kdnyhan, 7 months ago

@ai6yr this is serendipitous - I was just telling a library user, hey website X looks a lot cleaner in my browser (with an adblocker) than in their browser, and they told me they had to remove the adblocker they had been using in order to access the institution's remote access software. (I'm not 100% sure that's true, but if it's the message that users are getting, we should fix that)

m3t00, 6 months ago

@ai6yr
I know it makes my surfing more carefree. I've never seen the YouTube anti-adblock warnings so many complain about. Mobile is another story. I don't like surfing mobile much. Avoid mostly

axh, 6 months ago

@ai6yr heck yeah

chewie, 7 months ago

@ai6yr They're a bit slow aren't they?
They should have been advocating this about 20 years ago....

VirginiaSOpossum, 7 months ago

@ai6yr Somebody tell YouTube?

jhavard, 7 months ago

@ai6yr More importantly, any web site that wants you to disable ad blocking is now considered a threat to the national security of the united states of america.

ppxl, 7 months ago

@ai6yr oh, that early? 😅 but still 👍🏽

FrohlichMarcel, 7 months ago (edited 7 months ago)

@ai6yr @FroehlichMarcel
„Adversaries can even create carefully tailored ads as part of a targeted campaign against a specific victim.“

#Malvertising #SurveillanceAdvertising

ShredderFeeder, 7 months ago

@ai6yr oh google is gonna hate this....

rajnr, 7 months ago

@ai6yr the challenge I’ve found is that ad blockers have a low partner-acceptance rate because the goshdarned websites are absolutely broken if the ads don’t show.

hnapel, 7 months ago

@ai6yr

In normal language:

Apply protective DNS technologies: PiHole!

trinarybit, 7 months ago

@ai6yr Okie && dokie

stonedonkey, 7 months ago

@ai6yr one of the reasons I love #pihole - and watching the logs will definitely creep one out at times.

John, 7 months ago

@ai6yr I thought that paragraph was very interesting. On the one hand it says that ad blocking is good. On the other hand it says that bad ad blockers can themselves hack you. Then it says so you should go out and find one that is safe.

???

neonlights84, 7 months ago (edited 7 months ago)

@ai6yr It's funny how security orgs frequently talk up emails/phishing attacks as a common attack vector - but never talk about the ubiquity of browser-based attacks. Glad to see a shift here in the right direction. https://www.cisa.gov/sites/default/files/publications/Capacity_Enhancement_Guide-Securing_Web_Browsers_and_Defending_Against_Malvertising-Guidance_for_Non-Federal_Organizations.pdf

tjbutt58, 7 months ago

@ai6yr ACSC has that recommendation too, been in place for some years.

I've found it easiest to use a DNS sinkhole to do it, as that's provided the most bang / effort.
Pihole in my case.

neonlights84, 7 months ago

@ai6yr I wonder which browser / ad-blocker they recommend???

alexr, 7 months ago

@ai6yr @brianbehlendorf Cool, so can they now apply sanctions of some kind to Google for the nonsense they're doing on YouTube?

SpaceLifeForm, 7 months ago

@ai6yr

This is true. It will reduce attacks.

Because it will reduce attack surface.

ai6yr, 7 months ago

@SpaceLifeForm Oh, absolutely. I'm now on an adblocker and also off Windows, and it sure feels a lot more secure.

chileannick, 7 months ago

@ai6yr finally