you are viewing a single comment's thread
view the rest of the comments
[–] 169 points 8 months ago (18 children)

Archive.today apparently hijacks visitor's browsers to DDoS a blog that tried to uncover the identity of the archive's admin. UBlock helps to stop that script.

  • source
  • hideshow 18 child comments
  • [–] 112 points 8 months ago (7 children)

    Another example why Unlock Origin should be considered essential security software, not just an "ad-block".

  • source
  • parent
  • hideshow 7 child comments
  • [–] 10 points 8 months ago (6 children)

    If a tool is demonstrably indispensable to disable some browsers' functionality, is it wise for browsers to have that functionality?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 19 points 8 months ago* (last edited 8 months ago) (3 children)

    There may be genuine use cases to run a script, or whatever the attacker used. The problem is the browsers will auto-run stuff, the user isn't aware and there's no way to stop it. All ublock (and others) do is provide the missing security layer called "don't auto run shit from the web".

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 8 months ago (2 children)

    it won't provide that, everything will still autoorun, but known bad things won't get to run

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 8 months ago

    The NoScript extension will properly do this. The extension blocks domains from running scripts except those you've whitelisted. There's a drop down that displays a list of domains from which the page wishes to run scripts. It makes much of the web a pain to use, though. I sometimes have to go through a loop of whitelisting a subset of domains which want to run followed by a page refresh until the page works. Javascript is often not optional. If you had to live like Richard Stallman professes you should, you'd probably have to join the Amish.

  • source
  • parent
  • [–] 40 points 8 months ago (7 children)

    UBlock helps to stop that script.

    Would that be by default, or do I need to enable something specific

  • source
  • parent
  • hideshow 7 child comments
  • [–] 36 points 8 months ago* (3 children)

    from the blog in question

    On January 21, commit ^bbf70ec (warning: very large) added gyrovague.com to dns-blocklists, used by ad blocking services like uBlock Origin. This is actually beneficial, since if you have an ad blocker installed, the DDOS script’s network requests are now blocked. (It does not stop users from browsing to my blog directly.)

    - https://gyrovague.com/2026/02/01/archive-today-is-directing-a-ddos-attack-against-my-blog/

    can't find anything from a quick look that confirms this list is used by default in ubo

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 8 months ago* (2 children)

    I don't see that particular list, but the same filter is present in EasyPrivacy from EasyList, which is enabled in uBO by default.

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (1 reply)