[fortepianissimo]

Ok how do you get these pesky flash out of my browser - OmniWeb 5.0, that is? I tried to right click on the ads in the hope to get the URL so I can block them. But the flash player insisted showing me a useless contextual menu instead.

Any workaround will be MUCH appreciated!

[Mike S.]

Originally posted by fortepianissimo:
Ok how do you get these pesky flash out of my browser - OmniWeb 5.0, that is? I tried to right click on the ads in the hope to get the URL so I can block them. But the flash player insisted showing me a useless contextual menu instead.

Any workaround will be MUCH appreciated!

Go into to OmniWeb's Ad Blocking Preferences, click the "Edit Blocked URLs list..." button and add .swf to the list.

[fortepianissimo]

Originally posted by Mike S.:
Go into to OmniWeb's Ad Blocking Preferences, click the "Edit Blocked URLs list..." button and add .swf to the list.

Yes I did that - I added

\.swf$

But it's not working. After looking at the page source I found all the flash is embedded in some javascript. I'll post it later if I find it appearing one more time.

[fortepianissimo]

Originally posted by fortepianissimo:
Yes I did that - I added

\.swf$

But it's not working. After looking at the page source I found all the flash is embedded in some javascript. I'll post it later if I find it appearing one more time.

How lucky I must be - here is the relevant HTML:

<!-- TF 468x60 JScript HORIZ NoPop code -->
<center><script language=javascript><!--
document.write('<scr'+'ipt language=javascript src="http://a.tribalfusion.com/j.ad?site=MacNNcom&adSpace=ROS&size=468x60 &type=horiz&pop=0&requestID='+((new Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');
//-->
</script>
<noscript>
<a href="http://a.tribalfusion.com/i.click?site=MacNNcom&adSpace=ROS&size=468 x60&requestID=76603862788078" target=_blank>
<img src="http://a.tribalfusion.com/i.ad?site=MacNNcom&adSpace=ROS&size=468x60 &requestID=76603862788078"
width=468 height=60 border=0 alt="Click Here"></a>
</noscript>
</center>



See how "<script>" is split into "<scr"+"ipt>"? Anyone has a clue what it is doing here?

Edit: This is relevant from what I can tell. I also added

\.tribalfusion\.com

But it's not blocking the flash either.

[fortepianissimo]

Originally posted by fortepianissimo:
How lucky I must be - here is the relevant HTML:

<!-- TF 468x60 JScript HORIZ NoPop code -->
<center><script language=javascript><!--
document.write('<scr'+'ipt language=javascript src="http://a.tribalfusion.com/j.ad?site=MacNNcom&adSpace=ROS&size=468x60 &type=horiz&pop=0&requestID='+((new Date()).getTime() % 2147483648) + Math.random()+'"></scr'+'ipt>');
//-->
</script>
<noscript>
<a href="http://a.tribalfusion.com/i.click?site=MacNNcom&adSpace=ROS&size=468 x60&requestID=76603862788078" target=_blank>
<img src="http://a.tribalfusion.com/i.ad?site=MacNNcom&adSpace=ROS&size=468x60 &requestID=76603862788078"
width=468 height=60 border=0 alt="Click Here"></a>
</noscript>
</center>

Ok I think I figured it out. After typing this into my browser:

http://a.tribalfusion.com/j.ad?site=...mp;requestID=1

(you can change the requestID= to a different integer)

I got back something like this:

document.write('<iframe src="http://www4.macnn.com/macnn/site/ads/vc-468.html" width=468 height=60 marginwidth=0 marginheight=0 hspace=0 vspace=0 frameborder=0 scrolling=no></iframe>');

Apparently this is a trick to obfuscate the real source of the ad payload. After adding this expression

\.macnn\.com/macnn/site/ads

So far I haven't seen any flash ads displayed.

[Neo.cmg]

Originally posted by fortepianissimo:
Ok I think I figured it out. After typing this into my browser:

http://a.tribalfusion.com/j.ad?site=...mp;requestID=1

(you can change the requestID= to a different integer)

I got back something like this:

document.write('<iframe src="http://www4.macnn.com/macnn/site/ads/vc-468.html" width=468 height=60 marginwidth=0 marginheight=0 hspace=0 vspace=0 frameborder=0 scrolling=no></iframe>');

Apparently this is a trick to obfuscate the real source of the ad payload. After adding this expression

\.macnn\.com/macnn/site/ads

So far I haven't seen any flash ads displayed.

I've tried entering \.swf$ and your aforementioned \.macnn\.com/macnn/site/ads strings and neither work. I still get flash content on macnn's site.

Neo.cmg

[Mike S.]

Forget all the regex style stuff and just use .swf

Just like I wrote it, .swf

I have no flash on either the forums or MacNN news pages, just the place holder indicating a blocked plug-in.

[Since EBCDIC]

for example, I'm actually looking at the incredibly annoying shoot-the-ipod flash ad above this input text box. Grrr!