favicon and VPN

Discussions about the Application Boundaries Enforcer (ABE) module
ruy.benton
Junior Member
Posts: 21
Joined: Sat Aug 29, 2015 6:01 pm

favicon and VPN

Post by ruy.benton »

Hi,

Thank you for your great plugin.

With Zenmate and Hola - VPN, we think we are safe ...

But if you start Firefox with many Tabs - 10, 20, etc
And monitor. the links with a sniffer ( tcpdump )... all the Tabs download FavIcons . :cry: :x
The ISP ... routers ... switchs see my Tabs ...



1 - uBlock Origin /favicon.$image in "My Filters" work :D :D :D



2 - < userProfile>/chrome/userChrome.css :


____________________________________________________________________________________
@namespace url("http://www.mozilla.org/keymaster/gateke ... s.only.xul"); /* only needed once */

.tabbrowser-tab .tab-icon-image,
.tabbrowser-tab .tab-throbber { display:none!important; }

#personal-bookmarks .toolbarbutton-icon { display:none!important; }


/* tab */ .tabbrowser-tab .tab-icon-image,
/* bookmarks toolbar */ .bookmark-item .toolbarbutton-icon,
/* bookmarks menu */ #bookmarksMenu menuitem .menu-iconic-icon,
/* address bar autocomplete */ #PopupAutoCompleteRichResult .ac-site-icon {
display: none !important; }
____________________________________________________________________________________

some favicon pass the filter!!!




3 - In NoScript use ABE or other ?


Best Regards,
Ruy
FreeBSD, OpenBSD, NetBSD, Solaris, Linux Administrator
IBM Mainframe
MacOSX
Cisco
Hacker, Cracker - 680XX,
Data Recover - Disks, Tapes
Mozilla/5.0 (X11; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: favicon and VPN

Post by barbaz »

NoScript is not the right tool to do that - and in fact it tries to distinguish browser requests and not interfere with them. NoScript is a security tool, not a privacy tool.

I thought uBlock Origin can block all favicons if you enable behind-the-scene filtering?
*Always* check the changelogs BEFORE updating that important software!
-
ruy.benton
Junior Member
Posts: 21
Joined: Sat Aug 29, 2015 6:01 pm

Re: favicon and VPN

Post by ruy.benton »

barbaz wrote:NoScript is not the right tool to do that - and in fact it tries to distinguish browser requests and not interfere with them. NoScript is a security tool, not a privacy tool.

I thought uBlock Origin can block all favicons if you enable behind-the-scene filtering?
ABE:

Site ^https?://.*/favicon\.ico ^https?://.*/favicon\.png
Deny

Please any sug ...
FreeBSD, OpenBSD, NetBSD, Solaris, Linux Administrator
IBM Mainframe
MacOSX
Cisco
Hacker, Cracker - 680XX,
Data Recover - Disks, Tapes
Mozilla/5.0 (X11; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: favicon and VPN

Post by barbaz »

Sorry, I wasn't being clear. ABE doesn't filter the favicon requests, ABE rules won't have any effect. Please see viewtopic.php?f=10&t=18905 for more details (and note that I've since replaced SimpleBlock with uBlock Origin)


Again, you say this
ruy.benton wrote:1 - uBlock Origin /favicon.$image in "My Filters" work :D :D :D
So what specifically is wrong with just doing that?
*Always* check the changelogs BEFORE updating that important software!
-
ruy.benton
Junior Member
Posts: 21
Joined: Sat Aug 29, 2015 6:01 pm

Re: favicon and VPN

Post by ruy.benton »

barbaz wrote:Sorry, I wasn't being clear. ABE doesn't filter the favicon requests, ABE rules won't have any effect. Please see viewtopic.php?f=10&t=18905 for more details (and note that I've since replaced SimpleBlock with uBlock Origin)


Again, you say this
ruy.benton wrote:1 - uBlock Origin /favicon.$image in "My Filters" work :D :D :D
So what specifically is wrong with just doing that?
I research from the beginning of times hehehehehehehe.

I'm trying with NoScript ...

Best regards,
Ruy
FreeBSD, OpenBSD, NetBSD, Solaris, Linux Administrator
IBM Mainframe
MacOSX
Cisco
Hacker, Cracker - 680XX,
Data Recover - Disks, Tapes
Mozilla/5.0 (X11; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
fatboy
Senior Member
Posts: 82
Joined: Fri Jul 25, 2014 6:56 am
Contact:

Re: favicon and VPN

Post by fatboy »

browser.chrome.favicons;false
browser.chrome.site_icons;false

If noscript. ABE.skipBrowserRequests;false, your rules ABE rules work. You can then add favicon.svg
But it could have an impact on other requests (barbaz gave the link).

userChrome and userContent only hides icons but does not block queries.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 SM/2.38 NS/2.9.0.4
ruy.benton
Junior Member
Posts: 21
Joined: Sat Aug 29, 2015 6:01 pm

Re: favicon and VPN

Post by ruy.benton »

fatboy wrote:browser.chrome.favicons;false
browser.chrome.site_icons;false

If noscript. ABE.skipBrowserRequests;false, your rules ABE rules work. You can then add favicon.svg
But it could have an impact on other requests (barbaz gave the link).

userChrome and userContent only hides icons but does not block queries.
Thank you for your Illuminati comments.

In Linux with Firefox and qbittorrent I don't see problems.
But in W$n lots of warning ... AntiVirus.

Search "favicon and Virus" ... surprise :mrgreen:



browser.chrome.favicons;false :cry:
browser.chrome.site_icons;false :cry:
and browser.chrome.image_icons.max_size :cry:
Don't work !!!!!!!!! in Firefox 47.0

ABE.skipBrowserRequests;false And the goal/purpose ?

Lots of people ask block favicon in userChrome.css in Forums ... not this one
And only hide .... :lol:



UPDATE: ABE

Site ^https?://.*/favicon.*\.(?:ico|png|jpg|gif|svg)
Deny

Your comments please


barbaz wrote: "ABE doesn't filter the favicon requests, ABE rules won't have any effect.
Hum ...
___________________________________________________________________________________
[ABE] <^https?://.*/favicon.*\.(?:ico|png|jpg|gif|svg)> Deny on {GET http://www.qbittorrent.org/favicon.ico <<< chrome://browser/content/browser.xul - 1}
USER rule: Site ^https?://.*/favicon.*\.(?:ico|png|jpg|gif|svg)
Deny
___________________________________________________________________________________


Best Regards,
Ruy
FreeBSD, OpenBSD, NetBSD, Solaris, Linux Administrator
IBM Mainframe
MacOSX
Cisco
Hacker, Cracker - 680XX,
Data Recover - Disks, Tapes
Mozilla/5.0 (X11; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
Post Reply