[Privoxy-users] filter/blocklist

[Lee]

On 10/29/17, Robert Klemme <rklemme at klemmeconsulting.com> wrote:
> Hi Everyone,

Hi

> I am trying to create a Windows Live Tile Blocklist or Filter.  Not sure
> which is appropriate or how to write it.
>
> Here a few of the hosts I discovered  packet captures.
>
> travel.tile.appex.bing.com
> foodanddrink.tile.appex.bing.com
> tile-service.weather.microsoft.com
>
>
> Can anyone recommend a way to block this in my custom.action file ,

The first thing you have to do is get windows using privoxy.  You
probably need the command prompt window to be run as admin, so
  click start (or whatever that windows icon on the taskbar is called now),
  windows system,
  right click on command prompt, left click on more, run as administrator

from the command prompt window
  netsh winhttp set proxy 127.0.0.1:8118
      - tell windows to use privoxy
  netsh winhttp show proxy
      - to verify the change

Now you can filter windows requests with privoxy :)

> I'm not
> much of a programmer so I am not sure how to code this.  (*.tile*) I just
> embarrassed myself but you get the picture of what I am trying to do.

what you listed is fine.  I'm not sure how much of a difference it
actually makes in practice, but I put the trailing slash on domain
names.

> I would also like to block-as-image so I can replace their propaganda with
> a smiley face jpeg.  I think this can be done because it is only uses http
> when it pulls the pic.

so start with
  { +block{Live Tiles} +handle-as-image }

then add the domain names to be blocked:
  travel.tile.appex.bing.com/
  foodanddrink.tile.appex.bing.com/
  tile-service.weather.microsoft.com/

note that you can combine travel.tile.appex.bing.com and
foodanddrink.tile.appex.bing.com by using
  .tile.appex.bing.com/

the leading dot is important - it says to match any domain name ending
with "tile.appex.bing.com"

Personal preference again - unless you want to allow some live tiles,
I like the 'block everything ending with <whatever>' approach vs.
listing the specific sites you want blocked.

> Also, I know Live Tiles can be turned off on a per PC level and also a
> group policy but in a large BYOD environment there is no way to manage
> this.
>
> From a security standpoint, I think it will only be a matter of time until
> malvertising is served right through the Windows OS via Live Tiles.

+1
altho I took it a step further & uninstalled that stuff rather than
trying to block it.

Regards,
Lee