Google APIs (and others) are getting through uBlock???

[uBlockUser]

First, I don't know if this is an issue, I would use forums if there were some.

But this got me wondering about my privacy...

I use HTTPS Everywhere with uBlock, and HTTPS Everywhere shows, that there's an established HTTPS connection to Google APIs (and others), even if they're blocked by uBlock...

For example when you go to www.gog.com, there's a "fonts.googleapis.com" & "google-analytics.com". My lists block them, and I even blocked them with dynamic filtering. Yet HTTPS Everywhere makes a connection to Google APIs...

BUT! When I try Adguard or Adblock Plus, with the same lists, or just blocking these two manually, the Google APIs is completely gone in HTTPS Everywhere... No connection. But with uBlock, it still makes connection.

I guess this is why someone said this:
"ublock blocks ads just like adblock plus, but triggers the ads API to think it got viewed"

And you said this:
"Completely false. uBlock Origin (and uBlock) does not "trigger" any "ads API" (whatever that is). It prevents network requests from being made according to filter lists so that your browser does not connect to remote servers, period."

I hope there's some good explanation to this, I'm worried about my privacy.

I'm using uBlock Origin 0.9.7.5. (It even happens with the other uBlock, just to make it clear).

EDIT: Also, If I block those items with uBlock for example, uBlock Origin still shows that these items are still there to block. But when I block them with Adguard or Adblock Plus, uBlock and uBlock Origin won't even find them anymore...

[uBlockUser]

Just adding images to better explain...

1. When one uBlock already blocks them:
   
   

2. Now when Adblock Edge blocks them:
   
   

Completely gone with Adblock Edge, both in uBlock, and HTTPS Everywhere...

[gwarser]

I suspect that they are executed in alphabetical order...
//
it's more complicated http://stackoverflow.com/questions/24514178/firefox-extensions-priority
//
and other 'execution priority' problem uBlock-LLC/uBlock#851 (NoScript & placeholders)

[uBlockUser]

What do you mean? I'm not talking about that...

When you use uBlock, and block something, other blockers still find that items to block, and even HTTPS Everywhere makes a connection to Google APIs and others.

But when you use for example Adblock Edge, uBlock won't find these items anymore, and HTTPS Everywhere won't even connect to Google APIs.

OR are you saying that HTTPS Everywhere first kicks in before uBlock, and that's why it makes a connection, but uBlock blocks it anyway? Wouldn't the entry dissapear from HTTPS Everywhere?

I bet it's not that... Even the second uBlock will find the items, when they are already blocked by the first one, but I don't know about Adblock Edge/Plus. I have to test it.

But as you see, when you block with Adblock Edge, uBlock Origin and HTTPS Everywhere won't find it anymore. But if you block them with uBlock, uBlock Origin and HTTPS Everywhere finds them. (Maybe because uBlock and uBlock Origin works the same way)...

EDIT: I've now tested Adblock Edge, I let GOG.com load with blockers disabled. HTTPS Everywhere made a secure connection with Google APIs, then I enabled Edge, and the entry didn't disappear, only when I refreshed the page.

Doesn't this leak some information? Like history. If the browser really connects to google before uBlock blocks it. Or maybe HTTPS Everywhere just THINKS it got connected to google, and uBlock blocked it before it could.

EDIT 2: With uBlock enabled and AdBlock Edge disabled. Edge still finds the items in blockable items.

But with uBlock disabled and Edge enabled, uBlock won't find them in dynamic filtering. But I guess it's not good example comparing Ublock's dynamic filtering UI, with Edge's blockable items UI.

[quilloss]

It does block Google APIs, check the network log. HTTPS Everywhere just detects it first.

[gorhill]

I hope there's some good explanation to this, I'm worried about my privacy.

Check Firefox's network pane in the dev console. You won't get arbitrary results because of whatever order add-ons are called.

[Snapy]

@uBlockUser @quilloss and @gorhill are totally right.
I checked with both uBlock's logger and Firefox Network Inspector (F12 > Network Tab) using this rule www.gog.com fonts.googleapis.com * block and the logger reported the connection as blocked whereas the network inspector doesn't show any connection to Google APIs.
Depending on whether uBlock was installed/enabled before/after HTTPS Everywhere, it will do its job in a different order. Here are the two possible cases you encountered :

• HTTPSEW intercepts the http (or just sees the https) connection to Google APIs and reports it in its UI
• uBlock then blocks afterwards the connection
  OR
• uBlock intercepts the http(s) connection to Google APIs and blocks it therefore HTTPSEW doesn't see the connection and doesn't report it in its UI
  In both cases your browser doesn't connect to Google APIs and your privacy is respected.

[uBlockUser]

Thanks a lot for your answers. Sorry if I wasted your time! :) I love uBlock, just found about it few weeks ago. And I saw improvements in speed (my computer is slow).

So there isn't any leakage then. Google doesn't know I visited the page.

But how's that I can see the entries in uBlock Origin, if they are already blocked with the another uBlock? Since I can't see them in uBlock with Adblock Edge enabled... (I guess they share the same list or something).

Thanks for the reference, gwarser.

[0xBRM]

@uBlockUser You're only supposed to use ONE blocker. Disable the ones you're not using or you'll incur a massive performance penalty.

[uBlockUser]

I am...... I was just testing this. I never used two.

I don't know why people use Adblock + Ghostery for example. Seems pointless to me. Some even use 3...

[0xBRM]

Even then, you're not supposed to test like that. You have to disable the other blockers in the addons menu for reasons stated in this thread.

[uBlockUser]

If you check my screenshots, the second blocker is disabled..

And I couldn't disable the second one in addon menu. I couldn't show what I wanted to show.

On screenshot 1) and 3). different blockers.

[logos88]

In the page of Disconnect they say that the order of installation has to be different in each browser.

"Will Disconnect Private Browsing work if I have multiple blocking extensions installed?
It depends on which browser you are using. On Internet Explorer, Disconnect will work fine even if you have multiple blocking extensions installed. On Firefox, if Disconnect is the first blocking extension you install, then Disconnect will work even if you subsequently install other blocking extensions. On Chrome, Safari, and Opera, it’s the opposite: in order for Disconnect to work on these browsers, it must be the most recent blocking extension installed. We know, it’s silly. And we’d change it if we could. But unfortunately, this weirdness is a function of the browser software, not ours".

https://disconnect.me/help#will-disconnect-private-browsing-work-if-i-have-multiple-blocking-extensions-installed

[gorhill]

But unfortunately, this weirdness is a function of the browser software, not ours

Why would the order matter? Is it redirecting HTTP requests? At most, on Firefox, the order would affect which extension block first, and so only the reporting of what is blocked would be affected. And for Chromium-based browsers, it makes no difference which is installed first or last, unless the extension redirect HTTP requests.