Hacker News new | past | comments | ask | show | jobs | submit login

I don't know enough about how uBlock works, but I'm mostly concerned about blocking trackers, and dislike invasive advertising. I use Ghostery with everything blocked.

I also bank with smile.

I've just confirmed that Ghostery is blocking Adobe, Omniture and Tealium trackers, but I was able to log into my account no problem. I also transferred some funds to a linked account.

What aren't you able to do with smile? And is it something specifically with the way uBlock blocks?




I noticed with Smile that when I first went to the login page it would fail to login the first time... they have some server-side code to track sessions linearly and force log-out if it detects background operations.

Their use of one of their trackers meant that the first time I ever arrived at their site (every time, because private browsing) it would set things up that touched their server and triggered Smile's security thing.

It was a minor inconvenience... but then I looked into it and noticed how much tracking they were doing.

My view on bank websites is that the only party that I should be speaking to is the bank, securely. No other party, ever.

I now block absolutely everything on my banking website, but I was very surprised this had to be done. A bank, of all sites, should never ever use a third party anything.


It's not just banking. How can sites be so credulous to include 3rd party javascript into their login form pages? It's an invitation to steal your users' credentials! If you really must rely on a 3rd party captcha service put the captcha into an iframe or put it on a separate page.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: