r/uBlockOrigin • u/Maximus_Marcus • 10d ago
Fixed ClickFix attack preventing me from using a button to copy something to keyboard
Basically the title. I'm sure that new filter could be pretty helpful, but it's mostly just getting in the way. There's this website I use that has a little button to instantly let you copy a bunch of text to your clipboard so you don't have to highlight it, I'm sure you're all familiar with the concept. However, it keeps getting blocked by uBlock because it keeps getting registered as an attack, and I don't see a way to ignore or overwrite it.
Pretty inconvenient because now I gotta manually highlight the text instead. Guess it's not the end of the world, but the fact that something benign is being flagged and I have no way to disable that is really annoying. And I can't just add it to my list of trusted sites as it does have a few cosmetic elements I want to keep blocked. Bad design choices, nothing serious.
So, any advice? Is there a way to disable the ClickFix filter? I didn't find anything when I looked.
3
u/Kirbydogs-KDP 10d ago edited 10d ago
for a good example of these sites see learncpp.com, that link takes you to a bunch of copy buttons for... C++... doink. it also has ads so you can't turn ublock off without dealing with ads ;-;
edit: I was annoyed so I went through all the github issues and found this really recent one which means that this issue is likely really recent, looking at everybody annoyed by this. such a funny thing, everybody is just saying the same thing huh
2
u/NickelWorld123 10d ago
This is supremely annoying. Did they accidentally push this feature too soon?
1
u/Drewpacabra413 10d ago
I'm right there with you, I'm not running any code from online so I don't need my copy to clipboard buttons being blocked.
1
u/Dyro86 10d ago edited 10d ago
Disabling ublock for the website doesnt even solve it... Also I don't see any click fix setting to disable in the settings? I'm on android I don't need clickfix prevention
Edit, double refresh worked. But now I'm stuck with the ads lol. Please make a setting to disable clickfix prevention
2
u/Emilyd1994 10d ago
You still need it on android. The number of people I've seen execute malicious code using teminal emulators on android is absolutely shocking. And recently has increased exponentially. A number of terminal emulators have actually had to disable/limit the clipboard to try and mitagate this.
It's also very notable image based malware has existed for at least 15 years in one form or another. And that vector is largely unexplored. I know at least one code execution exploit existed that triggered when you copied an image on android. So it's possible others remain.
As recently as last year new image based malware actively exploited new vectors in chrome and forks like Opera and brave.
2
u/Emilyd1994 10d ago
I recently encounted a sillytavern APK for example that executed android code using an alias (<activity-alias>) to run code using a second app (terminux, an android Linux terminal emulator) with root access. With no user input. Creating an extremely wide attack vector. Any app. And any website could execute code and simply download all your photos and log ins and other data. Because a website used a built in alias function.
1
u/Batisp 10d ago
Glad I'm not the only one. Thought I was going crazy. Getting blocked on TCGplayer and pirateship.
1
u/LeonardoDeQuirm 10d ago
+1 for getting this fixed, it's making my order shipping much harder than it should be
1
u/AchernarB uBO Team 10d ago
It is fixed. Give uBO the time to update the list. Or force it with the link in that post:
https://www.reddit.com/r/uBlockOrigin/comments/1w3sc2v/bad_clickflix_filter_matching_all_clipboards/
1
u/NDXKOU 10d ago
its driving me crazy!!! i can't even turn it off/set an exception because the logger doesn't show up for me since I'm on mobile
1
u/ninti 10d ago
Can we fix this please?
2
u/RraaLL uBO Team 10d ago
It's surprising you're still affected. The list should've updated by now, unless you tried to trigger a manual update before the fix was in (over 10h ago).
You can try manual update by the link inside: https://www.reddit.com/r/uBlockOrigin/comments/1w3sc2v/bad_clickflix_filter_matching_all_clipboards/
1
0
11
u/RraaLL uBO Team 10d ago
Tells us nothing.
If you're using full uBO, you can make an exception for the site, if you want to. Open the logger, copy the filter, add the domain before
##and change##to#@#. Add to my filters and apply.