this post was submitted on 20 Feb 2026
289 points (98.7% liked)

Technology

81710 readers
6511 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Quacksalber@sh.itjust.works 173 points 2 days ago (4 children)

Archive.today apparently hijacks visitor's browsers to DDoS a blog that tried to uncover the identity of the archive's admin. UBlock helps to stop that script.

[–] helpImTrappedOnline@lemmy.world 116 points 2 days ago (1 children)

Another example why Unlock Origin should be considered essential security software, not just an "ad-block".

[–] Damage@feddit.it 10 points 2 days ago (3 children)

If a tool is demonstrably indispensable to disable some browsers' functionality, is it wise for browsers to have that functionality?

[–] HCSOThrowaway@lemmy.world 1 points 1 day ago

I'm guessing there's just so much money (and power) in that kind of thing that it's simply here to stay.

[–] helpImTrappedOnline@lemmy.world 19 points 2 days ago* (last edited 1 day ago) (1 children)

There may be genuine use cases to run a script, or whatever the attacker used. The problem is the browsers will auto-run stuff, the user isn't aware and there's no way to stop it. All ublock (and others) do is provide the missing security layer called "don't auto run shit from the web".

[–] WhyJiffie@sh.itjust.works 1 points 1 day ago (2 children)

it won't provide that, everything will still autoorun, but known bad things won't get to run

[–] eah@programming.dev 3 points 1 day ago

The NoScript extension will properly do this. The extension blocks domains from running scripts except those you've whitelisted. There's a drop down that displays a list of domains from which the page wishes to run scripts. It makes much of the web a pain to use, though. I sometimes have to go through a loop of whitelisting a subset of domains which want to run followed by a page refresh until the page works. Javascript is often not optional. If you had to live like Richard Stallman professes you should, you'd probably have to join the Amish.

[–] helpImTrappedOnline@lemmy.world 1 points 23 hours ago* (last edited 23 hours ago)

Yeah, you're right. I guess a better way to put it would have been "don't load 3rd party shit that I didn't tell you to load".

Adblockers aren't total security, nothing is, but it's no doubt they are a massive improvement.

[–] JPAKx4@piefed.blahaj.zone 6 points 2 days ago

I like it being extensible instead, as some adblocks might be opinionated or unresponsive. It's easier to swap adblocks then browsers.

[–] otter@lemmy.ca 40 points 2 days ago (4 children)

UBlock helps to stop that script.

Would that be by default, or do I need to enable something specific

[–] kip@piefed.zip 34 points 2 days ago* (last edited 2 days ago) (1 children)

from the blog in question

On January 21, commit ^bbf70ec (warning: very large) added gyrovague.com to dns-blocklists, used by ad blocking services like uBlock Origin. This is actually beneficial, since if you have an ad blocker installed, the DDOS script’s network requests are now blocked. (It does not stop users from browsing to my blog directly.)

- https://gyrovague.com/2026/02/01/archive-today-is-directing-a-ddos-attack-against-my-blog/

can't find anything from a quick look that confirms this list is used by default in ubo

[–] PumaStoleMyBluff@lemmy.world 13 points 2 days ago* (last edited 2 days ago) (1 children)

I don't see that particular list, but the same filter is present in EasyPrivacy from EasyList, which is enabled in uBO by default.

[–] kip@piefed.zip 6 points 2 days ago (1 children)

nice one, cheers. it's there in line 16607 in EasyPrivacy, same guy runs btdig dot com?

||gyrovague.com^$domain=archive.fo|archive.is|archive.li|archive.md|archive.ph|archive.today|archive.vn|btdig.com
[–] WhyJiffie@sh.itjust.works 1 points 1 day ago

I've read that somewhere else too, could be

[–] pkjqpg1h@lemmy.zip 12 points 2 days ago

It's by default easylist-privacy list is default

[–] SkaveRat@discuss.tchncs.de 5 points 2 days ago

from what I heard, the default one is enough. Although I haven't checked it

[–] Quacksalber@sh.itjust.works 2 points 2 days ago

I don't know more than what the wiki article linked to. It says UBlock blocks it. It doesn't say any more than that.

[–] hector@lemmy.today -4 points 1 day ago* (last edited 1 day ago)

I would be happy to contribute some browser action to ddos some fucking mercenary blog working for tech parasites.

[–] sakuraba@lemmy.ml 3 points 2 days ago

makes sense, I didn't get it when people started saying it but I don't browse without ublock