[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y ] [Search | Free Show | Home]

Hiro Jewing 4chan

This is a blue board which means that it's for everybody (Safe For Work content only). If you see any adult content, please report it.

Thread replies: 317
Thread images: 57

File: file.png (144KB, 709x640px) Image search: [Google]
file.png
144KB, 709x640px
I just noticed 4chan pages starting to grab XML requests from this site
First time I see that, doesn't seem to happen in any other page I visit, only 4chan. It wasn't (and isn't) on trash yet, but it sure is on /g/, /pol/ and /vg/.
Threads have been started across the other affected blueboards and /pol/. This is a containment thread
>>
>>60809138
how do i stop it
>>
Browser? Also just block the domain you baka
>>
Other threads on this topic
>>60797824 >>>/v/379475456 >>>/pol/129020602
>>60809152
The consensus is to use uBlock or uMatrix.
and add this to your uBlock Origin filters:
||ekansovi.com$domain=4chan.org
>>
>>60809138
>>60809152
Just use noScript and uBlock Origin. Before m00t sold there were a few scripts and ad sites, nothing big. After the sale I was surprised to see dozens of new scripts and ad sites added. Hiro has no qualms about intrusive shit the way m00t had.
>>
>>60809138
I saw this yesterday but what the fuck does it even mean? I don't understand shit.
>4chan pages starting to grab XML requests from this site
What is an XML request and why is it bad that a site grabs it from itself? It makes sense that a site's pages have access to the site's stuff doesn't it?
>>60809158
But if you block the domain how will you even browse 4chan?
>>
What does this mean? I don't understand shit about /g/ stuff
t. /tg/
>>
>>60809138
uBlock Origin -> Open Dashboard -> My rules
* ekansovi.com * block

If you want to block websockets you can do the following. (this will break compatibility with some sites)
uBlock Origin -> Open Dashboard -> My filters
||ws://
||wss://

Can't into websockets?
https://gist.github.com/subudeepak/9897212

You're welcome fgts
>>
File: 1496701737450.png (264KB, 500x598px) Image search: [Google]
1496701737450.png
264KB, 500x598px
break it down for us
t./k/ommandos
>>
>people posting this all over 4chan dragging all the scum to /g/

if you are not from /g/ get out
>>
File: latest.png (383KB, 495x429px) Image search: [Google]
latest.png
383KB, 495x429px
So I remember downloading and installing ublock some time ago but it didn't work

How do you configure it?
>>
>>60809258
They all can parrot the same things about how it works and how to block it, but nobody can explain why it's bad. It's really nothing, just another cookie.
>>
>>60809326
so not ATF/MI5/jews?
>>
>>60809240
Someone posted the script that the runs from ekansovi.com
https://gist.github.com/anonymous/2817663df6d7eb8103d6c9936005fd88

It basically checks to see what board you're on and if you're on certain ones it creates a tracking pixel, a 1 pixel image, and stores on your computer.

More about tracking pixels here https://skillcrush.com/2012/07/19/tracking-pixel/
>>
>>60809349
So it's just another ad thing? Not really that big of a deal.
>>
>>60809299
does /g/ have some kind of superiority complex now? you guys have been one of the worst boards on the site for the past 6 or so years.
>>
>>60809388
Yup. Basically just an ad/tracking thing. I don't know why OP is concerned about this specific one. There's about 3 other tracking scripts that 4chan runs now if you don't have javascript disabled
>>
>>60809404
>t. botnet trying to convince people this is ok
>>
>>60809404
Its pretty sad. You cant even ask questions anymore and expect to get an answer. You can have 40 replies with 0 answers these days.
>>
>>60809388
But you gotta consider that these fucking degenerates have a lot of questionable content to hide on their computers, so anything that has the word tracking in it is a boogeyman for them. If you have nothing to hide then you have nothing to fear.
>>
>>60809416
>t. shill
>>
>>60809404
>worst boards
>because we wont answer your stupid questions without mocking you
>>
>>60809439
more like because the board isn't funny or interesting in the least anymore. the catalog consistently has 1 or 2 decent threads at any given time.
>>
>>60809416
That's because neo /g/ actually doesn't know shit about computers. They couldn't answer if they wanted you, but they have to keep the facade. They do know about smartphones and gaming processing units though; and other stuff with brands.
>>
Please answer this

>>60809322
>>60809322
>>60809322

Which filter lists should I use for ublock?
>>
>>60809439
>>60809416
>>60809436
Wow you sure showed him.
>>
File: file.png (779KB, 576x972px) Image search: [Google]
file.png
779KB, 576x972px
>>60809455
see
>>60809195
>>
>>60809195
>install umatrix
>every site I use is now partially block and I have to unblock them one by one
fuck
>>
>>60809404
/g/ is pretty bad but there are plenty of board way worse than it. I guarantee you come from one of those boards and think you're hot shit. Now fuck off.
>>
>>60809468
Sure but I want to know

How do you install ublock origin? Which filters do you use?
>>
File: tumblr_onfchqdN681tk56hxo1_1280.jpg (525KB, 1280x1349px) Image search: [Google]
tumblr_onfchqdN681tk56hxo1_1280.jpg
525KB, 1280x1349px
>>60809322
>>60809455
Right click uBlock > Options > My filters > copy the domain from >>60809195 and paste on the big white box > Apply

At least, that's what I know.
>>
>>60809500
Fuck off already asshole.
>>
>>60809500
>How do you install
Just
>>
>>60809455
Well first you should use uBlock Origin.

Two people developed uBlock and one of them split off, hid the program's source code, and sold out to ad companies, that's uBlock. The other guy stayed true and called his open source version uBlock Origin.

uBlock Origin is already configured to block a lot by default but feel free to use every list it comes with and add more if you need to. The easiest way is to right click an ad and hit the "Block Element" button which will create a filter for that element on that page.
>>
>>60809448
do you actually expect a technology board to be funny? go back to wherever you came from you are not wanted here
>>
>>60809525
Ok thanks

Which list do you recommend me?
>>
File: 1493728542532.jpg (330KB, 800x680px) Image search: [Google]
1493728542532.jpg
330KB, 800x680px
>>60809500
You can't be serious.
>>
>>60809531
no, you fuck off back to whatever srsfugnbsns subreddit you crawled out of
>>
>>60809500
kys
>>
>>60809426
>nuffing to hide nuffing to fear
Nice try FBI
>>
Is there any advantage to using Privacy Badger over uMatrix, or should they be used in tandem?
>>
File: heaven.png (136KB, 586x257px) Image search: [Google]
heaven.png
136KB, 586x257px
>>60809467
>Clicking on a blacked out WEBM
>On /g/
I feel sorry for whoever's going to click on it.
>>
>>60809639
it wasn't that bad to be honest, I've seen worse
>>
>>60809414

Not OP but this one is really suspicious. The tracker is being very secretive. They use an uncoventional method, their js is obfuscated and their DNS info is hidden.
>>
>>60809195
Why do you need the "$domain=4chan.org" part? Just filter "||ekansovi.com".
>>
>>60809426
(You)
>>
>>60809546
>le everyone is reddit maymay xD
>>
>>60809718
you sure are convincing enough
>>
File: tumblr_o8qbrd3lZk1u31sp3o1_540.jpg (38KB, 540x332px) Image search: [Google]
tumblr_o8qbrd3lZk1u31sp3o1_540.jpg
38KB, 540x332px
Sorry for the dumb question, but why does everyone have a different line to filter this? Is it *.ekansovi.com or ||xhr.ekansovi.com^ or ekansovi.com$domain=4chan.org or all of the above?

Which one should I use?
>>
>>60809742
>being this much of a retard

get out and fuck off
>>
>>60809742
use this :
||ekansovi.com

and if you want to totally block off websockets, use this:

||ws://
||wss://


>>60809762
fuck off idiot, you are cancer killing /g/
>>
>>60809467
nice
>>
>>60809742
There are dozens of different lines you can use
They all work, some just work better than others
Some are more accurate than others.
* is a wildcard. By putting it before it you're blocking everything that has "ekansovi.com" on the end, eg; xhr.ekansovi.com
>>
>>60809769
no the retards like you spoonfeeding morons is the cancer killing /g/ we dont want these retards here
>>
>>60809788
eat a dick, nigger, this board is +18 only
>>
>>60809795
im 30 and im not the one acting like a child
>>
>>60809414
Yeah except these people are going out of their way to hide the fact they're tracking people.

It's not like regular trackers, it circumvents ublock, umatrix, etc. the code is obfuscated, the domains its connected to are all hidden

Just because it's an advertising company doesn't meant they're just figuring out how to target ads. We don't know what they're actually doing with the tracking info.
>>
>>60809467
https://www.youtube.com/watch?v=S9kN0pct-Q8
>>
>>60809467
surely you have a source anon,right?
>>
>>60809742
>>60809780
You don't even need the wildcard just do this >>60809769 and it will automatically block everything as if you had used a wildcard.
>>
>>60809448
That's because /g/ is flooded with marketers trying to sell products. The entire front page is basically a magazine catalog of products to buy.

Here's something to try out:
Hide every thread on /g/ that involves buying a product of some kind. Whether it be a phone, chinkshit, computer parts, whatever.

What are you even left with?

/g/ is quite possibly the most heavily guerilla marketed board on 4chan.
>>
>>60809842
>/g/ is quite possibly the most heavily guerilla marketed board on 4chan.
that's /tv/ and /pol/ but /g/ and /v/ are pretty close
>>
>>60809138
I don't have it for some reason.
>>
>>60809349
How do you detele this particular tracking pixel? Or is that even necessary once you got it blocked in ublock?
>>
>>60809842

Its the poo in loo infestation. I wonder what flags would do here.
>>
>>60809891
For some reason it doesn't show up there for everyone even if you successfully block it. Open the ublock log and check behind the scenes for the websocket entry.
>>
File: 312312.png (17KB, 437x200px) Image search: [Google]
312312.png
17KB, 437x200px
This should do it, right? Didn't have the cookie when I looked earlier either.
>>
>>60809923
Not there, unless I'm retarded.
>>
>>60809195
* ||ekansovi.com^ * block


Should block it across all sites.
>>
>>60809973
Click "behind the scenes" in that dropdown menu and load one of the affected boards
>>
>>60809973
You need to select "behind the scenes" on the top drop down menu where you see the name of the thread right now.
>>
>>60809973
>>60809923
Nevermind, I'm retarded, it's there.
>>
>>60809874
/tv/ I sorta understand from the dc/marvel garbage.
/v/ and /g/ I understand.
/pol/ I do not.
>>
>>60809898
Anyone? Everything has been covered very thoroughly in these threads on how to block this shit, but how do you actually get rid of the tracking pixel? Deleting the cookie isn't enough I would assume.
>>
>>60810024
/pol/ is owned by Jared Kushner, swaglord works at his newspaper and for an advertisement agency owned by some other kike
alex jones and that yianopoulos faggot get shilled there all the time as well
>>
>>60810038
it should be gone after blocking ekansovi, deleting cookies, and clearing cache
>>
>>60810055
It's more proof of hiro selling 4chan users data
>>
idk noffing about i just stay with javascript as always
>>
File: 1484223328062.png (37KB, 527x384px) Image search: [Google]
1484223328062.png
37KB, 527x384px
Everything's fine here. You must have some kind of adware installed.
>>
>>60810055
Well it doesn't appear to be anything malicious if you mean that by overreaction. It's most likely just some sneaky ad bullshit. People are just a bit paranoid that it uses websockets to completely bypass noscript and ublock if you don't already have the right filter in place.
>>
File: 1396742267651.jpg (18KB, 226x231px) Image search: [Google]
1396742267651.jpg
18KB, 226x231px
>>60809138
>Install uBlock origin
>Google itself is Yellow
Should i be surprised?
>>
>>60810099
Botnet
>>
>>60810024
/pol/ has as much reach as MSM news services

/pol/ is shilled because corporations and politicians want to control how people think and what they think
>>
>>60810024
Trump is marketed on pol. They have threads up like 24/7.

Who feels a need to shill trump? wtf, his tower is made out of gold. He's president, why?!
>>
>>60810090
How are you even posting without allowing script from google?
>>
I blocked ws:// and wss:// but that shit still shows up in "Behind the scene"
Why?
>>
File: 2322.png (38KB, 497x362px) Image search: [Google]
2322.png
38KB, 497x362px
ok
>>
>>60810113
>/pol/ has as much reach as MSM news services
Oh I'm laffin'.
Noticed by the post spacing that you might be lost, /r/TheDonald is that way champ!
>>
>>60809138
Using NoScript I don't have this problem
>>
File: 1475007445357.png (145KB, 301x422px) Image search: [Google]
1475007445357.png
145KB, 301x422px
>>60810146
Non-JavaScript captcha

>>60810149
Because behind-the-scene is whitelisted by default
>>
>>60810176
v2 no script captcha got fixed?
>>
>>60810176
>Non-JavaScript captcha
Wait what? How?
>>
>>60810090
It can sneak past ublock, noscript and umatrix, that's why we are so paranoid about it in the first place. If you are on a board with ads, such as /g/, you get it too, just check the ublock behind the scenes log.
>>
>>60810164
I use noscript too and noscript can't even detect it for me. I know some people have it detected by noscript, but it seems really inconsistent.
>>
>>60810200
No? If you block it, it's fine.
>>
>>60809336
Do not listen to him.
It tracks every page you visit paired with your IP.
>>
>>60809240
How can you lurk /tg/ if you can't even understand /g/????
>>
>>60810245
Well yeah if you have the filter added manually and it shows the websocket as blocked, you're fine, but I mean by default without doing that, it's not enough to just glance at the ublock dropdown menu, not see it there and think it's not there.
>>
>>60810260
I use adblock and umatrix, umatrix blocked it by default back when it started.
>>
>>60810284
Not really, the xhr and websocket shows up in uBlock Origins' logger despite showing as blocked in uMatrix
>>
>>60810238
I didn't see it on NoScript either. Thought it might be because it loads from something that's already blocked by NoScript, but when turning off NoScript and removing the block from uBlock it didn't load either, so I don't know.
>>
>>60810339
Not him, I only got the xhr entry once and it was blocked by ublock, then never again, only the websocket entries now. Do you still get the xhr entry? If so am I doing something wrong here and it's somehow slipping past ublock completely undetected?
>>
>>60810188
>>60810190
I use 4chan X. I think the non-JS captcha won't load without it. I recommend ticking "Captcha Fixes" in the settings because it makes the captcha solvable using the numpad (1 - lower left, 2 - lower middle, 3 - lower right etc.).

>>60810200
I don't see anything about it in the logger.

>>60810339
That's because it's blocked by uMatrix and not uBlock Origin. You need to check the uMatrix logger. Also, websocket connections are grouped under the XHR column in uMatrix ("Websocket connection attempts are reported in the xhr column.", https://github.com/gorhill/uMatrix/releases/tag/1.0.0).
>>
File: 1483796643591.png (11KB, 732x82px) Image search: [Google]
1483796643591.png
11KB, 732x82px
>>60810369
Yes, but it's manually blocked
>>
File: 1486250909534.jpg (2MB, 5000x5000px) Image search: [Google]
1486250909534.jpg
2MB, 5000x5000px
>he doesn't block it in the hosts file
>>
>>60810400
i'm using 4chanX but i can only get no script captcha to load with v1 aka street names, v2 has been broken for over a month
>>
File: tard.jpg (71KB, 1024x512px) Image search: [Google]
tard.jpg
71KB, 1024x512px
They can still fingerprint your browser even if you block javascript bakas.

:3

You have to use wget and encrypted email to safely view pages without being tracked.
>>
hey guys am I good?
it shows in the behind scenes in the log but i blocked it in the filters

is it ok?
>>
>>60810400
Ah, so that's probably why I never got the cookie.
But if it's blocked on uMatrix, why does it still show up on uBlock's logger?
>>
>>60810339
I don't see it in the logger with:
>NoScript + uBlock(not filtered)
>just uBlock(not filtered)
>just NoScript
>nothing
The only xhr I get is https://a.4cdn.org/g/thread*.json

I never seem to get it, does Firefox have any built in blocker?
>>
>>60810525
it doesnt even show in the "behind scenes"? you sure?
>>
>>60810525
Some people get it, some people don't
Seems to be random
>>
>>60810531
Behind scenes?
>>60810534
Countries of those who get it? Maybe the NSA are just interested in Americans.
I'm in Sweden and don't get it.
>>
>>60810543
go to your ublock or umatrix in the log
then click on "behind scenes" in the dropdown

I put it ekansovi in filters everywhere but it still shows in the behind scenes log and I am wondering if thats okay?
>>
>>60810534
No. Everyone is getting it, i am pretty much sure. But you have to look in the right place in the logger
>>
>>60810519
Your web browser is trying to make the connection and both addons catches it, then they both check if there's a matching rule to block it. If yes, it's blocked. If no, it's allowed. Check the Network Monitor (F12 in Firefox, not sure about Chrom* botnet). This shows what resources are actually fetched by your web browser.
>>
>>60810497
>>60810578
no
turn off whitelist for behind the scene
>>
So can we force the gook to sell the site now?
>>
>>60810631
wut I dont get it
>>
>>60810578
Oh, no I get it yeah. Only the websocket though, not the xhr. I don't seem to get rid of it either, even with the ||ekansovi.com in the block list.

>>60810618
Don't show up in the network monitor in Firefox for me, just in uBlock behind the scenes.
>>
>>60810680
I have no idea what they're saying either, but the entries will be red when they're blocked. Have you done what >>60809195 said?
>>
>>60810618
Huh, interesting. ekansovi doesn't show up in the network monitor even with no blacklisting fuckery with uBlock. uMatrix doing its job by default I guess. Nice
>>
>>60810734
>I don't seem to get rid of it either, even with the ||ekansovi.com in the block list.

Same here.

To be sure, I also completely disabled all by also adding:

||ws://
||wss://
>>
>>60810769
*all websockets
>>
>>60810765
I don't think it showed up in my network monitor. JUST uBlock's behind the scenes log.
>>
>>60810769
Doesn't work for me, you mean in uBlock?
>>
>>60810800
yep, in uBlock
doesnt work for me either. The entry is still not colored in red
>>
>>60810734
Hmm, if you use Firefox go to about:networking and click "WebSockets" in the left column. Anyway the most effective way is just to add
0.0.0.0 ekansovi.com
to your hosts file. It'll block all known and unknown types of connections since it causes DNS resolution to fail.
>>
>>60810758
did it exactly like that yeah.
its in black color, not red
>>
File: whitelist ublock.png (24KB, 1236x758px) Image search: [Google]
whitelist ublock.png
24KB, 1236x758px
>>60810680
>>60810758
>>
I'm just gonna shill my autism list again.
https://github.com/toshiya44/myAssets
>>
>>60810853
Umm, what? Why are you doing this?
>>
>>60810877
lole what is the problem?
>>
>>60810877
i added the behind-the-scene filter of the secret host
and then removed behind-the-scene from the whitelist so the filter would actually work
>>
>>60810857
Subscribed!
>>
>>60810887
I have no idea what this would even accomplish or why you feel it's necessary.

>>60810897
I still don't get it.
>>
>>60810918
lole
>>
File: ekansovi niggers.png (10KB, 739x225px) Image search: [Google]
ekansovi niggers.png
10KB, 739x225px
>>60810818
I added it to the host file like
# Blocks
0.0.0.0 ekansovi.com
but it still shows up in both uBlock and the about:networking. I understand that it could show up if it was looking for it, but Firefox say that I get both sent and received messages. Shouldn't that be zero receives at least?
>>
>>60810941
you can filter it with ublock origin
>>
>>60810965
I added
>||ekansovi.com
in the block list, still shows up. I also tried adding
>||ws://
>||wss://
and it still shows up. The websocket that is, the xhr I never saw.
>>
>>60810992
is behind-the-scene in the whitelist?
>>
>>60811015
kek

I don't seem to get/have the cookie at least
>>
File: ublock.png (12KB, 779x179px) Image search: [Google]
ublock.png
12KB, 779x179px
>>60811079
does it show as blocked
>>
>>60811144
not that anon. But i have same issue. It doesnt show it as blocked. FUCK!

show me exactly what you put in the filter and in the whitelist please
>>
We need to put pressure on Hiro.
>>
File: notblocked.png (6KB, 1010x183px) Image search: [Google]
notblocked.png
6KB, 1010x183px
>>60811144
No it doesn't show as blocked. What filters do you use?
>>
>>60811158
If its red its blocked friendo.
>>
Can you block this using ad blocker or a greasemonkey script?
>>
>>60811180
unfortunately no
>>
test
>>
still not showing in red in behind-the-scene

pls help
>>
File: ublock block secret host.png (107KB, 1923x634px) Image search: [Google]
ublock block secret host.png
107KB, 1923x634px
>>60811309
>>60811172
>>60811158
>>
>>60811322
Still get it...
>>
>>60811322
thanks. Did exactly that.

But still not in red.
My filter tab is empty. What is in your filter tab?
>>
uMatrix blocks this by default out the box.
>>
when is moot coming back
>>
File: fuckChinkMoot.png (10KB, 727x233px) Image search: [Google]
fuckChinkMoot.png
10KB, 727x233px
>>60811322
>>60811424
I blocked it in the host files now, at least it can't send/receive from it now.
>>
>>60809195
I did report ekansovi.com to the Easylist maintainers but no replies yet
>>
File: ublock block secret host.png (187KB, 2592x711px) Image search: [Google]
ublock block secret host.png
187KB, 2592x711px
>>60811432
>>60811424
sorry you have to click the "I am advanced user"
>>
>>60809769
Blocking websockets completely is overkill, some sites running qwebirc use it.
>>
>>60811424
go to ublock -> settings and check the "I'm an experienced user" box, or whatever it's called in english. If that's not checked, it won't use your rules / filters.
>>
>>60809500
It's time to kys yourself
>>
>>60811529
>>60811543
Thanks, now it's blocked.
>>
>>60811543
>>60811529
YES! nice its blocked now

thanks very much m8
>>
File: 1402541351548.jpg (237KB, 1280x720px) Image search: [Google]
1402541351548.jpg
237KB, 1280x720px
>>60809138
What's weird is that I noticed that a couple of weeks ago, but I don't see it anymore. What happened? Do they already have me?
>>
>>60811144
>>60811529
Not those guys, kinda unrelated question but why is the websocket address ending as wsp for some people and for others it's wsm?
>>
>anonymous imageboard
>actively stripping away anonymity
Why the fuck does this place exist?
>>
>>60809138
>he doesn't use noscript to mark everything as untrusted until it breaks so you can only keep the essential scripts.
>>
File: 1a6.png (103KB, 250x250px) Image search: [Google]
1a6.png
103KB, 250x250px
THEY HAVE SHUT IT DOWN
I REPEAT THEY HAVE SHUT IT DOWN
THAT'S WHY YOU CAN'T FILTER IT ANYMORE
>>
Really the safe way is to use umatrix or requestpolicy or something else that blocks it by default and won't break if they change the domain or anyone else tries it. And block third party cookies because why wouldn't you.
>>
wtf its gone now?
>>
>>60811646
Read the thread man. Noscript doesn't necessarily detect it. Some people get a detection with noscript but for most it seems to slip under the radar for whatever reason. It's not a regular script, it's a websocket request.
>>
>>60811653
>>60811691
What? I'm still getting it and it's still getting blocked by ublock.
>>
>>60811653
no they didn't


fag
>>
File: lole.jpg (7KB, 340x137px) Image search: [Google]
lole.jpg
7KB, 340x137px
>>
>>60811694
Noscript detects it for me. Why does it only work for some people?
>>
File: lola.jpg (16KB, 1180x67px) Image search: [Google]
lola.jpg
16KB, 1180x67px
>its gone
>>
i got the xhr after blocking the behind the scenes thing. blocked that after.
>>
>>60811787
i'm still blocking the websocket. no trace of xhr
>>
>>60809242
>https://gist.github.com/subudeepak/9897212
Pure gold.
Wikipedia my ass.
Thanks man
>>
>>60811646
NoScript didn't block if for me, at least not the websocket >>60811172
I don't block these though, so it maybe through one of them
>4chan.org
>4cdn.org
>google.com
>gstatic.com
>>
File: 1490596624265.png (266KB, 665x574px) Image search: [Google]
1490596624265.png
266KB, 665x574px
GUYS
it's not showing up in my BTS log.
Am i safe??
>>
>>60811755
I'd love to know that myself. Noscript has so far always been really reliable for me but with this, it doesn't notice it at all.
>>
>>60809416
>I want /g/ to be my personal tech support
yeah fuck off
>>
>>60811913
It shows up sometimes for me on some boards but other times not at all. Can you use both noscript and umatrix at the same time?
>>
>>60811886
But how can you have any of these blocked in noscript and still be able to post on 4chan?

Also, do the people who get this detected via noscript also have a greyed out element called "blob:" in it? Because if not, then my theory is that this is the websocket shit, but it's allowed by default because it is part of one of the scripts you have to allow to post on 4chan.
>>
File: ayy.jpg (23KB, 1624x320px) Image search: [Google]
ayy.jpg
23KB, 1624x320px
>>60811934
of courshe
>>
>>60809349
>1 + 1000000000 - 100000000
>>
>>60811825
Yeah, I'm no getting the xhr either. I got it once right after I deleted the cookie and it got blocked and then it stopped completely and now the only thing that keeps popping up is the websocket entry.
>>
>>60811949
I'm only going to use noscript and ublock because umatrix and noscript break both jewtube and 4chan.
>>
File: Untitled.png (5KB, 1340x123px) Image search: [Google]
Untitled.png
5KB, 1340x123px
I'm still getting this despite doing both of these. >>60811529
>>60809242

Any tips here?
>>
>>60811913
>>60811934
Have you looked under the non trusted tab? I missed it completely before.

>>60811948
>I DONT'T block these
Have you looked under the non trusted tab, it "hid" there for me? I have the "blob:".
>>
>>60809473
Anyone got the solution to this shit?
>>
>>60811990
Oh yeah its in the untrusted tab. (I must have told noscript I don't trust it sometime in the past)
>>
>>60811990
Under the untrusted tab I only have adglare and google-analytics
>>
File: noscript.png (18KB, 255x473px) Image search: [Google]
noscript.png
18KB, 255x473px
>>60811948
I have that.
>>
>>60812018
It was there for me, only noticed after I already blocked it in uBlock though.

>>60812017
I don't think it's things you have blocked but rather things it think it malicious. I think you have to press it to make it untrusted.
>>
>>60811948
You have to use 4chanx and then you can block google and gstatic. You cna't block 4chan or 4cdn though. with 4chanx it sends requests to github but you can block those too. You get an error message but it still works.
>>
>>60812063
Well then I have absolutely no idea why ekansovi doesn't show up at all in my noscript. I've been looking through the noscript settings and I can't find anything that I somehow haven't checked that would allow this shit either. Then again, it doesn't show up in ublock for me either, only in the log. Weird shit.
>>
>>60812106
I can change things in the untrusted tab so I must have added it at some point.
>>
>>60812120
It only showed up in NoScript for me after I successfully blocked it in ublock.
>>
>>60811984
same happened to me. I just closed all browser pages, the browser itself and restarted.
After that i started working properly
>>
>>60812121
I'm pretty sure it adds them itself, I also had it in the untrusted, but I'm pretty sure I have never added it. Maybe it's included in some list. I mean what are the odds that both of us would've added it sometime earlier and just hear about it now?
>>
File: output.webm (1MB, 1063x675px) Image search: [Google]
output.webm
1MB, 1063x675px
If you can't get the rule working in uBlock you can try blocking it in uMatrix instead.
>>
>>60812141
I do have it successfully blocked in ublock but it still doesn't show up at all in noscript. Well whatever, ublock is handling it just fine, so I'm done obsessing over this shit. Just sucks that my confidence in noscript has suffered quite a bit because of this incident.
>>
>>60809138
So this is downloading a tracking pixel right?
How do I delete the tracking pixel if its allready on my computer? Will just clearing cache and cookie's work?
>>
File: ddsaasdsa.png (34KB, 322x452px) Image search: [Google]
ddsaasdsa.png
34KB, 322x452px
I don't use umatrix because I installed it once, couldn't make heads or tails of it, so I removed it and used noscript instead.

I don't see in noscript, though. Does that mean i'm already fucked or unaffected?
>>
>>60812561
check the untrusted tab.
>>
>>60812561
it's making behind the scenes requests, you won't see it in the requests made from 4chan pages
>>
>>60812173
Nope, still getting websockets requests
>>
>>60812263
It should be gone after clearing your cache I think, considering it's just localstorage, but would be nice to hear from someone who knows for sure.
>>
>>60812600
Why do some people see it though? Like >>60812063
>>
>>60811984
>>60812605
Have you removed behind the scenes from the whitelist?
>>
File: 1295873343672.jpg (25KB, 544x400px) Image search: [Google]
1295873343672.jpg
25KB, 544x400px
Okay,
i don't see this shit appearing in the behind-the-scenes log
i am running ublock/ns/umatrix
i am safe right?
>>
>>60812715
Do you have behind-the-scenes in your whitelist?
>>
Hiro is a huge fucking cunt, he lied about bandwidth usage also.
>>
>>60812728
i see a of stuff appearing in the behind the scenes log but nothing from that jew company
>>
Who is Ekansovi?
>>
>>60810941
You need to restart the web browser and possibly flush the DNS cache for the hosts file the override the cached value.
>>
>>60812825
that's the thing. NOBODY knows, some say it's private intelligence collecting data.
Some say it's just advertisements
>>
>>60812755
you sure you are monitoring 4chan with the log and not some random other webpage you have open? If you're only on 4chan and you load a thread from an affected board, like refreshing this very thread, there shouldn't be anything in the behind the scenes log at all other than the ekansovi websocket.
>>
>>60812825
He's one of (((them)))
>>
>>60812755
But do you have behind-the-scenes in your uBlock whitelist though? It was in mine. I removed it from there and the ekansovi thing showed up.
>>
>>60809138
You sure you don't just have some sketchy userstyle or script running?
>>
File: hmm.png (6KB, 630x93px) Image search: [Google]
hmm.png
6KB, 630x93px
Ekanseva is a pedophile-catcher run by the The Guardian
>>
>>60812748
He's pulled a lot of shit and made a ton of changes that are really scummy. I was gonna buy a pass but but not anymore after what he's done. That gook isn't getting any of my money.
>>
File: 6537628.png (660KB, 1106x1012px) Image search: [Google]
6537628.png
660KB, 1106x1012px
>>60812900
what the fuck?
>>
>>60812900
Unblocking it right now.
>>
>>60812595
I don't know how to access that
>>
>>60812952
It's literally in your screenshot you dumbass.
>>
>>60812923
Your post history is worth a lot more
>>
>>60812945
kek
>>
File: 1494097682851.jpg (17KB, 208x294px) Image search: [Google]
1494097682851.jpg
17KB, 208x294px
>>60812900
>The Guardian
Really?
>>
File: 1483329371154.png (395KB, 548x598px) Image search: [Google]
1483329371154.png
395KB, 548x598px
>>60812969
Welp, this is what I get for not sleeping in 3 days
>>
>>60812900
/g/ is fucked
>>
>>60812900
No wonder /g/ got so scared
>>
File: 1496952406982.png (44KB, 322x452px) Image search: [Google]
1496952406982.png
44KB, 322x452px
>>60812952
>>
>>60812900
So it's nothing and 4chan is overreacting as usual?
>>
If my behind the scene log is empty does it mean that I'm fucked or I'm good to go? I did >>60809975 and >>60811322
>>
>>60809812
>30

Maybe you are the one who really needs to nys.
>>
>>60813058
you would be overreacting too if you were the average /g/tard
>>
So from what I've been testing, if you deleted the cookie and have added the stuff in the ublock filter but you still have third party cookies allowed in your browser, xhr.ekansovi is regularly trying to send you an image to create the cookie / tracking pixel but gets blocked. If you have third party cookies disabled in your browser, that request stops entierly and you only get the websocket requests. That's probably the explanation why some people still get the xhr line but others don't.

What can this websocket request even do on its own if there is no tracking pixel / cookie to access?
>>
>>60813108
>>60809242
>https://gist.github.com/subudeepak/9897212
>>
So what i've seen in the thread
>If its red in the logger its blocked.
>If you don't have the cookie your fine.
>If you add all the shit like the "advanced user" stuff your fine
Is this ok?
>>
>>60813137
>more simpler
>grammatical errors already in the first sentence
Who's the chucklefuck that wrote this?
>>
File: m00t w guns.jpg (444KB, 1216x1632px) Image search: [Google]
m00t w guns.jpg
444KB, 1216x1632px
>>60811482
How works for google now
http://variety.com/2016/digital/news/google-hires-4chan-founder-chris-poole-moot-1201724308/
>>
>>60813286
Probably some pajeet but the parts that matter are written well.
>>60813314
>tip toes
>>
>>60809138
Does it show up in the list automatically or does it require the filter to see it?
Not sure wither I'm not seeing it because parts of 4 chan are allowed, the filter isn't set or because I run ABP With UMatrix.
>>
How do you even read that?
>>
>>60813314
When will they learn
>>
>>60809917
Every board should have flags, flags are awesome, and then you need the extension that lets you see lower-level flags, and then they could enable political and industrial and brand flags. Thete's this one Florida municipal flag that integrates flags of all the governments that were in that area in an abstract Frank Lloyd Wright pattern.
>>
>>60813359
The top of the grid shows the types of content being served and the left side of the grid shows the domain content is coming from. You line them up to see how much of a particular type of content is coming from a particular domain.

In the image there is 1 script coming from boards.4chan.org, 3 scripts coming from s.4cdn.org, 1 script coming from google.com, and 1 script coming from gstatic.com
>>
>>60813359
>>60813428
Also the green/red means allowed/blocked.
>>
>>60813463
How come there's 2 different shades of green/red? Is the darker stuff manually set by the user and the lighter stuff is default?
>>
>>60813487
Yup. The light shading indicates general rules, in this case first party domains can provide any content while third party domains can only provide images and css.

Users can override this an allow certain third party domains to run scripts or stop first party domains from using cookies.
>>
How is this an issue? You guys don't employ a blacklist of sites that you allow scripts to run, right?
>>
What is ekansovi.com though?

Is it some ad analytics shit?
>>
>>60812923
Yea man, it sucks. I sadly had to buy a pass so I could post on mobile.
>>
>>60813898
Why, clover supports captcha.
>>
>>60813804
Maybe if you read the thread you would understand that for some people the request to ekansovi is running as behind-the-scenes which means script/ad blockers are not blocking it.
>>
>>60809416
This is how it should be, fuck off.
>>
>>60813972
That's not how it works.
>>
>>60809216
Wouldnt noscript block too much? how do you post, how do you captcha?
>>
>>60813994
That's how it works by default.
>>
I have 4chan x and it keeps loading the tab constantly, I think it's interfering with the websocket from loading, which is why I don't see ekansovi in any logs before or after blocking it. How do I let ekansovi through to be blocked so it will fucking stop loading infinitely?

someone else has this problem: https://github.com/ccd0/4chan-x/issues/1380
>>
>>60814045
It also defaults to whitelisting I think, which is also retarded.
>>
I am a literal retard. What is going on here
>>
File: 2dd.jpg (15KB, 300x300px) Image search: [Google]
2dd.jpg
15KB, 300x300px
>had the ekonsovi cookie
how alarmed should i be?
>>
>>60814116
Why don't you try reading the thread.
>>
File: 1475228223197.png (41KB, 535x581px) Image search: [Google]
1475228223197.png
41KB, 535x581px
>>60809138
I'm not seeing what you're seeing.

Get 4chanx or something
>>
>>60814160
Check your behind-the-scenes log in the uMatrix logger. It didn't appear in the uMatrix window for me either but was still in the logs.
>>
did chinkmoot do this on 2ch too?
>>
>>60814189
oh shit you're right.

Okay, blocked that site from umatrix
>>
What does it actually send over the websocket?
>>
>>60814160
Did you check your cookies? I didn't see anything either but it was because I already had the damn cookie.
>>
I am pretty spooked by this
>>
>>60814253
Someone said it's a tracking pixel. Kinda like a tracking cookie but stored in localstorage.
>>
>>60813955
No, my mobile network was range banned.
>>
File: Capture.png (19KB, 493x350px) Image search: [Google]
Capture.png
19KB, 493x350px
Am I good now?
>>
>>60814257
I checked. And yeah.

I don't see how I got it. Since I block all cookies except for the first party.

Pretty spooky stuff.
>>
>>60814022
>Wouldnt noscript block too much?
noScript allows you whitelist scripts from certain domains. In order to post on 4chan I whitelisted 4chan.org, 4cdn.org, google.com, and gstatic.com

>how do you captcha?
4chan has captchas?
>>
File: Captura.png (7KB, 690x288px) Image search: [Google]
Captura.png
7KB, 690x288px
how fucked am I?
>>
File: 796098790_193432.gif (372KB, 240x280px) Image search: [Google]
796098790_193432.gif
372KB, 240x280px
>>60809138
>4chan is now botnet
>>
>>60812221
thanks m8
>>
where do we go when the site is completely taken over
>>
>>60814460
facebook
>>
>>60814460
The 4chan that's in your heart
>>
>>60814460
Outside
>>
>>60814460
Heaven
>>
>>60814460
Steal 2ch code and write Yotsuba 2.0, it's the only sane thing to do. Host it on 4chan.net and hire moot back, obviously.
>>
>>60814460
yahoo answers
>>
So, I added the "*ekansovi.com" rule to my filter list, and deleted my cookies, etc.
I still don't see any reference to "ekansovi" in uBlock's logger, blocked or otherwise.
Does that mean it's working correctly?
>>
>>60814581
pls no

>>>/gif/10716878
>>
File: 1496811636920.png (183KB, 500x500px) Image search: [Google]
1496811636920.png
183KB, 500x500px
>>60812900
Pantsuboard can't come soon enough.
>>
>>60814534
4chan.net is registered, but 4chan.land is available!
>>
>>60814633
disgusting
>>
>>60814637
Let's go perfectly retarded: 4chan.io
>>
Has anyone simply tried emailing them?

Tech Email: [email protected]
>>
File: 00136.jpg (9KB, 158x251px) Image search: [Google]
00136.jpg
9KB, 158x251px
Why is my 4chin tab loading forever, but all the content seems loaded in ?
>>
I have 2 machines with uBlock & uMatrix.
On one machine, ekansovi showed up as a blocked XHR in the uMatrix dashboard and is blocked by default. Good shit.
On the other machine, the domain doesn't show up in uMatrix (both have same rules). However, it does appear as a "behind the scenes" request in the logger and isn't blocked. Bad shit.

Why are they different? Both machines have identical addons and settings, pretty much. The only variable I can think of is a different user-agent because I randomize that with RAS.
>>
File: 1487170837260.png (121KB, 418x448px) Image search: [Google]
1487170837260.png
121KB, 418x448px
>>60810935
l-lole
>>
>>60814687
"stop botneting my secret chinese cartoon club reeeeeee"

that'll show them
>>
its cool guiz I made a ticket on reddit, theyll fix it for us
>>
>>60811529
Thanks anon, got them both blocked now.
>>
>>60814220
yes
>>
File: ekansovi.png (2KB, 237x132px) Image search: [Google]
ekansovi.png
2KB, 237x132px
Question

I have blocked it like this, is it fine or should i add another filter?
>>
>>60814220
Hiroyuki doesn't own 2ch. It's owned by notorious pig farmer Jimbo Watkins (also new owner of 8ch)
>>
>technology board
>everyone's struggling to block requests using software that does all the work
How did this happen?
>>
Answer this pls >>60815200
>>
>>60815200
Make it
||ekansovi.com$important

and read the thread.
>>
>>60809138
LOL AT "PEOPLE" ON THIS BOARD THAT DONT HAVE AN ENTERPRISE FIREWALL
>>
>>60815292
>||ekansovi.com$important

can you explain me about this $important?
>>
>>60809242
Why's this websocket shit necessary when the site is already blocked by umatrix by default?
>>
>>60809473
>>60812016
Just hit the power button to disable it for the site in question if you aren't worried by what it could be doing.
>>
>Domain Protection Services, Inc.
>Date Filed: Wednesday, January 18, 2017

Does this seem a bit dodgy?
>>
File: red-alert-issued.png (22KB, 447x281px) Image search: [Google]
red-alert-issued.png
22KB, 447x281px
>>60815920
>>
>>60815920
Legit ad service or behavior tracking system would not be registered with private domain. It would also host a privacy policy page if you went there.

ekansovi.com is probably some fly-by-night "hostage tag" ad shit pushed by chinks or the Russians.

It probably pays well since they're going to trick users into installing malware.
Thread posts: 317
Thread images: 57


[Boards: 3 / a / aco / adv / an / asp / b / bant / biz / c / can / cgl / ck / cm / co / cock / d / diy / e / fa / fap / fit / fitlit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mlpol / mo / mtv / mu / n / news / o / out / outsoc / p / po / pol / qa / qst / r / r9k / s / s4s / sci / soc / sp / spa / t / tg / toy / trash / trv / tv / u / v / vg / vint / vip / vp / vr / w / wg / wsg / wsr / x / y] [Search | Top | Home]

I'm aware that Imgur.com will stop allowing adult images since 15th of May. I'm taking actions to backup as much data as possible.
Read more on this topic here - https://archived.moe/talk/thread/1694/


If you need a post removed click on it's [Report] button and follow the instruction.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com.
If you like this website please support us by donating with Bitcoins at 16mKtbZiwW52BLkibtCr8jUg2KVUMTxVQ5
All trademarks and copyrights on this page are owned by their respective parties.
Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
This is a 4chan archive - all of the content originated from that site.
This means that RandomArchive shows their content, archived.
If you need information for a Poster - contact them.