Some sites getting around Firefox's pops blocker?
 

I've noticed this over the past few days, but some sites (I'm not sure which ones) seem to be getting around Firefox's pop-up blocker. (Technically I guess they're pop-unders, since I don't notice them until I close the "main" Firefox window). I know it's not any spyware since I've run Spybot and AdAware to no avail. I have no extensions installed that deal with pop-ups. Anyone else notice sites getting around it, or is it a personal problem?

I've had the same problem with a few sites. I didn't have this problem before 1.0 came out, and I don't think I had any trouble with 1.0PR. I guess some people have found a way around it.

Yes, the fuckers are getting more clever. They are also crashing Safari on the Mac.

The Firefox devs are very interested in finding a way to block these. They are collecting data at Bug 253831 - sites with pop-ups that get past our pop-up blocker (don't post to Bugzilla unless you have something of substance to add; they don't like "me too" posts).

Also, you could install the Adblock extension, which should take care of it. Personally, I don't mind regular advertisements, as long as the popups go away.

EDIT: They know 'how' it is being done; the question is, how to stop it without breaking legitimate uses.

I've been noticing popunders starting to happen as well. I'll make sure to start keeping track of which sites are doing this.

Yeah, I've definately been noticed this as well. Not too happy about it, but than again, it's still not too bad.

So if Firefox no longer blocks all pop-ups then what is the advantage and what makes everyone think that there will be no security holes found in it? The more popular it gets the more it will be exploited by assholes.....

BTW, I'm an IE user who hasn't seen a pop-up in well over a year. :p
The only time that I have seen pop-ups are the few times that I've tried Firefox.

I have gotten them from Drudge, exbyte and a few other sites like exbyte (jokaroo, m90, etc.)

I have been going nuts with adblock, but it seems to be doing the trick if you disable all scripts on the page giving you pop-ups. It takes a few minutes to get them all, but they don't seem to be coming back.

I've only started getting these for about a week now, the exploit is quite new. Have you visited any of the sites near the end of the bug I mentioned? www.drudgereport.com and www.activewin.com were giving me popunders, but I've blocked images from fastclick.net, and I haven't seen one in a while.

And why Firefox over IE? I answered that in another thread, but the operating features and customizability are what I like. Find as you type, keyword searching, and tabbed browsing are the main things that I miss when I have to use IE.

They set cookies so that they only hit you once a day or so; you might see them again.

I visit drudge often and quite frankly I never woulda known that they have pop-ups unless someone told me. Just tried the second site, which I have never been to, and didn't receive a pop-up even after I browsed around a bit.

I just visited drudge and I got two popups even with the new IE AND google tool bar.

Why can't these fuckwads get a clue that if you have a popup blocker, you probably don't want to see their asshole ad, and if you do, you probably won't like their company very much for forcing it on you.

This isn't rocket science!

Just went to Drudge with Firefox and didn't get a pop up or pop under. I blocked the cookie and I use the adblock extension. Go figure.

I use Firefox and the Adblock extension and have not seen a popup ad since I installed Firefox.
I also have seen about 0.5% of the ads on the actual site as well because of the Adblock. Can you do that with IE? NOPE!

Heh.

http://img.photobucket.com/albums/v3...e/uf007635.gif

yep this seems to be affecting most pop-up blockers now. It's a pain in the ass but hopefully the devs figure it all out.
I have experienced a total of one pop-up since using firefox, and none since using adblock. (except for when i was trying to test drudge and activewin)

The ones I hate the most are the flash-based ads that show up on sites like ifilm.com and fandango.com. Luckily Adblock takes care of 99% of these after the first time I see them. I've also noticed that using Adblock liberally on sites like dilbert.com and any of the keenspot network sites can dramatically improve load times. For example, without adblock enabled, viewing the latest dilbert comic would often take minutes to load, sometimes even timing out before completing loading. Now that I block all the damn javascript and ads and stuff, it loads up no problem in under 5 seconds. Yay firefox!

Yeah, that is another advantage of Adblock. Not only do you not see the ads, they do not have to load at all.

I tried both of those sites (using Firefox) and didn't get a single popup.... and I don't have any extensions installed at all.

I switched to firefox for a few days then went back to IE..I just went to drudge and surfed around abit and didn't get any pop-up's..Can somebody please tell me what a pop-under is?

I use the google toolbar for a pop-up blocker and it works great, I have it set on medium..and very rarely get a pop-up and when i do it's just an advertisment from a legit site.

I also thought of what sixate stated above about the more people use firefox then the more security holes all those asshats are gonna find in it..And thought to myself, I am hearing a shitload about firefox lately..So i'm just gonna stick with IE and the google toolbar.

A pop-up is a child of the browser window you are visiting currently. It pops up above your currently website and sets the focus to itself (so that you then have to close it or click another window to interact with something else on your screen).

A pop-under is also a child of the current website and pops up, but then sets the current window back to the website you were viewing. You're guaranteed to at least see this one because you do have to close it to get rid of it. In a sense it is supposed to be "unobtrusive" and you only see it when you are closing a bunch of windows. In my opinion it is still just as annoying.

The difference between pop(ups|unders) and this new wave of advertisements, is that the new adverts use Dynamic HTML... you often see this in the form of advertisements that "float" above the current website but not in their own window. They'll often show up on the left hand side of the screen and move to the right waiting for you to click on a "Close" or "X" link near the advertisement to getr id of it.

In effect this is "completely legal" (in the sense of trying to fight it with a popup blocker) because it's not a pop(up|under) but simply fancy HTML.

I have Firefox 1.0.1 (just released) and the latest version of Adblock with G's filterset (http://www.geocities.com/pierceive/adblock/). I hardly see any advertisements, and it allows you to add and remove images at will (just right click them). If you have an issue and cannot see something you were meant to, you can always toggle Adblock (press CTRL-SHIFT-B) and reload the page. It also blocks Flash files (at your discretion of course).

See, I don't like using AdBlock because effectively you're stealing. Forget about the big powerhouse sites, smaller and more personal sites that I frequent depend on advertising for money. AdBlock kills that revenue for those personal sites.

Pop-ups, yeah it's stealing too if I block them, but they're a bit more intrusive than in-page advertising. If you've surfed the web for a few years like I have (wow, I'm old enough to say that), you develop a mental AdBlock and you learn to ignore advertising ;) :)

C'mon people...This is the classic FUD that *all* closed-source companies are spouting! Just because something is popular doesn't mean it will get cracked. Apache is the de-facto standard for unix (and a lot of windows) web servers, but you don't hear about Apache servers getting pwn3d do you? No! It's the less popular IIS server that is getting taken all the time. Why? Because it's fundamentally flawed, and Apache is not. Code can be written to be secure, whether it is popular or not. I'm not saying Firefox is perfect, but just because it's popular doesn't automatically mean that within a year it'll be just as riddled with problems as IE.

You can fiddle with Adblock to not block the advertising you want to see, or press CTRL-SHIFT-B to toggle it on and off at will.

I downloaded and installed Firefox 1.0.1 last night.

No change as of yet.

One of my homepages, Drudge, hits me with pop-ups everytime it opens (and sometimes when it reloads). It is getting rather annoying and is on its way to being removed from my homepage list.

I use adblock, but I keep getting pop-ups on Drudge.

Curious, do you happen to have that site in the Allowed Sites under the Tools>Options>Web Features>Block Popup Windows? You should check, you may have allowed that site by accident a long time ago. I'm using Firefox 1.0 and I checked out all the sites that were listed as having popups and not a single window popped up.

.

This is straight out of the mouth of Asa, one of the main Firefox developers. I've tested this out on my major sites, and I'm blocking the unwanted popups without affecting the requested popups on other sites. For now, it's a 'use at your own risk' kind of thing.
adot's notblog*: blocking those flash pop-unders with firefox:
If this breaks the functionality of some of your sites, set the preference back to 0, and post here or at Asa's blog to state where you have a problem.

Just did the fix, but I'll have to just run it through my normal web browsing to see if it works...

1 word: Active-X :)

Extensions and themes are nice too. Tabbed browsing, adblock, and other things I can't get with standard IE.

Heck im getting pop-up not pop-unders. www.cnn.com is one site that comes to mind. I'm gonna make a note of these sites and I just wont visit them anymore.

With the setting above, I get no popups at CNN (and I get the Popups Blocked icon). I'm not using Adblock, hosts files, or image blocking either, just the built-in popup blocker.

Same here.

I did the change and the pop-ups/unders I used to get, I don't get any more (at least so far).

How long before we need another fix?

I did the fix on my work computer this morning, so far so good, I'll have to try it on my home computer tonight and try it some more.