Websites detecting blockers now?

[Viper187]

I noticed a site I just tried to browse detects both noscript and adblock and completely blocks you from viewing it until you disable both. I disabled adblock first, but I still had to allow all on NoScript before it would display normally. It was showing normally until I allowed scripts for the domain itself, which I need for some of the things on the forum to work. The site is www.360haven.com

Check it out, allow scripts for the site itself, and you'll see that it blocks all access complaining about adblock software. Any ideas? Will this particular detection method be addressed in a future version?

[Thrawn]

It will always be theoretically possible for websites to detect NoScript's presence. They can use <noscript> elements, or they can probe to determine whether images are being allowed while scripts are being blocked, etc. I think that JavaScript can also detect which plugins are installed; not sure about extensions.

You can poke around to determine what method they're using and try to work around it, but I'd suggest walking away. If they have so little respect for your privacy and safety that they would demand you switch off two very useful protections, then they're not worth your time.

Update: Looks like if you block scripts for the top-level site, 360haven.com, then their block doesn't work. Seems appropriate. However, that may mean that the site doesn't work. Experiment if you wish.

Update 2: Poked around a bit (with JSView) to see whether I could find the specific script that they're using to show their 'please allow ads' message. And guess what I found? Obfuscated inline JavaScript with the word 'adblock' in it. Seriously, just walk away.

[Viper187]

Is there some way to get NoScript to block those lines? Like blocking eval() code entirely? When I find some BS like this, I'd rather get around it than let them win.

[Thrawn]

Is there some way to get NoScript to block those lines? Like blocking eval() code entirely? When I find some BS like this, I'd rather get around it than let them win.

There's really not much point in getting annoyed by a website 'winning'...

You could try Controle de Scripts, or you could write a surrogate script. Or a Greasemonkey script, similar to a surrogate script.

[Giorgio Maone]

You could try Controle de Scripts, or you could write a surrogate script. Or a Greasemonkey script, similar to a surrogate script.

Surrogate, indeed:

noscript.surrogate.360Haven.sources

Code: Select all

@http://www.360haven.com/*

noscript.surrogate.360Haven.replacement

Code: Select all

Object.defineProperty(window, "adblock", { get: function() false, set: function() false }); Object.defineProperty(window, "google_ad_client", { get: function () { return { __noSuchMethod__: function() this } } }); Object.defineProperty(window.HTMLBodyElement.prototype, "innerHTML", {get: function() "" });

I'm likely gonna include this in next NoScript version, too.

[Tom T.]

Interestingly, I have no adblocking software; yet, if the top-level script is allowed, I still get the "Adblocking software detected" message. Temp-disabling RequestPolicy didn't change that. So apparently, the fact that NS blocks the ad scripts convinces them that you have ABP or similar installed. Certainly a side benefit of NS is how many ads are blocked because they are served only by script.

Update: Looks like if you block scripts for the top-level site, 360haven.com, then their block doesn't work. Seems appropriate. However, that may mean that the site doesn't work. Experiment if you wish.

I found that with all script blocked, but TA this object:

Code: Select all

Temporarily allow http://www.360haven.com/forums/360havenNavigation.swf
(application/x-shockwave-flash <EMBED> / http://www.360haven.com)

appeared to make things work. At least, the left-side navigation appeared, and most other pages looked sort of normal.

[Thrawn]

Surrogate, indeed:
<snip>
I'm likely gonna include this in next NoScript version, too.

Hmm...since the site is obviously conscious of the existence of ad-blocking software, they might notice this. Not worried about them hating on you?

Regardless, thanks for writing that.