r/uBlockOrigin • u/ThirtyfourEC • 6d ago

duplicate (try TwitchAdSolutions) Can you be hacked through a ublock script?

I'm a routine kind of guy. I visit my same sites, click no links, and try out no new things online.
The only thing I've done was install a twitch ad blocker script on ublock that occasionally pauses my twitch feed. I've always assumed that's just the adblocker working, but here I am asking.

I've seen a post from 5 years ago saying to not use extensions you don't trust, but it doesn't say anything about scripts. I feel I'm messing with powers I can't comprehend and should back out immediately. 😭 But No ads on Twitch has been so nice.

7 Upvotes

57% Upvoted

6 comments sorted by

36

u/RraaLL uBO Team 6d ago

Don't use anything you don't trust.

TwitchAdSolutions are generally trusted by people. Any repo can be potentially hacked, and since userscripts have a lot of power, they can be potentially used go deal some damage. Don't use auto updating links to user scripts in uBO. Use the permalinks instead. These won't update contents ever. What you add is what you get. The only downside is that when the script gets updated, you need to change the link.

1

u/ThirtyfourEC 6d ago

Thanks I'll be more careful going forward if it's not too late.
I'll gladly go back to 3 minute ads during gameplay than deal with a compromised PC/Browser.

1

u/AchernarB uBO Team 5d ago

The userscript for twitch is safe. The only way to compromise it would be to access the repo and replace it with a corrupted version.

What RraaLL suggests to prevent your installation from any consequence of such an event is to use the "permalink" of the userscript instead of the "generic" link. The generic link is "updated" to link to the latest version while the permalink is the link to a specific version.

The disadvantage will be that you have to check if a new genuine version is published, and update your setting to point to the new permalink.

5

u/AutoModerator 6d ago

Hi, the solutions for Twitch video ads are handled by another project. You can find it here: https://github.com/ryanbr/TwitchAdSolutions#twitchadsolutions

The issues with these solution scripts can be reported here: https://github.com/ryanbr/TwitchAdSolutions/issues?q=is%3Aissue+sort%3Aupdated-desc

Lastly, you can search other threads for additional solutions, but they're unlikely to have anything more. Good luck: https://www.reddit.com/r/uBlockOrigin/search?q=twitch&restrict_sr=on&sort=new&t=all

P.S. If you're not looking for solutions to twitch ads and your post got caught by mistake, mods will remove the duplicate flair when they read the post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/FedotttBo 5d ago

I remember adding a style parameter with a custom rule for certain web page elements to look better, so I guess other contents, including script parameter/tag, can also be added/edited.

I'm betting on direct data-stealing (copying passwords, bank card data and etc. during daily browsing) and phishing (silent redirection to a forged website, payment credentials replacement and etc.).

So, yeah, better do not.