Dataunlocker : a technology to bypass Privacy Badger, uBlock and other blockers

[Paruccone]

on one side this is fascinatingly smart, one the other side it is mildly infuriating. Looks like that through proxy and renaming of elements, this technology allow to bypass common blockers.
https://www.dataunlocker.com/

[ghostwords]

Thanks for the heads up! I don't think I've seen this thing in the wild yet. Do you have any example sites for us to look at?

[Paruccone]

the author has multiple youtube videos with extensive examples of how it works and how it can bypass uBlock. I guess we just have to wait for him to publish a testimonials section because detecting it won't be easy ;) :(

[ghostwords]

The big picture is that Privacy Badger exists to fight pervasive, non-consensual tracking. This thing appears to be a niche user preference circumvention tool. (I wonder if it ignores Do Not Track and Global Privacy Control signals.) Until we have some real world examples to look at, I can't say much more about it.

[Paruccone]

Totally agree @ghostwords , which is why I reported its existence here: hard to identify some real world examples without finding a way to detect it. Being aware it exists may keep contributors on alert to find them.

[JobcenterTycoon]

Real world example can be found here (V2): stateless(.)me the tracking stuff coming from stateless(.)me/assets/.

Simple blocking is not enough on Dataunlocker V2 because they using some integrity checks to detect blocking and tampering. When blocking/tampering getting detected it self breaks the page (buttons stops working, links getting deleted or anti adblock getting shown). See here: https://docs(.)dataunlocker(.)com/setup/defender

The script only activate the shielding when no adblocker getting detected. To detect they fire a empty xhr request to a tracking server and checking of the request getting blocked. They also place a HTML element with a bait class and checking if its getting hidden.

Also they using bots to monitor filtering attempts. One bot they using is https://github(.)com/dataunlocker-bot

V1 can be blocked without breakage. Example site which using V1 is furucombo(.)app