158
Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case (www.tomshardware.com)
submitted 1 week ago by to c/cybersecurity@infosec.pub
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 19 points 1 week ago (12 children)

can we PLEASE stop linking stuff from shit-ass sites that use quasi-malware services like Ad-Shield (the service behind the notorious html-load(dot)com, error-report(dot)com etc.)?

These sites intentionally break and block access when a DNS based ad blocker is used. Not because the site can't load - it actually loads perfectly fine behind the blockout - but because these fuckers intentionally unload CSS to break the site if ads won't load... via the same exact methods web malware loads malicious scripts.

  • permalink
  • fedilink
  • source
  • hideshow 12 child comments
    •
  • [–] [S] 3 points 1 week ago (8 children)

    I have some heavy DNS filtering and the site still loads fine in Vanadium on GrapheneOS. Many sites refuse to load in the way you describe and it is annoying, but I didn't know this site was doing that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 1 point 1 week ago (7 children)

    Interesting.

    I run my own AGH gateway at home with pretty heavy filtering, plus my iDevices have a NextDNS profile installed - and now most big tech sites do this crap...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 1 week ago (4 children)

    Sounds to me like you accidentally have a cdn on the list? And can confirm, works for me (but i have usercss for TH anyway; their desktop-layout sucks).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 1 week ago

    For further information:

    html-load(dot)com, error-report(dot)com are domains owned by Ad-Shield and similar "as recovery" services that:

    • inject a script into the site from its own host
    • script checks if ad blocs load content or not
    • if no ad content is loaded, they phone home to html-load(dot)com or a similar address (making it appear to the average user that they're some "core internet service")
    • id html-load or their other domains aren't reachable (they send a keyed request so it's not as easy as having your own server respond with an empty {} script), the site will unload CSS and deliver a blocking view
  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 week ago (2 children)

    Isn't there a uB or *monkey script that nips those in the bud? 🤞🏼

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •