CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

The online streaming radio Deezer.com

 
Post new topic   Reply to topic       All -> FavForums -> Proxomitron [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Wed Dec 12, 2007 12:59 pm    Post subject: The online streaming radio Deezer.com
Reply with quote

The HTML in that site has just one call for ads (via an iframe), but the ratio itself, which is in one SWF file, calls for other URLs inside the domain.

They insist to use an outdated (i.e. not Proxomitron proof) version of the known SWFObject.js, so you should put www.deezer.com/Scripts/swfobject.js in your bypass list.

As for the initial HTML, to bypass the DOM Banner Blaster filter, use:

Code:
[Patterns]
Name = "Deezer - Enable Player"
Active = TRUE
Multi = TRUE
URL = "www.deezer.com"
Bounds = "<a\s*</(a|td|tr)>|<iframe*</iframe>|<ilayer*</ilayer>|<img*>|<input*>|<script(*(</sc|"*'))++ript >|<object*</object>|<form*</form>"
Limit = 6500
Match = "(*(")\0\wsour)\#(ce*(")\1\wprom)\#(o*)\#"
        "\ssrc=$AV(*ads*)(*)\#"
Replace = "\#\0 + \0\#\1 + \1\#\#"


And now a way to get rid of ads in the internal /ads/ URLs the SWF file calls out to (assuming you use a non outdated browser):

Code:
[Patterns]
Name = "Deezer - Disable Ads"
Active = TRUE
URL = "www.deezer.com/\w/ads/"
Limit = 256
Match = "(if \(OAS_version >= 11\))\#\s*;"
Replace = "\#{}"


Now my question to you is why do these filters disable playlists (i.e. you have to play songs manually!)? And this is even though I've made them non intrusive. They (especially the latter one) send false information instead of removing any information. How does the player know something is wrong then...?

Before you say the filters aren't worth it because of this, do know it also happens if you just enter www.deezer.com into your bypass list.

It's only fixed by a global bypass, which means it's not a problem in deezer.com itself but in some site it uses. So can anyone fix it?

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Thu Jan 03, 2008 5:21 pm    Post subject:
Reply with quote

They've added even more javascipt to the front page and broke my first filter (and led the whole page to be DOM blocked), so here's a newer version (oh, how I miss the liberal days when one could edit their posts):

Code:
[Patterns]
Name = "Deezer - Enable Player"
Active = TRUE
Multi = TRUE
URL = "www.deezer.com"
Bounds = "<a\s*</(a|td|tr)>|<iframe*</iframe>|<ilayer*</ilayer>|<img*>|<input*>|<script(*(</sc|"*'))++ript >|<object*</object>|<form*</form>"
Limit = 8000
Match = "$NEST(<script*>, *source*, </script>)"
        "<!--*setup*-->*<!--*setup*-->"
        "(*(")\0\wprom)\#(o*]>)\#*(\s<*)\#"
        "\ssrc=$AV(*ads*)(*)\#(\wad\()\1(*)\#"
Replace = "\#\0 + \1\#\#\#function \1) {}\r\n\1\#"


Did anyone give any thought about why playlists don't work...?

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Fri Jan 11, 2008 6:59 pm    Post subject:
Reply with quote

Hooray, they got a new version (beta v2.0), which brought these changes:

1) They finally upgraded SWFObject so it's now Proxomitron proof. This means you no longer have to bother putting it in the bypass list!
2) The playlists now simply work in Proxomitron!
3) No more internal ad pages.
4) Just one call for ads in the front page.

3) & 4) mean you should delete any aforementioned filters in favor of one united filter:

Code:

[Patterns]
Name = "Deezer - Disable Front Page Ads"
Active = TRUE
URL = "www.deezer.com"
Bounds = "({*}|<a\s*</(a|td|tr)>|<iframe*</iframe>)"
Limit = 256
Match = "\#($INEST({, *source=*, })|"
        "\&\wpromo\w=\w|"
        "<iframe*</iframe>)(*)\#"
Replace = "\@"


This is proof positive how inefficient the no edit policy is. The old filters are outdated and would just take space and confuse future visitors.

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Tue Jul 08, 2008 1:49 pm    Post subject:
Reply with quote

To avoid some issues, I'm now using this instead:

Code:

[Patterns]
Name = "Deezer - Disable Front Page Ads"
Active = TRUE
Multi = TRUE
URL = "www.deezer.com"
Bounds = "<div*</div>"
Limit = 256
Match = "\0<iframe*</iframe>(*)\1"
Replace = "\0\1"


But Deezer can no longer work with Kill pop-up windows v2 and Stop status bar scrollers enabled! That is, it just displays "loading..." forever on my chosen song.

The only solution I found was once again using the bypass list, this time for:
Quote:
proxy-\w.deezer.com/rewrite/

When I'm trying to load that proxy page directly, I just get an error page, so I don't even know what I'm bypassing. Does anyone have a clue what is it needed to bypass that page?

Incidentally, other people actually complain about this in their forums. I wonder if they use Proxomitron too, because the aforementioned solution solves the problem for me.

Back to top
View users profile Send private message
z12

Captain
Captain


Joined: Jul 17, 2002
Posts: 385
Location: USA

PostPosted: Fri Jul 11, 2008 10:59 pm    Post subject:
Reply with quote

LWC wrote:

But Deezer can no longer work with Kill pop-up windows v2 and Stop status bar scrollers enabled! That is, it just displays "loading..." forever on my chosen song.


I'm not familiar with the "Kill pop-up windows v2" filter.
Perhaps you can point out where I might find it.

The "Stop status bar scrollers" filter never did work for me (firefox).
I still don't have a good solution to this except disabling it via the browser.

At any rate, like you, I run my own config.
I don't see any ads and things seem to work ok for me on that site.
However, I'm not a registered user so I can't try everything.

I've no header filter blocking "proxy-\w.deezer.com/rewrite/".
But I didn't see anything suspicious in the log window as far as that url is concerned.
Since it's on the deezer domain, my guess it's probably as trustworthy as deezer.

I also get an error page when going to the url directly.
Perhaps spoofing the "Refer" header might fix that.

z12

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Wed Jul 16, 2008 10:48 pm    Post subject:
Reply with quote

z12 wrote:
I'm not familiar with the "Kill pop-up windows v2" filter. Perhaps you can point out where I might find it.

Are you asking for real? That's an official filter (from the latest version).

Quote:
I've no header filter blocking "proxy-\w.deezer.com/rewrite/".

What header filter? If I don't put that URL in the general bypass list, I just get "loading..." when trying to hear any song.

Back to top
View users profile Send private message
z12

Captain
Captain


Joined: Jul 17, 2002
Posts: 385
Location: USA

PostPosted: Sat Jul 19, 2008 12:27 pm    Post subject:
Reply with quote

LWC wrote:

z12 wrote:
I'm not familiar with the "Kill pop-up windows v2" filter. Perhaps you can point out where I might find it.

Are you asking for real? That's an official filter (from the latest version).


As far as I know, ProxN45.zip was the last "official" release by Scott.
It has no "v2" version of the "Kill pop-up windows" web filter.

LWC wrote:

If I don't put that URL in the general bypass list, I just get "loading..." when trying to hear any song.


If you examine the cached reply from "proxy-\w.deezer.com/rewrite/" when bypassed, you will see it's not html.
The file type signifier idicates it is a "FLV" file:
http://www.digitalpreservation.gov/formats/fdd/fdd000131.shtml#sign

If you are injecting code into the reply, no doubt this will cause problems.

z12

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Sun Jul 20, 2008 2:45 pm    Post subject:
Reply with quote

Oops, you're right! I'm sorry. I meant my "Kill pop-up windows v2" filter.

Where does Proxomitron tell me it's a FLV file? The "Recent URLs" reports it's a 0 length "text/html" file. The most the "message log" tells me is that this page involves the header "x-flash-version". Be it as it may, is there a better way to handle this page than give it a general bypass?

Back to top
View users profile Send private message
z12

Captain
Captain


Joined: Jul 17, 2002
Posts: 385
Location: USA

PostPosted: Sun Jul 20, 2008 7:30 pm    Post subject:
Reply with quote

LWC wrote:

I meant my "Kill pop-up windows v2" filter.

Ahh...the ie meta charset issue.

LWC wrote:

Where does Proxomitron tell me it's a FLV file?

I didn't see anything that indicated it was an FLV file type.
When I opened the file in Notepad++, the magic bytes showed it to be an FLV file.

LWC wrote:

is there a better way to handle this page than give it a general bypass?

I suppose the best generic solution is to inject code only when filtering html.
The hard part is trying to figure out if your actually dealing with html or not.
But that's a topic best left to another thread.

You could use a header filter to disable web filtering for this url.
That way, at least your header filters would still work.

Or, you could modify your "Kill pop-up windows v2" filter:
Code:

[Patterns]
Name = "Inject Start Scripts"
Active = TRUE
Multi = TRUE
URL = "$TYPE(htm)"
Limit = 4096
Match = "$STOP()(^FLV[%01])(\s|)"
        "(<!DOCTYPE*> |)\0"
        "(\1(<meta * charset*> )\2|)"
Replace = "\0\2\r\n"
          "<!--//--><script src="http://local.ptron/WindowOpen.js">"
          "</script>\r\n\1"

The filter won't match and inject any scripts if the reply starts with FLV0x01.
If your injecting other "start" scripts, I'd add them to the replacement text.

If your injecting any "end" scripts, you'll proably need to do a conditional test.
Inject "end" scripts only if the "start" scripts were injected.

z12

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Mon Jul 21, 2008 9:21 am    Post subject:
Reply with quote

z12 wrote:
When I opened the file in Notepad++, the magic bytes showed it to be an FLV file.

But I thought whenever you open it directly, it becomes HTML?

Quote:
You could use a header filter to disable web filtering for this url. That way, at least your header filters would still work.

How do I do such a thing?

Back to top
View users profile Send private message
z12

Captain
Captain


Joined: Jul 17, 2002
Posts: 385
Location: USA

PostPosted: Mon Jul 21, 2008 11:31 am    Post subject:
Reply with quote

LWC wrote:

But I thought whenever you open it directly, it becomes HTML?


When I open the url directly via the browser, I get that html error page.
So instead I played a tune. Watching the log window, I saw the request.
I let the tune play to make sure I got the whole file, then stopped the player.
Searching the cache, I found the reply (over 3MB) then copied it to a temp directory.
With Notepad++ I used File>Open and selected the file in the temp directory.

LWC wrote:

Quote:
You could use a header filter to disable web filtering for this url. That way, at least your header filters would still work.

How do I do such a thing?

With the $FILTER command. There's an example in the help file.

For another example, here's a filter I use:
Code:

[HTTP headers]
In = TRUE
Out = FALSE
Key = "X-Filter: 1. Don't Filter local ptron (in)"
URL = "local.ptron/*"
Replace = "Web Filtering Disabled$FILTER(0)"


HTH
z12

Back to top
View users profile Send private message
LWC

Lieutenant
Lieutenant


Joined: Feb 13, 2004
Posts: 183


PostPosted: Mon Jul 21, 2008 4:27 pm    Post subject:
Reply with quote

I wish Proxomitron had (by default) a web-filters-only-bypass list. I bet most people don't have the header filters in mind anyway when they put an URL in the bypass list.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Proxomitron All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer