CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Google Sponsored links not filtered
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> Sidki - Proxomitron [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Mele20

Captain
Captain
Premium Member

Joined: Jun 06, 2002
Posts: 380

Premium

PostPosted: Mon Mar 24, 2008 7:11 am    Post subject: Google Sponsored links not filtered
Reply with quote

I'm seeing sponsored links on Google for the last several days. Not every search though. I've read that Google has changed something and most ad filters not just Proxo are not filtering on Google now. I'm using the Sept 2007 configs.




Sunday, March 23, 2008 21;05;12001.png
 Description:
 Filesize:  68.15 KB
 Viewed:  55 Time(s)

Sunday, March 23, 2008 21;05;12001.png


Back to top
View users profile Send private message
trainspotter

Trooper
Trooper


Joined: Mar 22, 2008
Posts: 12
Location: USA

PostPosted: Mon Mar 24, 2008 10:06 am    Post subject:
Reply with quote

Hi,

afaik this is a known issue, although I didn't get any sponsored link leaks yet (with the january beta).
Take a look at 42unites post. Didn't try the code myself but I have basically no doubt that it will work Smile

Back to top
View users profile Send private message
Mele20

Captain
Captain
Premium Member

Joined: Jun 06, 2002
Posts: 380

Premium

PostPosted: Mon Mar 24, 2008 10:40 am    Post subject:
Reply with quote

Thank you! I added the filter. So far, I am not seeing the Google ads. I had seen them every Google search after I posted my thread here. Earlier, I was seeing them sometimes but not all the time. So, I'm glad to have that filter.

Back to top
View users profile Send private message
trainspotter

Trooper
Trooper


Joined: Mar 22, 2008
Posts: 12
Location: USA

PostPosted: Mon Mar 24, 2008 12:36 pm    Post subject:
Reply with quote

Hey,
You're right. After reading your post I've tested it myself and noticed some strange things:

Using the .com google domain with en locales, I don't see any leaks (example)
Using the .com google domain with german (de) locales, I see leaks (example)
Using the .de google domain with german (de) locales, I don't see any leaks (example)

Seems the guys at google are tampering around with their code again. We'll wait and see..
Btw. 42unites code works here (for the moment), too.

Regards,
John

Back to top
View users profile Send private message
42unite

Corporal
Corporal


Joined: May 09, 2004
Posts: 57
Location: USA

PostPosted: Mon Mar 24, 2008 1:04 pm    Post subject:
Reply with quote

This is easy to fix.
The previous filter keys only on the "google.com" domain.
Same filter, just change ".com" to ".*" (without quotes).
The new filter works on all Google domains (google.*).

Code:

[Patterns]
Name = "Google Sponsored Links"
Active = TRUE
URL = "$TYPE(htm)www.google.*/"
Limit = 16384
Match = "<tr><td id=rhsline*<td id=rhspad height=0></td></tr>"
Replace = "<!-- Sponsored Links Removed -->$STOP()"


I have not seen any 'sponsored ads' with these filters.
The best way to provide an accurate filter is to post the offending section of HTML from the actual page.

Without the code it is sometimes difficult to create a valid filter.
If you should see 'sponsored ads' please try to post the applicable HTML and a link.

Back to top
View users profile Send private message
42unite

Corporal
Corporal


Joined: May 09, 2004
Posts: 57
Location: USA

PostPosted: Mon Mar 24, 2008 1:33 pm    Post subject:
Reply with quote

Also, Sidki's filter are written to key on "http://www.google...".

So if you land on another Google site (such as http://www.l.google...) the config set will not function properly.

If this occurs you could try the following change to the above filter and see if it hits effectively (it may not) -
From: URL = "$TYPE(htm)www.google.*/"
To: URL = "$TYPE(htm)www*.google.*/"

Back to top
View users profile Send private message
trainspotter

Trooper
Trooper


Joined: Mar 22, 2008
Posts: 12
Location: USA

PostPosted: Mon Mar 24, 2008 3:00 pm    Post subject:
Reply with quote

Thanks for the support, 42unite!

I'm sorry I didn't express myself clearly: I did my little "test" before I've added your filter. After adding your filter with the asterisk alteration I haven't seen any ads yet.
I've read about the l-google dns issues, but didn't happen to me so far.

Still the strange thing is that google seems to use different sponsor ads code depending on the users locale - at least that's what I figure after my test. Though I can't verify my assumption as I'm still at work Smile


Greets,
John

Back to top
View users profile Send private message
42unite

Corporal
Corporal


Joined: May 09, 2004
Posts: 57
Location: USA

PostPosted: Mon Mar 24, 2008 4:35 pm    Post subject:
Reply with quote

Quote:
I'm sorry I didn't express myself clearly: I did my little "test" before I've added your filter.
That's fine. No problem.
Quote:
After adding your filter with the asterisk alteration I haven't seen any ads yet.
Good to hear. Thanks for letting me know.

Creating a filter is a matter of determining where and what the responsible HTML page code is. Then, as in the case of this Google filter, simply deleting that section of code and replacing it with a remark, or nothing, or your own code.

The actual code could vary depending upon the possible effects of such things as locale, page reloads, other filter hits, other browser plugins/addons, etc. So a filter that works right now may not work in 10 minutes. That's why it's helpful to use other 'basic' filters as templates upon which to build your own.

Writing then playing with filters & reloading pages to view their effect is very instructional. Backup your config file before modding it.

Back to top
View users profile Send private message
Mele20

Captain
Captain
Premium Member

Joined: Jun 06, 2002
Posts: 380

Premium

PostPosted: Thu Mar 27, 2008 1:08 pm    Post subject:
Reply with quote

How come the filter doesn't stick? When I rebooted earlier today it was gone. I merged it from the clipboard. I noticed the same thing happened with some filters from GRC newsgroups. They disappeared when I rebooted. So, what am I doing wrong?

Back to top
View users profile Send private message
ProxFox

Proxomitron Host
Proxomitron Host


Joined: Nov 11, 2003
Posts: 940
Location: USA

PostPosted: Thu Mar 27, 2008 2:01 pm    Post subject:
Reply with quote

after merging the filters, you'll need to SAVE the config file...
after a merge, the filters can be "used", but they don't save into the .cfg file until manually saving...

also, i'm assuming you are merging to "default.cfg", 'cause that's what gets loaded at re-boot...


hth...

Back to top
View users profile Send private message
Mele20

Captain
Captain
Premium Member

Joined: Jun 06, 2002
Posts: 380

Premium

PostPosted: Fri Mar 28, 2008 6:50 am    Post subject:
Reply with quote

Hmmm...I did save I think. I know I saved the new config this second time I added the Google filter. But I haven't rebooted again. ( I have to shut down a virtual machine in order to reboot so I haven't yet).

I didn't merge to the default config. I merged to Sidki's Sept 2007 config. But it is not set as default. I just left Scott's orginal config as default.

Back to top
View users profile Send private message
trainspotter

Trooper
Trooper


Joined: Mar 22, 2008
Posts: 12
Location: USA

PostPosted: Fri Mar 28, 2008 2:57 pm    Post subject:
Reply with quote

Hi,

getting some 'sponsored ads leakage' now even though I use your filter, 42unite. The leaking doesn't appear often but might be reproduced by refreshing a certain search page, e.g.
However, couldn't reproduce the leakage with en locales. It only appears with the German locales.

Here's the sponsored ad's code:

Code:

<td height=25 align=center><font class=f size=-1>Anzeigen</font></td></tr><tr height=7><td>
<img width=1 height=1 alt=""></td></tr><tr><td nowrap onmouseover="return true">
<font size=-1>  <font size=+0><a id=an1 href=/aclk?sa=l&ai=BA6hzgQPtR8nKCpeonQP22r25Aer__CD2t678Av6m5AXwhA4QARgBOAFQyeK99_3_____
AWCVsveBlAegAeLQgv8DyAEBgAIBqQILQb9M43m6PtkDbl0iyasz_mg&num=1
&sig=AGiWqtzNVQxdnETFkSwG6KaRlOXIWqgJQw
&q=http://www.rockfanworld.com><b>Metallica</b> Fanshop</a></font><br>Große Auswahl an <b>Metallica</b> Fanstuff<br>Rares Vinyl + signierte Gitarren<br><span class=a>www.rockfanworld.com</span><br>  </font></td></tr>


I still don't consider myself experienced enough to write a filter that would be able to work on any occasion without breaking anything. Hope you can help me Smile

Cheers,
John

Back to top
View users profile Send private message
ProxFox

Proxomitron Host
Proxomitron Host


Joined: Nov 11, 2003
Posts: 940
Location: USA

PostPosted: Fri Mar 28, 2008 4:21 pm    Post subject:
Reply with quote

try this:

Code:
Name = "Google: Remove Sponsored Links Table (3.28.08)"
Active = TRUE
URL = "$TYPE(htm)www.google.com/"
Bounds = "$NEST(<table,</table>)"
Limit = 4096
Match = "<table cellspacing=$AV(0) cellpadding=$AV(0)"
        " width=$AV(30%) align=$AV(right)\1$STOP()"
Replace = "<!-- Sponsored Links Removed -->"


ie, the "contents" that 42unite's filter catches is contained within a table, so let's axe the whole TABLE...

(i don't know the ideal place for the $STOP(), just that i seem to see it more in the match field, not the replace field)


edit: found this in my archives, just bump the 25% up to 30% and it seems to still work -
Code:
Name = "Google: Adbar Hider w/ Reveal, v2.1 {Joel,MzM}"
Active = TRUE
Multi = TRUE
URL = "(www.|)google.com/search\?"
Limit = 64
Match = "(<table cellspacing=$AV(0) cellpadding=$AV(0)"
        " width=$AV(25%) align=$AV(right))\1"
        "&"
        "$SET(0=<div align=right style="right:10px;position:absolute;"
        " text-decoration:underline;font-size:8pt""
        " onClick="javascript:e=document.getElementById\('AdBar'\).style;"
        " e.display=\(e.display=='none'?)"
        "$STOP()"
Replace = "<!--[if IE]>\0'block':'none'\);">ads on/off</div><![endif]-->"
          "<![if ! IE]>\0'table':'none'\);">ads on/off</div><![endif]>"
          "\1 id=AdBar style="display:none;""

Back to top
View users profile Send private message
storm119

Corporal
Corporal


Joined: Apr 19, 2004
Posts: 52


PostPosted: Fri Mar 28, 2008 5:31 pm    Post subject:
Reply with quote

If one used sidki's config, to get rid the "Sponsored Links" just add this code to google-dark.css
(the .css file located at.........\html\sidki_h_2008-01-02\Google)

Code:
/* Sponsored Links  Removed */
#tpa1, #tpa2, #rhsline, #mbEnd { display: none !important; }


HTH

Back to top
View users profile Send private message Visit posters website
trainspotter

Trooper
Trooper


Joined: Mar 22, 2008
Posts: 12
Location: USA

PostPosted: Fri Mar 28, 2008 5:58 pm    Post subject:
Reply with quote

Wow, thanks for all the help guys.

@storm119: Your code didn't cause any change. Does it have to be in a certain position or just anywhere in the file?

@ProxFox: Your first code neither worked for me. But the second code with a domain and percent alteration did the trick, though the toggling mechanism, that I don't need anyway, doesn't work - so I've replaced it with a simple comment.
Thank you for sifting through your archives for me Smile

Regards,
John

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Sidki - Proxomitron All times are GMT
Goto page 1, 2  Next
Page 1 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer