Slashdot Mirror


Google Chrome Will Block Tab-Under Behavior (bleepingcomputer.com)

An anonymous reader writes: Google is working on blocking tab-under behavior in Chrome, according to a document seen by Bleeping Computer. For users unfamiliar with the jargon, Google considers tab-under behavior when an unsuspecting user is scrolling or clicking on a page, but the site duplicates the current page in another tab and shows an ad or a new website in the page the user was initially reading. Countless of website owners and advertisers have abused tab-unders to show ads and redirect users to unwanted sites, all for the sake of ad impressions and redirection fees. This demo site created by Google engineers that shows how tab-unders work. Earlier today, Google published a document detailing three ways it's currently looking at for dealing with tab-unders in Chrome. The current approved proposal is for the browser maker to block websites before opening a new tab, similar to the pop-up blocking mechanism. According to Chrome engineer Charles Harrison, the tab-under blocking feature will be supported on five of the six Blink platforms -- Windows, Mac, Linux, Chrome OS, and Android, but not Android WebView. Once the feature is ready, it will ship with Chrome Canary under its own option on the chrome://flags settings page.

66 comments

  1. I've never seen this by JohnFen · · Score: 1, Informative

    I've never seen "tab-unders". Thank you, NoScript!

    1. Re:I've never seen this by Anonymous Coward · · Score: 0

      Genuinely wonder what exactly is the point of NoScript? Chrome has had a native ability to disable javascript by default and easily whitelist or toggle js on/off from the address bar for ages

    2. Re:I've never seen this by JohnFen · · Score: 5, Informative

      NoScript does a lot more than just block Javascript. It blocks many types of web-based shenanigans, such as cross-site-scripting attacks, clickjacking, etc. And even if we're just talking about blocking Javascript, it is far more flexible than any of the things I've seen built into browsers.

      Chrome doesn't come close to being as good. There aren't even any extensions for Chrome that approaches it.

    3. Re:I've never seen this by arth1 · · Score: 1

      NoScript also doesn't work on many of the Mozilla based browsers.

      And it doesn't do much good in the case of tab-unders, because the original page won't serve you the new content that you wanted to go to, those are only served in the new tab. It can block the ads from appearing in the original tab, but you won't get the content you clicked to go to.

    4. Re:I've never seen this by JohnFen · · Score: 1

      Maybe I've just never hit a site that uses tab-unders, then, but I've not encountered a situation where I had to allow a new tab to happen in order to see content on the first tab. If I did, though, I'd just leave the site and never return -- so it's possible that I did encounter this and have simply forgotten.

    5. Re:I've never seen this by Anonymous Coward · · Score: 0

      NoScript also doesn't work on many of the Mozilla based browsers.

      And it doesn't do much good in the case of tab-unders, because the original page won't serve you the new content that you wanted to go to, those are only served in the new tab. It can block the ads from appearing in the original tab, but you won't get the content you clicked to go to.

      Works just fine in Pale Moon. Also I've never seen this "tab under" thing happen either.

    6. Re:I've never seen this by arth1 · · Score: 1

      Works just fine in Pale Moon.

      Only newer versions of Pale Moon that do not work in still supported OSes like Enterprise Linux 6. NoScript requires Pale Moon 27.2 or newer, and Pale Moon dropped support for anything not having glibc 2.17 or newer, despite not taking advantage of anything that actually requires 2.17 - their team is just too small to build for a lot of platforms.

    7. Re:I've never seen this by Anonymous Coward · · Score: 0

      NoScript also doesn't work on many of the Mozilla based browsers.

      Works just fine in Firefox, always has. Don't know what you're smoking.

    8. Re:I've never seen this by Neuronwelder · · Score: 2

      NoScript does at times, drive you crazy. But SOMETIMES I'm really, really glad I had it on.

    9. Re:I've never seen this by taintedkernel · · Score: 2

      I haven't used NoScript in awhile, but there's uBlock Origin, or the more likely preference: uMatrix (the advanced version), which I use & enjoy. One of the many benefits is it's availability in both Chrome & FF. It does take a bit of getting used to though!

    10. Re:I've never seen this by Anonymous Coward · · Score: 0

      Some/too many websites do, at times, drive you crazy, because they employ dependencies upon dependencies of JavaScript upon JavaScripts just to deliver some little content (so I abort and go to other domains). But ALWAYS I'm really, really glad I had it on, because it must've saved my ass so many times I didn't even realize something fishy was trying to go on.

      There, fixed that for you. And that remembers me (and, hopefully, some more readers) to donate something for this enormous value I get from one simple extension!

    11. Re:I've never seen this by gnick · · Score: 1

      Maybe I've just never hit a site that uses tab-unders... I'd just leave the site and never return...

      Piracy and porn.

      --
      He's getting rather old, but he's a good mouse.
    12. Re:I've never seen this by JohnFen · · Score: 1

      Well, I don't pirate, that's true enough.

    13. Re:I've never seen this by Bengie · · Score: 1

      I've been bitten a few times by Reddit. I assume fly-by-night ads substituting an ad once it gets validated and popular. One of the times I was reading a discussion on reddit about an issue I was researching when some tab-under ad loaded freaking porn on my work computer while I was at work.

    14. Re:I've never seen this by Anonymous Coward · · Score: 0

      You should be able to post comments thanks to NoScript

  2. Only LUDDITES hate App-Unders. by Anonymous Coward · · Score: 0, Troll

    Modern app appers know that only apps can app apps, and App-Unders are one of the appiest kinds of apps! Only LUDDITES hate App-Unders!

    Apps!

  3. xhamster by Anonymous Coward · · Score: 1

    xhamster does it. how do I know? errr a friend told me. honest.

    1. Re:xhamster by sexconker · · Score: 1

      I heard redtube does it too.

    2. Re:xhamster by war4peace · · Score: 2

      I'm that friend.

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    3. Re:xhamster by Anonymous Coward · · Score: 0

      I have never heard or seen of that site or pornhub or redtube so I have never (click, damn!) had that (click, damn) problem friend...

    4. Re:xhamster by Anonymous Coward · · Score: 0

      pornhub too

      I read it for the articles

    5. Re:xhamster by Anonymous Coward · · Score: 0

      Fortunately it only happens the first time, each new video you open in that session doesn't have that same result.

    6. Re:xhamster by Anonymous Coward · · Score: 0

      A friend told me that after three hours, it does it again.

    7. Re:xhamster by Anonymous Coward · · Score: 0

      Or 90 jack offs at the current rate.

    8. Re:xhamster by gnick · · Score: 1

      A friend told me that after three hours, it does it again.

      Or 90 jack offs at the current rate.

      You might get your first one out in 2 minutes. If you're gifted, maybe even your second 2 minutes later. But by #80 or so, it's hard to maintain that pace. Maybe I'm just getting old.

      --
      He's getting rather old, but he's a good mouse.
    9. Re:xhamster by Anonymous Coward · · Score: 0

      admit to exhibiting too much hubris. lets agree that Google is on the side of the chronic masturbator and get done with it.

    10. Re:xhamster by Anonymous Coward · · Score: 0

      xhamster, and other porn sites, are infamous for it. They also heavily engage in "pop under", which shoves a window for an on-line sex chat service under your browser. Even Pornhub is doing the "popunders" for the "Jasmin" chat service these days.

    11. Re:xhamster by Anonymous Coward · · Score: 0

      But by #80 or so, it's hard to maintain that pace. Maybe I'm just getting old.

      When I was a teenager I once did seven in one day. Now that I'm old it's more like one in seven days.

    12. Re:xhamster by sabbede · · Score: 1

      I too have heard that. Word is that very many different porn sites do it, though I wouldn't know personally.

  4. You know them from by Anonymous Coward · · Score: 0

    Pornhub

  5. You gave us that 'feature' in the first place! by Anonymous Coward · · Score: 0

    You gave us that 'feature' in the first place!

    And now you're the hero for removing it.

    Twice the credit. Awesome.

  6. And to think... by thevirtualcat · · Score: 5, Insightful

    And to think that ad companies wonder why ad blockers are so prevalent.

    "Gosh, we are purveyors of annoying content that nobody wants and we use every dirty trick in the book, including exploiting browser bugs, to get our content in front of faces. Why do people hate us so much?"

    1. Re:And to think... by Anonymous Coward · · Score: 1

      This post should be modded insightful not funny. Every time i have to browse the internet without an adblocker it is WORSE then i remember it. When slashdot had the outage and was only hosting the front page, i disabled ublock because i thought it was messing up the comments. Now slashdot has fucking hovering ads!?!? What the actual hell! It is not like 90% of the users already run adblock, make sure you punish people a bit more for disabling it. That is really going to incentivize people to whitelist the site. Last time i viewed the page without an adblocker it had a top banner and some ads in the side column.

  7. Finally by Anonymous Coward · · Score: 0

    I will not put that in any system I design unless I know better. It's inclusion would have to be known, all the rules of how it works would also have to be known. Therefore, when it breaks (if it does), I'd know how to think about the problem and fix it if I'm allowed to). Any deception creates deceit. I'm just imagining the index improvements.

    1. Re:Finally by vtcodger · · Score: 1

      You, sir, are no capitalist. Where would we be if everyone adopted your selfserving attitudes?

      --
      You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
  8. Please block "half page scrolling" ads.. by ebyrob · · Score: 2

    Like the ones I constantly run into here on slashdot. I try to scroll down the page away from the ad and it just stays there blocking the top-half of my screen. My vertical space is short enough already on a 16:9 monitor thank you!

    I've never seen these "tab-unders" in the wild but the "half page scroll" ads are very prevalent on slashdot and other sites paid by ad.doubleclick.net.

    1. Re:Please block "half page scrolling" ads.. by Anonymous Coward · · Score: 0

      I'm not very familiar with Chrome, but if you use Firefox and have AdBlockPlus and its helper extension Element Hiding Helper, you can use the latter to simply click on css elements you wish to block. I use it to block Youtube comments, videos on news sites that follow you when you scroll, and of course, ads.

    2. Re:Please block "half page scrolling" ads.. by Anonymous Coward · · Score: 0

      wait.. people have been blocking doubleclick.net for 15 years or more because of major nuisances, abuse and performance issues. You may well say that doubleclick was single-handedly responsible for the rise of the add-blocker phenomenon. And you still see their adds in 2017?

    3. Re:Please block "half page scrolling" ads.. by vtcodger · · Score: 1

      You can try downloading the hosts file from http://winhelp2002.mvps.org/ho... and installing it in the appropriate place -- e.g. /etc/hosts on most(?) Unix distributions. It'll bust a lot of stuff of course, but if you can live with that, mostly ads will be a thing of the past. You may need to update the hosts file from time to time.

      I'd suggest keeping a backup of the original hosts file (if any) and maybe of the last one you can live with as well.just in case the most recent one someday kills a site you can't live without.

      --
      You can't see ANYTHING from a car, You've got to get out of the goddamned contraption and walk...Edward Abbey
    4. Re:Please block "half page scrolling" ads.. by Anonymous Coward · · Score: 0

      Like the ones I constantly run into here on slashdot.

      Slashdot has ads?

    5. Re:Please block "half page scrolling" ads.. by ebyrob · · Score: 1

      Google bought doubleclick in 2007, but ya...I see my attempt at irony fell short. Chances are if you ever see ANY ad you're seeing Google doubleclick ads.

    6. Re:Please block "half page scrolling" ads.. by Anonymous Coward · · Score: 0

      Not sure if you're serious or spoofing APK but in case you're serious: Obviously hosts files won't block CSS elements.

  9. once AGAIN: disable javascript already! by Anonymous Coward · · Score: 1

    Sheesh, we have an absolutely fucking endless series of rude advertiser behavior enabled by javascript, constant behavioral surveillance, and another endless list of security exploits using javascript as an attack surface.

    95% of what pages use javascript for does not need it, and could use plain old HTML, or like in this case, simply should not be done at all. Anyone not disabling javascript by default by now (white list it in select cases) is a fool. Don't give control of your browser to random web pages.

    1. Re:once AGAIN: disable javascript already! by tepples · · Score: 1

      Anyone not disabling javascript by default by now (white list it in select cases) is a fool.

      Agreed. So how would the operator of a web application prove that it is trustworthy enough to become one of these "select cases"?

    2. Re:once AGAIN: disable javascript already! by Anonymous Coward · · Score: 0

      A good start is to be on this list:

      1. My bank.
      2. Half of the e-commerce site I use. (other half is 3rd party tracking shit).
      3. Maybe two or three other similar cases.

      Those have established trust via reputation.

      Not on that list? Then your javascript gets nowhere my browser.

    3. Re:once AGAIN: disable javascript already! by tepples · · Score: 1

      So other than banking and shopping, I take it you'd consider a web app to be as worthless as a native app that you can't use because it's for a different operating system. Am I right?

    4. Re:once AGAIN: disable javascript already! by Anonymous Coward · · Score: 0

      95% of what pages use javascript for does not need it, and could use plain old HTML, or like in this case, simply should not be done at all.

      Enjoy your page refreshes for literally any sort of interaction on a page.
      Not all websites are Wikipedia.

  10. Pease take some more "features" out by fyngyrz · · Score: 1

    I'll give the browser makers more credit when they stop websites from opening a huge opaque overlay over something I just started to read.

    Although I've blacklisted every website that does that I've hit so far, and don't see it so often any longer.

    We're starting to see some backlash, though. Preventing auto-play videos, invasive-unasked-for sound... those are great browser fixes.

    Oh, they can't monetize my visit without my cooperation? I really don't care. :)

    I still support websites that behave reasonably. I subscribe to Soylent, for instance. Used to describe to Slashdot, but after years of no improvements at all and considerable degradation of the site, I figured I could do something more useful with the fee, minor as it is. At least the people over at Soylent are trying to do a good job.

    --
    I've fallen off your lawn, and I can't get up.
    1. Re:Pease take some more "features" out by Paradise+Pete · · Score: 1

      when they stop websites from opening a huge opaque overlay over something I just started to read.

      I have this in my bookmarks bar. One click and those overlays vanish from the page. (I didn't write it, I think I found it here)

      javascript:(function()%7B(function%20()%20%7Bvar%20i%2C%20elements%20%3D%20document.querySelectorAll('body%20*')%3Bfor%20(i%20%3D%200%3B%20i%20%3C%20elements.length%3B%20i%2B%2B)%20%7Bif%20(getComputedStyle(elements%5Bi%5D).position%20%3D%3D%3D%20'fixed')%20%7Belements%5Bi%5D.parentNode.removeChild(elements%5Bi%5D)%3B%7D%7D%7D)()%7D)()

  11. Tab-unders are a new low by thegarbz · · Score: 3, Insightful

    They fundamentally break the browser behaviour. The problem is as soon as you close the advert to get back to your page you have now low the history. If you ended up there as a result of a search, screw you, no back key for you, start from the beginning.

    This isn't just an advert.
    This isn't just a quirky way of getting attention.
    This is fundamentally screwing with the web browser and to me is as offensive as a HTML5 pop-over that can't be cleared.

    1. Re:Tab-unders are a new low by mark-t · · Score: 2

      Or you can always open search result clicks in a new tab or window, and never worry about what the destination site will do to your history.

      I don't contest that it's bad, but you can still mitigate it easily. Personally, I generally prefer opening things in a new window when I know i am going to another website.

    2. Re:Tab-unders are a new low by makomk · · Score: 1

      The more obnoxious tab-unders also break the usual ways of opening a link in a new tab or window too, just to make sure you're thoroughly annoyed.

    3. Re:Tab-unders are a new low by thegarbz · · Score: 1

      Or you can always open search result clicks in a new tab or window

      You're making assumptions about which search engine is in use and where the pop-under sits. There are plenty of sites of questionable rapport which offer search and will happily then create a pop-under off a middle click.

      You just reminded me of what's even worse. By trapping the middle click it also breaks the open in new tab functionality.

  12. Cant we by DarkRookie · · Score: 0

    Cant we just remove teh JS that allows it to open new windows/tabs. I think that will solve a lot more problems.

    --
    The millennial that doesn't like most of the stuff designed for millennials.
  13. Countless of by Hognoxious · · Score: 1

    Countless of website owners and advertisers

    I'd stay anonymous if I wrote like that.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  14. Yes, Benson, yes. by tlambert · · Score: 1

    Yes, Benson, yes.

    Yes. Just Yes.

  15. Ironic by Anonymous Coward · · Score: 0

    Ironically adblock and other similar extensions do that already.
    I mean have you guys ever tried to browse the web without them? Its horrible, you can't even scroll a page without then 5 tabs opening.

    But you don't see google advocating or implementing those extensions.

  16. The jig is up by Anonymous Coward · · Score: 0

    No longer will you do this to me pornhd.com.

  17. Answered! by dohzer · · Score: 1

    I always wondered what that other tab was loading in the 0.4s it took me to spot and close it.

  18. Firefox isn't broken by Anonymous Coward · · Score: 0

    Both buttons on the demo site pop-under and it always shows the page that was visited.

  19. Great. by Thad+Boyd · · Score: 1

    Great. Now start treating modals the same way you treat popups: if they're not triggered by user activity, block them. (I know it's a little trickier than a popup, but you can monitor for behavior that modifies visibility, z-index, position, and opacity values.) And mobile browsers should ignore position: fixed entirely.

  20. pr0n by Anonymous Coward · · Score: 0

    pretty much only see this in porn

  21. Browser developers... by Anonymous Coward · · Score: 0

    Oh how I hate the attitude of browser developers: Implement some feature that can only be used to annoy and/or confuse users, then block it once advertisers start using it.

    A few weeks later, someone finds a way around the blocking code, then we'll need a new round of blocking.

    Instead, just don't implement these annoying features. And those you already did, remove them rather than blocking them. You can find a way around a block, but there is no way around a removed feature.

    Oh, and while we are at it. 15 years ago we were trying to block pop-unders, now we have tab-unders. Essentially the same thing, except now with tabs. Someone didn't learn the lesson the first time.

  22. Needs to be done to ALL Chrome Products. by Phoenix · · Score: 1

    I rarely see it on my Windows PC or my Linux Laptop. I do see it all the bloody time on my iPad and Android Phone.

    And it's not just that trick. I go to a site on my iPad and start reading an article and all of a sudden there's an ad taking up the entire screen and not giving me an option to close the ad short of closing the browser.

    I'd have to say that fully 2/3rds of the articles I want to read don't get read by me since I'm denied access to them thanks to the ads.

    And I'm just loving (sarcasm dripping) the fact that so many sites out there nag you about the fact that we're using an ad blocker. Well gee, if the ads were what they used to be, banner ads on the top and sides without pulling all sorts of fuckery, maybe we'd not use them.

    Cases in point. The banner ad that forms in the middle of the screen and blocks what you're there to read. The ads that can't load at the same damn time and jump the text back to the beginning of the article so you have to scroll to find your place...only to have ANOTHER ONE pulling the same bullshit. Or there are the ads that change the position of the screen in random directions so when you are trying to click on a link, it jumps to making you click on the ad instead.

    There are companies that I stopped using their products because they've annoyed me to no end as a result of their shenanigans. After one night of TV watching and listening to my Google Home looking up information on the Whopper over and over and over again...I've given up on using the damn thing and stopped giving BK my patronage.

    I know they want to be creative in how they market their product, but with me and many other people...they're going to find that they'll face a backlash where people avoid them.

    --
    -- Wiccan Army, 13th Airborne Division "We will not fly silently into the night"
  23. Under-tabs is for novices. by Anonymous Coward · · Score: 0

    They could just use javascript that dynamically creates a hidden/off-screen iframe which contains the nefarious content, no under tabs required, in fact the user will not even realise they are generating extra ad views without watching the requested traffic as it is all hidden out of sight.