Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I recently had to give up on uMatrix. Not only is it a bit of a hassle, but things break in very bad ways. Where this is particularly problematic is with CAPTCHA (not a fan). I've been detected as a bot many times and it takes a bit to enable each little bit per detain (XHR, script, images, etc.), and by the time you enable all the right stuff, you may be locked out. The last straw was failing the CAPTCHA at Bill.com where I failed the CAPTCHA and was using a VPN and got my account banned and couldn't get paid for a contract. I'm also going to encourage people to not use their service as well, but this kinda thing happens far too often with uMatrix.


I just remembered I got banned from Gumtree for posting multiple times in a row because a script was blocked and wasn't giving me feedback about whether or not it was posted. As I enabled each script and tried resubmitting to get it to work, I was incrementing a counter to get banned. When I asked about it, they, like Bill.com, just pointed to the ToS saying they could terminate anyone for any reason and have no requirement to explain why or undo.


Using uBlock Origin in ‘medium’ mode (dynamic filtering turned on, static 3rd party resources like images and css allowed) achieves much of the same safety & privacy gains of uMatrix without sacrificing a ton of usability.


I think you might take the opposite viewpoint that you can relax the settings for umatrix, then fine-tune a particular site.


I don't remember reCAPTCHA needing more care than enabling everything minus cookies for gstatic.com.


Right, but until you know this, you'll run into issues if you try to enable each little box as needed. There's also some at google.com to enable. And this doesn't change the callbacks the site consuming reCAPTCHA might be using.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: