tracking. Real filter:

    defuse tracking xhr (the issue)
    ppss.kr##+js(aeld, DOMContentLoaded)

    defuse ad xhr (no tracking) without triggering anti adblock
    ppss.kr##[href*="https://www.classo.me"]:remove()
    ppss.kr##.ppss-title-banner:remove()

    i get no breakage with this. But defuse the ads can trigger their "adblock monitor system" but i hope the tracking fix not

  12. uBlock-user commented on Aug 8, 2021

    @uBlock-user
    uBlock-user
    on Aug 8, 2021
    Member

    Tracking is completely disabled if I add both, do you see any site breakages with both of being added ?

  13. JobcenterTycoon commented on Aug 8, 2021

    @JobcenterTycoon
    JobcenterTycoon
    on Aug 8, 2021
    ContributorAuthor

    I tested: search, articles, images and the twitter embed and i have no breakage

  14. uBlock-user
    added a commit that references this issue on Aug 8, 2021

    fix #9717

    315764f
  15. uBlock-user
    removed
    wontfix
    on Aug 8, 2021

  16. 92 remaining items

  17. piquark6046 commented on Apr 10, 2022

    @piquark6046
    piquark6046
    on Apr 10, 2022
    Member

    #9717 (comment)
    @Yuki2718

    Not yet.
    However, I opened a PR.

  18. Alex-302
    added a commit that references this issue on Apr 11, 2022

    Remove conflict between Adguardfilters and List-KR, and Update (#115163)

    acc312f

  19. gaeulbyul commented on Apr 13, 2022

    @gaeulbyul
    gaeulbyul
    on Apr 13, 2022
    Contributor

    Update: They uploaded more scripts. This time, none of packages' name are matches a /[a-z]{10}/ pattern:

    ||cdn.jsdelivr.net/npm/ruibwv-wor-ownqwwl^
||cdn.jsdelivr.net/npm/whiou^
||cdn.jsdelivr.net/npm/vloincrw^
||cdn.jsdelivr.net/npm/noqe-jlnva^
||cdn.jsdelivr.net/npm/iknwripb-kbhewrnk^
||cdn.jsdelivr.net/npm/ubhor-phi^
||cdn.jsdelivr.net/npm/jnippij^
||cdn.jsdelivr.net/npm/bouwp^
||cdn.jsdelivr.net/npm/biyp^
||cdn.jsdelivr.net/npm/zcxqeo-bihcq-ibhw-qbue^

    Also, There's a questionable domain hidden in the code there. (base64-encoded 03c844c9-d265-4006-a39d-400e6cb40bb7.xyz)
    I suspect this domain is for doing the same purpose as the domain we previously blocked before. (1ee085aa-4c05-43a8-a4fe-fafedbedd062.xyz)

  20. JobcenterTycoon
    added a commit that references this issue on Apr 13, 2022

    address #9717 (comment)

    b39df05

  21. JobcenterTycoon commented on Apr 13, 2022

    @JobcenterTycoon
    JobcenterTycoon
    on Apr 13, 2022
    ContributorAuthor

    @Yuki2718 plase take a look on the regex i not know if it is safe to adjust it globally

  22. Yuki2718 commented on Apr 13, 2022

    @Yuki2718
    Yuki2718
    on Apr 13, 2022
    Member

    Where they're used? On tgd.kr the script is still caught by the current regex.

  23. mapx-
    added a commit that references this issue on Apr 13, 2022

    Apply more scripts (#12721)

    1c566d7
  24. Alex-302
    added a commit that references this issue on Apr 13, 2022

    Apply more scripts (#115474)

    e96e5da
  25. JobcenterTycoon
    added a commit that references this issue on Jul 15, 2022

    update #9717

    5a06cef
  26. JobcenterTycoon
    added 2 commits that reference this issue on Jul 26, 2022

    update #9717

    719cd31

    update #9717

    226d929

  27. piquark6046 commented on Aug 17, 2022

    @piquark6046
    piquark6046
    on Aug 17, 2022
    Member

    If you want to block Ad-Shield, please install microShield.

    This issue is mentioned at https://www.ad-shield.io/aritlcle/facebook-war.

  28. ryanbr
    added a commit that references this issue on Mar 16, 2024

    M: Addres uBlockOrigin/uAssets#9717

    8167066

  29. Daxy7 commented on Feb 9, 2026

    @Daxy7
    Daxy7
    on Feb 9, 2026

    is adshield still unblockable on this domain for example: easylist/easylist#23071 ?

  30. mapx- commented on Feb 9, 2026

    @mapx-
    mapx-
    on Feb 9, 2026
    Contributor

    539cd99

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions