I just noticed 4chan pages starting to grab XML requests from

File: sldfkjhf.png (131KB, 1137x366px) Image search: [Google]

131KB, 1137x366px

>>60797824

OP isnt a fag

>>60797834
Glad it's not only on me, but what is it really? Google results aren't helping much, and I'm still concerned

>>60797847

its on /tv/ too

but not /gif/ lel

Updated Date: 2017-01-16T15:21:16Z
Creation Date: 2017-01-16T15:21:16Z

hmmmmm

>>60797870
It's not on /ic/ or /i/ either

Probably something to do with the Jews

File: umatrix.png (27KB, 522x388px) Image search: [Google]

27KB, 522x388px

It's fine for me

>>60797870
>>60797901
So it's a blue-board only thing, with the exception of /pol/
Doesn't look like an advertiser, and "ivosnake" isn't quite the trustworthy name

>>60797824
>XML request
"In the early development of the World Wide Web, it was found possible to breach users' security by the use of JavaScript to exchange information from one web site with that from another less reputable one. All modern browsers therefore implement a same origin policy that prevents many such attacks, such as cross-site scripting. XMLHttpRequest data is subject to this security policy, but sometimes web developers want to intentionally circumvent its restrictions. This is sometimes due to the legitimate use of subdomains as, for example, making an XMLHttpRequest from a page created by foo.example.com for information from bar.example.com will normally fail."
4CHAN IS BEING WATCHED, RUUUUUUUUUUUUUUUUUUUUUUUUN!

>>60797960
>4CHAN IS BEING WATCHED
By the Crazy Ivans, no less.

>>60797938

Just went through everything and here are the only boards that have it
g
k
m
o
p
v
vg
vr
w
vip
cm
pol
tv

>>60797960

Cross site request are cancer and you should already be blocking this shit

>>60797995
So it's a faggot that likes different kinds of tech shit.

>>60797995
>Cross site request are cancer and you should already be blocking this shit
I'm lazy!

>>60797935
Probably not on a blue board, since there's no ads
I thought it may be a scrip-related issue, but even loading up without scripts the requests are still there. It's definitely 4chan.
>>60797995
you're missing sp and jp. This is a blue board thing that has to do with ads, and none of the yotsuba boards are affected, like gif, d, ic, i, aco

I feel like it's a portmanteau of snake backwards and the obvious sovi. I wonder if it's related to the fact that invisibro is working for Jared Kushner.

>>60798025
>This is a blue board thing that has to do with ads
Think it's another one of those "malicious ads fuck 4chan over" episodes?

File: lkfdsldshf.png (73KB, 567x467px) Image search: [Google]

73KB, 567x467px

>>60798025
>sp and jp

Not seeing it on either board here

>>60797824
uBlock origin shows it as a websocket. Put this in your filter.

||ekansovi.com$domain=4chan.org

File: fucking sp.png (273KB, 1267x750px) Image search: [Google]

273KB, 1267x750px

>>60798089
That's weird, because it's there for me
>>60798115
I'm not interested in how to block it desu, umatrix already got that done
I'm interested in knowing what it actually is doing, but I don't have a browser sandbox to fry for this

https://gist.github.com/anonymous/2817663df6d7eb8103d6c9936005fd88
This is dodgy as fuck.

>>60798289
>if they're an evil racist alt righter neo nazi force them to connect to us with a unique identifier

File: 23-Ekans.png (237KB, 800x792px) Image search: [Google]

237KB, 800x792px

>ekans
>the poison snake pokemon

>I'v o snake
>I owe snakes
>I am indebted to poisonous snakes

>>60798289

window.document.location.href.indexOf("boards.4chan.org/pol1aa/")

what did they mean by this?

>>60798150

SHEEEEEIIIIIITTTTTTT

the fuck does this mean. Still not on /sp/ for me. Maybe tied to certain ads?

>>60798331
>ovi means egg
>ekans egg

So some /d/tard

>>60798289
>links to 1x1 pixel gifs

Fucking tracking shit

>>60797824
I've been wondering what the hell it was too, must be the NSA.

>>60798289
localstorage was a mistake

Bump.

just blocked it in uBlock thanks for the heads up

im not seeing it in my umatrix

>>60798634
do you see doubleclick?
If you don't, you're probably not on a blue board and you're not getting served ads

>>60798658
i can see doubleclick
this is on /g/

im using ublock origin too if thats why

>>60797824
what the fuck is going on here

>>60798678
eh, it is possible
if you can, open the logger, refresh the page and see if it is blocked in there
if it isn't, what country are you from?

inb4 this thread magically disappears

thx mods

>>60798724
Not whom you're replying to, but I can't see it in the log either. Austria.

>>60798724
checked both umatrix and ublock logs, no mention of the domain

im in the uk

>>60798775
>>60798911
I see them and I'm in Italy
Can you guys see if you have cookies from the domain in your storage?

>>60798745

Like your dad?

>>60798938
Nothing. But I set my browser to block all 3rd party cookies.

>>60798938
PAY DENBTS MARIO

>>60798938
ah, there it is
a cookie with some kind of uid

>>60798996
CIA nigger spotted

File: ss.png (17KB, 543x248px) Image search: [Google]

17KB, 543x248px

interesting

i don't actually see the domain in noscript or umatrix though

>>60799051
It's just a targeted marketing company tracking redirects to other websites from particular boards.
Mostly to filter trolls from the chat and/or discussion sections.

It's not worth discussing because it's obvious what it's meant for: keeping /pol/ in /pol/

wew hiro finally did it again, the absolute madman

>>60799077
>tracking redirects
then why does it have to use localstorage?
This is shaping up to be some mobile-side adawre shit

So If I have it blocked, which uMatrix does by default, it should be harmless?

>>60799111
Isn't it obvious? Most of these retarded alt-right /pol/ goers are too dumb to clear their cookies, making it easier to track their behaviors and unmask their anonymity even if they use a VPN or proxy. It's a persistent cookie for this reason.

Again, not worth discussing. Sage.

>>60799142
>tracking is okay if we do it to the people we don't like
haha wait until it sinks in that trump has control of the NSA

>>60799142
except it's not just on /pol/

>>60799142
if it's a third party tracking, none of the information go back to hiroshima, especially if it's cloudflare covert tracking
if it was just /pol/ i'd be extremely concerned, but it's basically all blue board, and looking at >>60798289
>>60798364
it seem /pol/ wasn't even intended to be tracked in the first place

>>60799168
He doesn't. This tracking isn't even ordered by the US government, but funded by a group of NGOs and corporations (mostly media companies which I shall not name).
>>60799171
Shared userbase. Also, /g/ and some other boards have done raid-lke activities on other sites before. This is to prevent the bad elements of 4chan from spilling out ever again. It is for the good of the internet. Sage.

>>60799195
>but funded by a group of NGOs and corporations (mostly media companies which I shall not name).
lol okay

>This is to prevent the bad elements of 4chan from spilling out ever again.
when did you arrive here, 2014?

>>60799195
>meanwhile, /b/ is not being tracked
wew lad, if you spin it any stronger it'll just fucking break

>>60797824
Interesting. are all of your filters for individual elements? why don't you just mass accept 4cdn.org and then block the cookies, frames and other, that way if new things are added then the site would still work.

File: Stairs.gif (34KB, 297x286px) Image search: [Google]

34KB, 297x286px

DUDE I warned you about gook moot bro

>>60799129
i dont like the idea its still saving shit in my local storage. but killing all inline JS ruins 4chan

Is there any interest if I hosted my own 4chan proxy? It would look/behave exactly like 4chan but it would tell your client to fetch the json/media from 4chans server. I'd literally be a skeleton. No tracking scripts, nothing. Not even ads.

This is not new apparently:
>>>/qa/1378694

>>60799692
go back there

>>60797824
All of these started appearing just days after J-list cancelled their sponsorship.

>>60799708
In my defense, outside the happenings thread i dont use /qa/ at all.

>>60799692
die retard

>>60799688
Why do you even have local storage enabled? firefox runs fine without it, if you're on chrome then you're fucked

>>60797824
>I just noticed 4chan pages starting to grab XML requests from this site
>XML
>>>/v/

>>60799774
what do you think the X in XHR stands for?

>>60799825
xenomorph

What's the difference between 1st-party and 4chan.org in the 4chan.org scope?

>>60799825
eXtremely High Resolution

>>60799855
1-st party is generic for all 1st party sties you visit, 4chan.org is specific to 4chan.org
>>60799853
>>60799859
XMLHttpRequests

>>60799902
Yeah but we're in the 4chan.org scope, so what's the difference between -- assuming we have 1st-party blocked in the global scope -- enabling 1st-party vs 4chan.org in the 4chan.org scope?

What the fuck is 1st-party?

>>60799920
It's the default for every site you visit, but still reflects domain-specific allowed/forbidden content you set up for the domain, if any
the default is all css and image are allowed, all domains are blocked, all frames are blocked, 1st party frames are allowed. Then specific to domain, 4chan.org is forbidden from using cookies and boards.4chan.org is forbidden from loading other stuff. doubleclick is in the umatrix blacklist by default i think

If I wanted to let 1st party not load media, I could disabled it for 1st party, and all sites I visit would be disallowed from loading media type streams and files. If I wanted to do the same, but only for 4chan, I'd disable it on the scope

I blame moot.

>>60799743
Wouldn't have the "Block third party cookies and site data" option be enough in chrome?

>>60800138
Nope.
afaik all that does is discard cookies at the end of the session and redirect all third party localstorage calls to sessionstorage, and only if that is not possible would it block it

HOW DO I BLOCK THIS I ONLY HAVE UBLOCK ORIGIN

>>60800200
see >>60798115

I would still recommend you get umatrix

>>60800200
Remember to delete it too once you block it.

>>60800230
>deleting it
Just clearing the cache?

>>60800247
If you are using chrome
Settings>Content Settings>All cookies and site data>Search it>Delete

>>60800261
Thankyou anon, you're a life saver.

>>60798289
So basically I think they're stalking /pol/shitters, hackers/doxxers and pedos.

>>60800325
So, you're telling me they're jews making a list for future assassinations?
Good to know.

>>60800346
Well look at the tracked boards:
>/b/
>/r9k/
>/pol1aa/
The boards that spend the most time shitting up other boards, being a general nuisance and doing illegal things. (Although clearly /pol/ has either been mispelled or something)
>/bant/
New honeypot for /pol/ shitposters.
>/soc/
>/s4s/
>/r/
>/aco/
>/gif/
>/t/
>/e/
>/u/
>/hm/
>/y/
etc
Probably fishing for CP
>/hr/
Probably fishing for CP other than that one Star Wars cross section thread.

>>60800419
those are exclusion, which is why it appears on /pol/, but not on /bant/.
All those boards you see in the github file are excluded from this, the same goes for ads it seems

I have no idea why /pol1aa/ is even there, it's not an unlisted or secret board, maybe they didn't want to be active on /pol/ but someone fucked up?

>>60800455
You are right when I visit boards not on the list it attempts to connect to the domain via umatrix. If I was to reverse that assumption perhaps it is new advertising.

File: stop eating dirty cookies.png (17KB, 535x482px) Image search: [Google]

17KB, 535x482px

come on /g/, you can't be serious

>>60800485
it still uses localstoarge and opens websockets to transmit images
>keep until they expire
S E S S I O N

>>60800519
doesnt self destructing cookies fix this?

>>60797824

||ekansovi.com$important
boards.4chan.org##script:contains(window.upManager)

test

File: 1496038942186.jpg (97KB, 556x609px) Image search: [Google]

97KB, 556x609px

>>60798289
Apparently the captcha wasn't bad enough. Absolutely disgusting.

File: Untitled.png (41KB, 350x531px) Image search: [Google]

41KB, 350x531px

>>60799054
>noscript
what?
i see it in ublock too

lel this shit has been here for over a month and you faggots just found out?
anyone who has websockets enabled and allows 3rd party XHR deserves it anyways

Here's the inline script that calls for

ekansovi.com[/com], https://gist.github.com/anonymous/b9b1a4699bfc1039bd067fca78d7a6a5

Some autist is having a lot of fun with this it seems.

>>60800810
obfuscated javascript should be fucking illegal

HIROSHIMOOOOT

>>60799743
I need it for my 4chan userscripts my nizzle

File: )tfw the botnet wants me to starve.png (1MB, 1280x720px) Image search: [Google]

1MB, 1280x720px

>>60800810
>non-free javascript

>>60800810
I have no idea what im reading.

File: image.png (2MB, 3072x3118px) Image search: [Google]

2MB, 3072x3118px

>>60800810

File: 200w_s.gif (494KB, 200x200px) Image search: [Google]

494KB, 200x200px

>>60800810

 function a(a, e, f) {
  if (!f) {
             var c;
........

>>60800902
cancer.js

On firefox, you can see the inline javascript by pressing

ctrl + u

.

>>60800966
you're better off checking the network requests

File: Capture.png (107KB, 1520x617px) Image search: [Google]

107KB, 1520x617px

>>60801000
forgot pic

>>60800519
>this might scare mobileposters who can't block this cancer away
Hmmm maybe bringing the botnet to 4chan is a good thing

>>60800218
>>60798115
isn't this the same as simply creating a block rule from the popout GUI that is activated via extension button?

What's the best way to whitelist domains for cookie usage? I'm using Nightly.

>>60801148
Also, is uMatrix better than uBlock Origin and NoScript?

>>60801104
people browsing from phones are oblivious to all this, to scare someone they need to be aware of the situation they are in, and people using phone browsers will never fucking be.

I opened up Chromium without any addons running. I can't see anything mentioned in my cookies (ekansovi). I'm looking under "All cookies and site data".

What is ekansovi?

>>60801239
I'm pretty sure nobody knows

>>60801159
They all have different purposes.

uBlock Origin is an adblocker that has uMatrix in it.
uMatrix is a general purpose request blocker, doesn't hide elements / ads.
NoScript is a JS/frame blocker, works same as uMatrix but not advanced as uMatrix.

>>60801239
Bulgarian, Ecclesiastical
As in, to be part of a church (some christian relgion call churches Ecclesias)

>>60799077
>It's not worth discussing

OY VEY STOP TALKING ABOUT THIS NOTHING SPECIAL

>>60801275
>but not advanced as uMatrix.
noscript is less flexible, but offers more in-depth protection. Normally, you're expected to have noscript running on blacklists and umatrix running on a whitelist

As soon as this domain showed up for some (it's not showing up for me in Pale Moon) I've been unable to post from pale moon.

Something screwy is going on.
Posting from Vivaldi now.

File: 072[1].png (60KB, 904x692px) Image search: [Google]

60KB, 904x692px

>>60801281
they're monitoring the worship of kek

Clover users win again

Was good 5 years.
I am done.

>>60801381
fucking phone posters

>>60797824
Blocking that domain stops the ads at the bottom of the screen (the ones that come from 4ch)

>>60798115
I blocked this in ABP and it appears to be working. Yes I'm one of the fags that is still OK with using ABP.

Don't worry Jackie 4chan wouldn't datamine users, this must all be a coincidence

>>60801644
Well, that didnt work: PR does block the ads at the bottom of the screen but if I disable PR, even though I'm blocking that site in uMatrix, the ads still show up.

>>60801745
Are the ads served through 4chan.org?

File: not there.png (18KB, 281x440px) Image search: [Google]

18KB, 281x440px

i don't see it.
ublock hasn't logged it yet either.

>>60801104
>>60801174
You can use ublock and umatrix on your phone, idiots.

>>60801815
Clover doesn't have this problem

Nothing here. Is this a issue with Chromium-based browsers?

I'd guess some of the ad companies 4chan uses is trying to bypass adblockers by loading them through WebSockets. This is solved by uBlock Extra in Chromium.

>>60801815
not on app store

>>60800685
I want to fuck that boy.

>>60801836
I'm on Edge and the connection's still logged on uBlock

not sure if relevant, but nothing here (mexican, firefox 53, all privacytools addons minus noscript)

On a scale of 1 to 10 how botnet is this?

>>60797870

>>60801883
botnet/10

>>60801724

>Jackie 4chan

Ajfhaksbskxvdjavdbdnakshdns

>>60801381
Clover just hides ads

File: building a computer.jpg (113KB, 800x600px) Image search: [Google]

113KB, 800x600px

This persuaded me enough to try uMatrix. What is the best practice for combined uBlock Origin & uMatrix use? They have some overlapping functions, but uMatrix doesn't use blocklists like uBlock Origin does.

>>60801870
You have lots of other stuff to worry about juan ramirez pablo sanchez

>>60802142
Clover doesn't load ads at all.

>>60802249
wtf my name is paco perez hernandez, pls respect

>>60801836
I don't see it on firefox. But I'm blocking 3rd party cookies...I'm guessing that is why.

>>60802243
>but uMatrix doesn't use blocklists

yeah it does, and an adblocker is mostly unattended, it should be just there, uMatrix is the same after 1 month of using it

>>60802358
Do websockets even show up on firefox when you try to monitor them with the network tools?

>>60802389
Firefox doesn't block websockets
Search user.js firefox, apply that patch to block it. Might need lots of config editing to match yer needs, but even with noscript, a default firefox install still leaks lots of stuff.

>>60802385

I only saw uMatrix using hosts files as blocklists. I've been using uBlock Origin to block all scripts, and adding exceptions for sites that don't work without js. Would it be wise to allow everything in uBlock Origin (except the blocklists) now that uMatrix is doing the blocking?

>>60802441
it'd do that job >for you

File: 1438742882519.jpg (24KB, 300x300px) Image search: [Google]

24KB, 300x300px

>>60797995
>/cm/

File: 1469568216693.png (50KB, 581x439px) Image search: [Google]

50KB, 581x439px

>>60797834
verified

File: 1486677027775.png (778KB, 1198x377px) Image search: [Google]

778KB, 1198x377px

/o/ here, using noscript and ublock, how doesn't this show up on either of those? I put the filter in too.

for the non webdevs
this means more invasive targeted ads or what?

>>60802593
Also, would it be worthwhile to add umatrix to firefox with those two?

>>60802653
Who knows what the fuck, especially with that kind of javascript code. I guess it's to slip in an ad banner (uBlock doesn't appear to be blocking the script) as well as a website tracker, so it knows what websites you've been visiting.

>>60802679
>so it knows what websites you've been visiting.
Cool I guess, I hope they like overwatch porn

I'm not at all savvy with this shit. Downloaded umatrix and ublock origin, added the filter to ublock origin, and tweaked the permissions in umatrix to allow s.4cdn.org scripts to allow catalog and (You)s to work and google scripts frame and gstatic script for captcha to work.

Am I good to go? What's the next step to secure my figurative electric anus?

>>60802727
Privacy is dead.

>>60802727
I don't think there's much else. That one blocks direct connections but doesn't do much about fingerprinting. what browser you're using?

>>60801834
How come? Cause Clover is just a standalone app?

>>60802979
Pretty sure clover only uses the API. They should get pure json until they want to post. Then they load the captcha.

>>60802979
Clover only uses the API, nothing else.

>>60802946
Firefox. I'm guessing there are better browsers out there.

>>60803036
>>60802993
Why doesn't such a thing exists for desktops?

>>60802510
/cm/ is pure. Don't you make fun of it.

>>60803109
I thought it technically does. If nobody minds me weebing it up, I think of the Kantai programs that only use the API of the game to allow gaijin access without resorting to proxies. I guess you could just bring something like Clover to desktop right?

File: 1477374540393.png (8KB, 803x68px) Image search: [Google]

8KB, 803x68px

Based uBlock Origin doing its job

>>60798331
Jews

>>60803346

You have to block all third party content right?

>>60803373
No, just the ekansovi domain on advanced settings. Blocking third party by default will break a lot of normie sites,

>>60802415
just noticed you can't natively disable websockets in about:config anymore, pretty lame

>>60802415

thats why you need to fake it

File: gsrsrgfsdrgfvsdv.png (39KB, 987x310px) Image search: [Google]

39KB, 987x310px

I've got nothin senpai

>>60797995
So it's fine if I just don't go to these boards.

>>60798558
What do?

Quick rundown

ekansovi has been there for weeks dude.

Well racists and misogynists who spew hate speech every day need to be tagged and identified

>>60801787
same here
had the cookie though

>>60803981
Yep because free speech is terrible.

>>60799859
That's a big guess

>>60803981
+1000000

Fucking racists and misogynists think they can say shit online and not get any repercussions. These kind of people need to be punished for the scum that they are

>tfw weblet

how do I into web security? Any book recommendations?

>>60803981
>>60804070

Muh hate speech causing muslims to spontaneously combust and robbing Jamal of high paying jobs

File: picture.png (59KB, 1112x867px) Image search: [Google]

59KB, 1112x867px

This is maybe relevant? looks like something from COMODO and Cloudfare

File: 1479150455230.jpg (105KB, 463x620px) Image search: [Google]

105KB, 463x620px

https://www.mcafee.com/threat-intelligence/domain/default.aspx?domain=a.ekansovi.com
>Last seen: Today

This isn't new, fuck off

https://archive.rebeccablacktech.com/g/thread/60167208/#60167208

>>60804157
>this isn't new
>posts archive from less than a week ago

>>60804187
>less than a week ago

Can't we just figure out who owns the domain and start backtracking from there?

>>60804149
I literally searched for it before you posted that.

Also, fist mention of this thing was on may 1st. This can only be 3rd party, since the website has been under strict surveillance and data logging since the cuckening.

>>60804197
wtf its not may anymore

>>60804197
you got bamboozled

I have got adglare.com, as well as usual suspects google-analytics.com etc.

Sometimes I find theses websites have been allowed through noscript firefox extension so I revoke permissions. Spooky.

>>60797824
So the /b/ board of 4chan

Modded solely by the fbi

Thus making it of national importance to the world's most powerful nation to the point making it influence English speaking politics

Is being watched

Jesus how new are you people

>>60804322
really makes your gray matter to contract

>>60797995
>>60798014
>So it's a faggot that likes different kinds of tech shit.
its marketers. im from /p/ and its a huge deal, 24/7 spam of shit brands.

>>60804322
This isn't the FBI or anything like that. It's private entities, and that honestly makes it worse. They have no oversight whatsoever.

File: ekansovi.png (12KB, 642x236px) Image search: [Google]

12KB, 642x236px

So, doing a google translate, looks like it goes from Bulgarian: eкaнcoви (ekansovi) which translates to Ecclesiastical...

Which relates to the Christian Church?...

So does anyone have an explanation why some people have this and others don't? It doesn't show up in my noscript or ublock at all.

>>60804439
No showing up here either. Maybe its regional?

File: where_is_spy.png (245KB, 1919x1079px) Image search: [Google]

245KB, 1919x1079px

>>60797824
I don't seem to have ekansovi on any of the boards that /pol/ and /g/ are saying are compromised.

>>60797824
Can someone explain this as if to a 5 year old?

File: tmp_2464-14931304105952076734631.png (711KB, 1600x2162px) Image search: [Google]

711KB, 1600x2162px

>>60804322
new enough to fall for that fake infographic

>>60804501
Apparently a 3rd party is watching and tracking users in certain boards. Its something that is coming from 4chan itself so people have no idea whats going on. There is absolutely 0 information about it, its something new. It could be a way to slip an ad, it could be Hiroshima fucking shit up.

The nips warned us, but we didnt listen. Its too late now.

>>60804501
If you are on a board that isn't blacklisted, then it will load on image through a XHR. The page you are viewing isn't leaked to them, just your ip.

>>60804558
Thank you, sounds fishy

>>60804501
>>60804578
*an image
it's probably just an ad

So what does all this mean for us? Why are we being targeted

>>60804591
you still have websockets enabled in your browser?

File: 176576576.jpg (32KB, 600x735px) Image search: [Google]

32KB, 600x735px

>>60804591
I wonder who is really behind all of this...

>>60797824
ekansovi?
doesn't show up for me

>>60804591
>for us? Why are we
fuck off newfag

>>60802979
does Mimi work like this as well?

>>60804439
>>60804489
>>60804486
Didn't show up in my noscript, and it still doesn't. However I checked for the cookie itself and I had it.

Deleted the cookie and downloaded uMatrix and ublock in addition to noscript, and then doublechecked and turned off all my cookie saving stuff (Could have sworn I did this already...)

File: fuck.png (225KB, 1919x1077px) Image search: [Google]

225KB, 1919x1077px

>>60804489
kms

>>60804589
It probably is, but that's doesn't mean it's not an ad designed to spy on people rather than actually advertise anything.

tfw you're actually literally living in a cyberpunk dystopia now

>>60801787
i saw it when i first loaded the page, then it disappeared when i reloaded it. added it as a permanant block in ublock though.

>>60797995
I no longer see Nigger, just a black man a geneticist a doctor a rapist.

>>60804645
>Didn't show up in my noscript, and it still doesn't. However I checked for the cookie itself and I had it.
Just checked for the cookie, I have it. So it really shows up for everyone.

File: based_iridium.png (37KB, 701x669px) Image search: [Google]

37KB, 701x669px

>>60804645
I love Iridium for having this as default.

>>60804044
same. only found the cookie

>>60804645
I don't even have the cookie for it.

>>60804667
>allow all sites to run javascript

anon...

>>60804645
>>60804666

Same. Doesn't show up in noscript or ublock but I had the cookie too. How the fuck did it get through those undetected? I'm using the anti crosssite scripting checkmarks in noscript so this shouldnt get through at all. I've now added the filter manually in ublock, deleted the cookie and disabled 3rd party cookies in firefox (thought I did that already but apparently not). Is that enough?

>>60804708
google recommends it brah whats wrong

How does clover handle this sort of thing?

File: 1326663791811.png (385KB, 500x515px) Image search: [Google]

385KB, 500x515px

>>60804710
Yes that should do the job.
Anyone else /paranoid/ now?

>>60804710
no privacy for you reddit

>>60804708
I want my normie sites to work.

>>60804710
Also, even after adding ekansovi.com$domain=4chan.org to ublock it still doesn't show up as blocked, it's just not there. Am I doing something wrong here? Though I haven't gotten the cookie again yet.

File: 1496437445791.jpg (99KB, 403x392px) Image search: [Google]

99KB, 403x392px

>>60804743
use Iridium for those

>>60804745
The same happens to me. The only indication I can see of it being blocked is in uBlock's log. NoScript does say it's autoblocking the domain though.

>>60804732
Good way to get hit with malware

javascript should be disabled on every website unless you specifically allow it

>>60804743
So use something like uMatrix or NoScript, they let you selectively enable scripts on the site so they'll work, without enabling scripts on EVERY website.

Wait until you see the ten billion cancerous scripts most of the MSM websites are running. It's nuts. I usually just close a web page if it's got more than a handful.

>>60799254
This argument kills the shill.

File: Fireshit.png (71KB, 1812x854px) Image search: [Google]

71KB, 1812x854px

>>60800485
I cant find this option in Nightly lmao

Guys, it's nothing, can we just go to sleep now? Aren't you all getting tired with this anyway?

File: normie_site.png (755KB, 1919x1077px) Image search: [Google]

755KB, 1919x1077px

>>60804757
You weren't kidding.

>>60804805
oh nvm got it

>>60803981
Well communists and socialists who spew anti-white speech every day need to be tagged and identified

>>60798289

I mean, it could just serve the purpose of a tracking cookie. Also, since it's a pixel in localstorage, it doesn't technically count as a cookie, meaning when you opt out of cookies, they can still track you. Also, the web socket thing is probably just to bypass most ad blockers. Pornhub does it too.

The only questionable thing is why these boards (esp /cm/ lol).

>>60804809
Fuck off shill. I just asked my boss for 3 days off to investigate this. I will be working on it around the clock and you better tell your boss to tell his boss to expect a class action if I find that my rights are being violated.

>>60804815
Oh god it's so ugly.

>>60801239
IVO Snake

>>60804359

1000000 times this

>>60804817
lol

>>60804815
>cortana enabled

>>60804815
>windows 10
lel

Hmm, I don't have this cookie (nor does it show up in any logs) and I'm here all the time...

Sure you normies just didn't pick something up from one of your normie sites?

NNTP doesn't have this problem, I'm afraid.

File: cortana halo 3 image.jpg (118KB, 1280x720px) Image search: [Google]

118KB, 1280x720px

>>60804848
>not having qt 2D FBI waifu on your PC

File: tmp_2464-1492295884862803926094.jpg (34KB, 710x720px) Image search: [Google]

34KB, 710x720px

I'd be more worried about the janky as fuck inline javascript loader. The URLs for the javascript files it loads are obfuscated too.

File: 1496780967258.png (35KB, 786x618px) Image search: [Google]

35KB, 786x618px

>>60804857
I didn't have it either and I post on many of the boards this was reported to monitor/track.

>>60804883
CORTANA IS A SLUT WITH LOOSE LIPS! LOOSE LIPS!

>>60804894
Feel like wiresharking it up to see where shit's coming from?

File: Screen Shot 2017-06-08 at 10.17.52.png (159KB, 938x615px) Image search: [Google]

159KB, 938x615px

Oh shit I have it
how to do I get rid of it?

also showing on /pol/

File: Screen Shot 2017-06-08 at 10.10.29.png (47KB, 510x371px) Image search: [Google]

47KB, 510x371px

>>60804915
I also found the cookie

Pls explain to a 5yo the steps to secure myself

File: cortana__halo_3__by_halomika-d71fej7.jpg (76KB, 986x479px) Image search: [Google]

76KB, 986x479px

>>60804899
Don't ever talk about her or her polygons ever again!

test

>>60804915
disable websockets
check your noscript
gas the jews

>>60804392
You know, I'd prefer private entities having that information. That way I at least won't be put into a fema camp when the time comes

File: 1496780687579.jpg (14KB, 326x326px) Image search: [Google]

14KB, 326x326px

>>60804927
read the thread from top to bottom retard

File: nuttin.png (69KB, 1049x966px) Image search: [Google]

69KB, 1049x966px

Don't have it. Where can I get it for inspection

>>60804959
Fuck around on /pol/, it took me a good 10 minutes to get it.

>>60804963
I literally do nothing but shitpost on /pol/ the past 6 months.

File: Screen Shot 2017-06-08 at 10.22.48.png (42KB, 899x428px) Image search: [Google]

42KB, 899x428px

>>60804944
>>60804936
Am I blocking it right?

File: ekansovi.jpg (237KB, 734x685px) Image search: [Google]

237KB, 734x685px

>>60803867

>>60802243
One is an ad blocker and the other is a script/CDN blocker
>that light bulb thrown in there

>>60804622
Does Dashchan works like it as well?

So still no one found out why this doesn't show up in noscript for some people despite them getting the cookie?

>>60804970
Search for your cookies if you have that shit you are not doing it right, I don't know how Safari works.

>>60804971
It's people like you that keep the world turning.

>>60804982
i searched in the cookies and it showed up yes (using firefox)

I deleted it
is that enough?

File: neo-g.jpg (24KB, 420x297px) Image search: [Google]

24KB, 420x297px

>muh matrix
>muh cookies
>muh "XML" requests
Good thread.

>>60800570
I think so, I'm using it and I guess that's why I never saw it in umatrix or in my cookies, it either never got in because of umatrix or general settings, or it was immediately deleted?

>>60804941
At least with the government doing it, it's more obvious and there's oversight and a paper trail.

What if those "private entities" hire a hitman to kill you?
They're no better than the government tracking you.

>>60804990
Browse around /g/ for a second and see if you get it again.

>>60804992
/pol/s a better target

>>60804959
Because it's just a random request related to ads.
250 replies just because some servant of autismo decided to randomly pick this one hostname and make a thread about it.

File: tmp_2464-14965142097601199236570.jpg (35KB, 558x461px) Image search: [Google]

35KB, 558x461px

>>60804913
4Chan is serving it. I don't trust hiroshimoot to not silently add malicious javascript (the ads he is loading with it are bad as is). Wouldn't be too hard to gut the deobfuscation routine for the strings.

>>60804980
I think because they're using websockets to bypass that detection

>tfw you've tracked the trackers

CIA glow in the dark niggers are so useless.

>>60804971
Sorry for the dumb question, but why does everyone have a different line to filter this? Is it *.ekansovi.com or ||xhr.ekansovi.com^ or ekansovi.com$domain=4chan.org or all of the above? Shit is confusing man.

>>60804980
Are you letting noscript run 4chan's scetch javascript loader first?

What about us phone posters, what do we do??

>>60804998
not showing anymore, yet
have activated uMatrix, adblock plus and disable websockets

>>60805029
you kill yourself immediately

>>60805029
only way is to uninstall all browsers and not load 4chan ever

>>60805024
THIS

would like to know this as well

>>60805029
go to the smartphone shilling thread and stay there

>>60805010
So if I have added the ublock filters but still don't get the detection, does it mean it's not filtering it after all? The cookie isn't reappearing it seems.

File: 1479440770410.gif (1MB, 392x322px) Image search: [Google]

1MB, 392x322px

Sounds Russian!

>>60805024
Some are more accurate than others.

>>60804489
>that Distance doujin
Haha, what a fag. The art is terrible.

File: ekansovi.png (9KB, 713x117px) Image search: [Google]

9KB, 713x117px

>>60805054
check your uBlock log

>>60805055

It's NSA masking their shit under commercial ads

Kinda sad, desu

>>60803981
if you start outing crazy racists to the public then they will all go on a fucking killing spree

>>60804815
>cnn
>windows 10
>java
>google chrome
>supposedly browses pol yet has cnn
why the fuck even bother?

>>60804645
>>60804710
I have the opposite. Couldn't find the cookie, but it was appearing in uBlock.

>>60804516
>murderers post pictures of their dead ex-girlfriends on a website over and over
>not monitor that website

common tom

>>60805024
Blocks all of ekansovi.com
Blocks only xhr.ekansovi.com
Blocks only ekansovi.com when served on 4chan.org

This is just a guess, idk either

>>60805066
If its red does that mean its blocked?

>>60804745
If you're adding to to Ublock's filters, just add it as *.evansoki.com.

That's what I did and uBlock is showing that it's denying requests from evansoki.

File: none.png (30KB, 1798x358px) Image search: [Google]

30KB, 1798x358px

>>60805066
It's not even appearing here to be blocked.

How do some users get it and some don't?

File: hilldog.gif (426KB, 500x281px) Image search: [Google]

426KB, 500x281px

>>60805055
did somebody say Russians?

>>60805097
Yes

>>60805097
yes

>>60805099
you need to click "behind the scenes" or "all" in that dropdown box

>>60805110
bottom right icon from the large blue toggle button

File: kurt.png (102KB, 742x919px) Image search: [Google]

102KB, 742x919px

>>60805058
Apparently a reporter known as Kurt Eichenwald posted a pic on twitter with that hentai in one of his tabs. The comments are hilarious.

>>60805036
>>60805040
>>60805044
Guys I'm a good phone poster though, don't bully

What do

>>60805118
Still not seeing it when I click to show all.

>>60805084
CNN was the first site that came into my head when I thought 'normie' so I used it to test uMatrix. Also the Java website is to test if Javascript is being blocked or not.

just added uMatrix to my chrome but can no longer see the replies to posts or see what anons are replying to. Any help for a noob would be appreciated

>>60797824
I've noticed if I'm listening to a podcast/music and open 4chan, the audio stops.

>cancer ads
>now this
Can someone waste that fucking gook already. I thought the retarded captchas moot added in his later age dementia were the tip of the iceberg and then this comes.

>>60804936
>disable websockets
>check your noscript
>gas the jews

how do?

>>60805084
Also, it's not Chrome, look at the icon on the bottom you mong. Chromium =/= Chrome Browser.

>>60805134
got this as well, so i disabled umatrix and installed uBlock Origin and applied filter there

File: ekansovi.png (30KB, 1025x148px) Image search: [Google]

30KB, 1025x148px

I'm doing it right? i wasn't getting it until i started to blocking it from ublock, i think that was hidden in first place, fucking shit, there is a addon updated for firefox that let me block the websocket?

>>60805066
Found it now, thanks. But for me it says it blocks xhr.ekansovi.com, not what it says for you. How can I see the websockets it blocks?

>>60805145
I did this (am not an expert tho) Search for websockets disable on google, install a addon for your browser
install noscript or ublock Origin, go to filters and apply the filter

>>60805134
open the OP's image and copy his umatrix settings

you just need to click in the boxes to turn them red or green

>/g/ just now noticed this XSS
what are you, hourly?

>>60805145
out of time
/sqt/

how the fuck am I not even catching this aids so I can block it? It does not appear in ublock's extended list for me nor in umatrix

are you all americans who got this

>>60805024
* is a wildcard. By putting it before it you're blocking everything that has "ekansovi.com" on the end, eg; xhr.ekansovi.com

>>60805094
Pretty much this.

>>60805150
All it shows for me is one image from xhr.ekansovi.com being blocked now. I still don't see any scripts or websockets blocked from ekansovi despite having added all those filters.

>>60804710
>>60804666
>>60804645
it doesn't show for me anywhere. umatrix, ublock, or by searching cookies.

I added the filter anyways.

server is located here:

https://www.akqa.com/

data processing.

>>60805186
It doesn't show for me either. These idiots must have some botnet installed on their PC.

File: 13886258_1003914906393428_7464122492354942168_n.jpg (25KB, 540x960px) Image search: [Google]

25KB, 540x960px

>>60805191
>https://www.akqa.com/
I aint clicking that.

>>60805191

proofs?

>>60805196
I can't get it show either, not in ublocks full log or in umatrix.

>>60803981
>all these people taking this poor quality bait

>>60805157
Thanks but that was the first thing I tried to no avail

>>60803981
you people arn't even liberals you know, since when do hippies abdocate violence?

fucking posers.

>>60805145
ublock origin, duh

I had the cookie, but never saw it in noscript or ublock. Added it to ublock anyway.

>>60805186
it comes up in request policy if you are using a whitelist. and noscript.

old /g/ would have taken out the gibson by now, im disappoint.

>>60805247
>I had the cookie

Why would you set your browser to accept 3rd party cookies?

Is the Android clover app compromised with this?

http://www.akqa.com/

ekinova server is located here. company has no public ties to government

>>60805196
It depends entirely on which board you are. /a/ seems to have it

>>60805119
This can't be real life.

>>60805263
It's the default setting! I'm no pro...

File: Untitled.png (50KB, 467x688px) Image search: [Google]

50KB, 467x688px

>>60805266
I fucking love how the google botnet botnets the botnetters

File: 1479365495559.png (690KB, 850x464px) Image search: [Google]

690KB, 850x464px

kinoposter here, someone gimme the rundown, why should i care?

File: e.jpg (39KB, 382x178px) Image search: [Google]

39KB, 382x178px

>>60797824
wat

File: 409.jpg (47KB, 680x585px) Image search: [Google]

47KB, 680x585px

they have ties to microsoft, not sure what to make of the whole thing

https://en.wikipedia.org/wiki/AKQA

Do you have to add a certain non-default list to ublock that it starts blocking websockets? Because I can absolutely not find anything ekansovi related whatsoever in the log nor does it show up in noscript. I even went to /pol/ and other boards that supposedly have it for like half an hour just browsing to check if I get it, but nothing. I DID have the cookie though. Shit is spooking me.

>>60805345
They're a pretty big advertising agency. Not surprised they're using some pretty unethical methods of tracking people.

>>60805247

Didn't have the cookie. Didn't have anything in uBlock.

Added it to uBlock.

Loaded up /p/ (most benign board I could think of).

Bam. Hit my uBlock.

>>60804089
>ink stamped on cellulose sheets

this is the computer age!

WRRRRYYYYYYYYYYY

>>60805381
click on "domains connected"