Post by mslo79 on Dec 25, 2019 10:43:07 GMT
Here is something I stumbled into which apparently the developer himself said (i.e. www.wilderssecurity.com/threads/umatrix-the-http-switchboard-successor.369601/#post-2421553 ) helps block a lot of malware in drive-by download attacks with minimal breakage of websites in general (i.e. which means it should be reasonably safe for the average person to use without breaking websites in general and if by some chance it does break a websites functionality one can fix it... github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode (i.e. see 'Tips' section))... github.com/gorhill/uBlock/wiki/Dynamic-filtering:-Benefits-of-blocking-3rd-party-iframe-tags ; so as you can see given the article examples he posted, it gives one a decent bump to their online security with minimal to no effect on ones general web browsing which is why I thought I would make a post about it since it can be beneficial to the average person around here and I suspect this is even further beneficial if you visit a fair amount of random/suspect websites you tend not to trust (hell, even if you do trust them... legitimate websites have been hit by ads that can hack someones PC just from visiting a website with shady ads (i.e. drive-by downloads basically)).
basically for those who want to enable a bit more protection in uBlock Origin online (i.e. lowers ones chances of getting hit by a drive-by download) you want to do the following... click on the uBlock Origin icon, then click 'open the dashboard' (i.e. the icon below the main blue icon on the far right with the three lines in it), go to 'Settings' then CHECK the 'I am a advanced user'. then go to 'My rules' and on the 'Temporary rules' side of the page (the right side) enter the following...
* * 3p-frame block
then click SAVE. then to the left of the SAVE, click on 'Commit'. your done. just reload any active tabs you got open or just reload the browser.
basically for those who want to enable a bit more protection in uBlock Origin online (i.e. lowers ones chances of getting hit by a drive-by download) you want to do the following... click on the uBlock Origin icon, then click 'open the dashboard' (i.e. the icon below the main blue icon on the far right with the three lines in it), go to 'Settings' then CHECK the 'I am a advanced user'. then go to 'My rules' and on the 'Temporary rules' side of the page (the right side) enter the following...
* * 3p-frame block
then click SAVE. then to the left of the SAVE, click on 'Commit'. your done. just reload any active tabs you got open or just reload the browser.
because while it suggests blocking 3rd party scripts, I noticed it breaks functionality of websites, like this IMDB2 one, as while the site basically works, it loses the ability of drop down menus when highlighting the 'IMDb v2.1' thing at the top left area of the page to select your part of the forums. but I do notice sites do load noticeably faster with the 3rd party scripts option. but blocking only the '3rd party frames', IMDB2 works as expected, which is why I only mentioned blocking 3rd party frames above as that one should be fairly safe for the average person to use since it's a minimal to no negative effect on general use but gives a decent bump to ones online security.
p.s. Merry Christmas everyone 
on a side note... for additional security it would be wise to run your browser in a sandbox. for Windows users it seems Sandboxie (i.e. www.sandboxie.com/ ; used to cost $ but now it's completely free ) is a good program to use (I am on Linux and I use Firejail (which is easy to use and also free)) as just using this, regardless if you do any of these uBlock Origin tweaks, will help make it much less likely anything shady gets onto your system just from browsing random websites online as even if some drive-by download gets past your browser, that sandbox should stop it from screwing with your computer.
NOTE: I don't have much experience using Sandboxie but apparently it works well and it's now free. but Firejail on Linux is easy to use as I have installed it not all that long ago (i.e. sourceforge.net/projects/firejail/files/firejail/ ; I got the "firejail_0.9.60_1_amd64.deb" installed currently) and it's solid as it's simple enough to where the average person can use it once setup. but I kind of assume just about everyone reading this won't be running Linux, so that Firejail thing will be useless for them.
EDIT: I noticed embedded YouTube videos people post get blocked on IMDB2 with that '3rd party frames' I suggested above. but a work around can be found here... github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide ; basically scroll down the section where it says "If you want to block all 3rd-party frames by default, except for embedded YouTube videos on that particular site, two solutions." for more info. basically the 'Second solution' section or a bit below that is what you want to pay attention to as it can be done strictly on a single site, like say IMDB2 for example, or embedded YouTube videos can be allowed on ANY site you visit if you read a bit further. so it just depends on whether you want to be a bit more restrictive with embedded YouTube videos or not, like limit it to only allowing embedded YouTube videos on say IMDB2 and will have to manually allow it on other sites you use or you can just allow ANY site to use embedded YouTube videos. the any site is probably the easier option since you set it once and your done as all sites will now allow embedded YouTube videos to play on random sites you visit, or if you prefer to just allow it on IMDB2 for example, but don't want it automatically working for other random sites you may use.
EDIT #2: it also blocks embedded Twitter stuff to.
so in other words... using what I suggested in this general thread might require some tweaking at times (to allow certain additional things to function correctly(but the core function of this site works fine)) but I figure it's worth it for the increased security (although the main thing is regardless if you use these tweaks here or not... keep your OS(operating system)/web browser (and any plugins you might have installed) up to date and your chances of getting hit with shady stuff by just visiting a website should be minimal). but even for those who want super simple, just having uBlock Origin (by Raymond Hill) installed in it's default state is good enough and it tends not to interfere with anything which is why what I suggested above is not enabled by default as when someone makes a adblocker/junk blocker like uBlock Origin they have to find that sweet spot of filtering unwanted junk but not blocking too much to where it interferes with a websites general function/features.