HackerTube

React.js Conf 2016 - Lightning Talks - Elie Rotenberg

Meta Developers1 HN recommender · recommended in 1 month, 2016–2019
YouTube
talk · intermediate · 2016–2019 on HN

A five-minute lightning talk from React.js Conf 2016 by Elie Rotenberg on protecting the DOM from tampering. It shows how React tree obfuscation (react-armor) can shuffle class names, tags and tree structure to defeat CSS-selector-based ad blocking.

Cited as the origin of react-armor style DOM obfuscation, and as a favourite short talk from the conference.

4 comments from Hacker News

@iLoch2016-02 · in “React.js Conf 2016 [videos]”

My favourite talk was only 5 minutes long and came from Elie Rotenberg[0]. He demonstrated how React can be used to completely obfuscate the DOM tree. In practice it seems somewhat malicious to do this, however there may be some legitimate use cases too. [0] ▶ this video

Strongly recommends View on HN
@elierotenberg2019-12 · in “How Facebook Avoids Ad Blockers”

It reminds me of a lightning talk I gave at ReactConf some time ago :) Basically forward-shuffling the component tree to produce HTML that will be really hard to match using CSS Selectors usually found in adblockers and other DOM-targeting scripts. Code: link Video: ▶ this video

@hokkos2016-08 · in “Facebook will force advertising on ad-blocking users”

Something like react-armor can make cryptographically unpredictable class name, tree structure and tag name obfuscation. But it won't be enough if the ad itself is not written with the same toolkit. link ▶ this video

@hokkos2016-08 · in “Facebook will force advertising on ad-blocking users”

Or they can already do dom obfuscation like react-armor, it can make cryptographically unpredictable class name, tree structure and tag name obfuscation. link ▶ this video