AdguardFilters VS cname-trackers

As far as Safari-compatible ad blocking extensions, I've been reasonably satisfied with AdGuard, and it's free with some paid nice-to-haves which I don't use, but hear good things about. It's available on nearly every browser and operating system, including Android and iOS. It's also open source.

https://en.wikipedia.org/wiki/AdGuard

https://adguard.com

https://github.com/AdguardTeam

uBlock Origin has a few lists for cookie banners that I always keep on [0][1]

[0] https://github.com/easylist/easylist/tree/master/easylist_co...

[1] https://github.com/AdguardTeam/AdguardFilters/tree/master/An...

! trusted filter (not sure if it affects the query part) ||amazon.com/*/ref=$urltransform=/\/ref=.*// ! does not require trust, but likely will break stuff (it's too broad) ! you can use "AdGuard URL Tracking Protection" - https://github.com/AdguardTeam/AdguardFilters/blob/fff7e0702850ec9298e7825fc04563990bc40a2e/TrackParamFilter/sections/specific.txt#L1322-L1394 ||amazon.com^$removeparam

Keep in mind that neither of those lists are default lists and neither are maintained by the uBlock Origin team. Issues with those lists should be reported to their maintainers: - AdGuard URL Tracking Protection: https://github.com/AdguardTeam/AdguardFilters/issues - Actually Legitimate URL Shortener Tool: https://github.com/DandelionSprout/adfilt/discussions/163

Issue: https://github.com/AdguardTeam/AdguardFilters/issues/152943

Fixed in AdGuard Spanish/Portuguese list: https://github.com/AdguardTeam/AdguardFilters/commit/03d5583f6a0251b9b9b80280269757f29547c86d

Note that CNAMEs is literally caused by GDPR, and the pathway every single ad or tracking company seems to go sooner or later.

For people not understanding how it works: you can set a CNAME entry on your tracker.domain.tld to bypass all Browser's third-party tracking preventions, and make it look like it's a normal subdomain of your website.

You need to make a CNAME tracker database manually by resolving the reverse entries for known IPs. Usually there is hundreds or thousands of CNAME entries pointing to the same IP address.

The AdGuard team also made a database for this, in case anyone needs it for UBOL [1]

[1] https://github.com/AdguardTeam/cname-trackers

So nextdns’s third party disguised trackers is actually really tiny of a list, like 30 domains. (Im trying to add more so it has the same amount of cname’s blocked as adguard). Anyways, the reason why the list is so tiny is because it uses wildcard logic so all subdomains get blocked. It already uses some of the cname companies that adguards cname-tracker list uses but not all. Hopefully my pull request can get merge eventually because then the setting will be a little bit more effective

I see fathom on Adguard CNAME tracker. Example:

> uBlock Origin already performs CNAME decloaking and blocks this approach, it’s pretty cool.

... which in return is a static list of domains which needs to be regularly updated, and therefore is not really failsafe. uBlock0 uses Adguard's scraped dataset [1] as a source to do this, as Chrome Extensions cannot make DNS requests without a DNS-via-HTTPS endpoint.

[1] https://github.com/AdguardTeam/cname-trackers

Not sure where I should report this, but I seem to have found a CNAME cloaking tracker which i don't find in either the original or disguised tracker lists here https://github.com/AdguardTeam/cname-trackers Is there a mechanism for reporting these? I saw someone posted a list on github, but no response there. Maybe this example is just ordinary tracking though?

Are you able to block trackers/ads using this new CNAME cloaking technique? https://github.com/AdguardTeam/cname-trackers