Lance <
lltb...@link-earth.net> wrote:
> Firefox 52.0.1 32bit on Windows 10 64-bit.
>
> I live in Los Angeles and enjoy checking out the Los Angeles Times
> newspaper online, I even subscribe for home delivery. Over the course of
> the past few months the LA Times website has gone completely nuts with
> advertisements. Please check it out and observe what happens over, say,
> 3 minutes (
www.latimes.com).
I used uBlock Origin for general ad/track blocking (instead of, say,
Adblocker Plus). I also use uMatrix (same author) to block off-domain
scripts. It is configured to allow on-domain scripts (those from the
domain the *I* chose to visit), images, and other features. I only use
it as a script blocker.
Hence I do not see any strange or unexpected behaviors.
> I don't have this problem with any other websites so I assume this isn't
> due to malware.
So what is the so-far-undescribed problem? Something about ads and some
behavior you don't like but it's not described.
> A restart with add-ons disabled makes no difference.
If the unwanted behavior is scripted within the page, disabling add-ons
would only eliminate them interfering with how that page is rendered;
i.e., disabling NoScript would means scripts would *no longer* get
blocked. You could disabled Javascript in the web browser (about:config
javascript.enabled = False).
> Logging-in to my subscriber account makes no difference. Memory use
> climbs from 140MB (immediately after restart w/ disabled add-ons) to
> over a gig after several minutes.
Mine keeps hovering around 300 MB for firefox.exe; however, I'm just
sitting at the home page to which you provided a URL (I'm not bouncing
around their site to other pages and off-domain scripts are not running,
either).
The off-domain scripts that uMatrix is blocking are from:
ensighten.com,
googletagservices.com,
trbas.com, and
tribdss.com. The
trb*.com domains are for Tribune Publishing, Chicago, Illinois who also
owns the LA Times. It allows 1st party (on-domain) scripts from
latimes.com. Note that allowind off-domain scripts often results in
other 3rd party domains showing up (which will, for me, get blocked by
default). uBlock Origin is only blocking off-domain scripts from
ensighten.com.
I would have to decide which off-domain resources to allow running their
scripts to get the page working more; for example, to get their videos
working.
> These are not nice unobtrusive ads like the NY Times or Washington Post
> websites have. These are pop-overs specifically for LA Times or "Our
> Partners" products (newsletters, diapers from Walmart). Occasionally,
> the page will reformat to make room for an inline video ad.
onhover events are defined in Javascript. Since I don't see any, their
sources are off-domain and uMatrix has blocked those. I do not have
Javascript disabled for the 1st party domain (where I chose to visit) so
the onhover events are in scripts retrieved from elsewhere.
I enabled their off-domain script sources (for domains owned by Tribune
Publishing), starting with
trbas.com, and refreshed the page. I found
no onhover (popup) events defined ... yet. As mentioned, allowing one
script resource often incurs triggering [attempt to] access to other
off-domain scripts. After enabling scripts from
trbas.com, new 3rd
party domains showed up and were blocked:
krxd.net,
rubiconproject.com,
google-analytics.com,
chartbeat.com, and
cloudfront.net. uBlock Origin
did not block all of those but uMatrix was blocking their scripts. I
then enabled scripts from
trbdss.com and refreshed the page. I then got
their blue-colored subscription ad at the bottom left corner of the page
with an "X" to remove it. I still found no onhover (popup) events
defined in their scripts (I moved the mouse cursor around various
elements of their web page but never got an onhover-triggered popup).
So the onhover-triggered popups you mention are due to Javascript
delivered from other off-domain sources. I didn't bother to enable them
since I already know they are for tracking, analytics, and ads. I did
momentarily disable uMatrix to allow all scripts leaving only uBlock
Origin to decide what to block. I still got no onhover-triggered
popups. The ad sources were still getting blocked by uBlock Origin.
If you want to eliminate ads and their too-often nasty behaviors, get an
adblock add-on. I use uBlock Origin. Some users have Adblock Plus. An
adblocker will sometimes block scripts from "bad" sources but it should
not be considered a robust script blocker.