React.js Conf 2016 - Lightning Talks - Elie Rotenberg

Meta Developers1 HN recommenders · 2016–2019
4K views · talk · dated · Uploaded 2016-02-26

A five-minute lightning talk from React.js Conf 2016 by Elie Rotenberg on protecting the DOM from tampering. It shows how React tree obfuscation (react-armor) can shuffle class names, tags and tree structure to defeat CSS-selector-based ad blocking.

Cited as the origin of react-armor style DOM obfuscation, and as a favourite short talk from the conference.

Watch on YouTube

4 comments from Hacker News

@iLoch2016 · in “React.js Conf 2016 [videos]”

My favourite talk was only 5 minutes long and came from Elie Rotenberg[0]. He demonstrated how React can be used to completely obfuscate the DOM tree. In practice it seems somewhat malicious to do this, however there may be some legitimate use cases too. [0] [VIDEO]

Strongly recommendsView on HN
@hokkos2016 · in “Facebook will force advertising on ad-blocking users”

Something like react-armor can make cryptographically unpredictable class name, tree structure and tag name obfuscation. But it won't be enough if the ad itself is not written with the same toolkit. [LINK] [VIDEO]

@hokkos2016 · in “Facebook will force advertising on ad-blocking users”

Or they can already do dom obfuscation like react-armor, it can make cryptographically unpredictable class name, tree structure and tag name obfuscation. [LINK] [VIDEO]

@elierotenberg2019 · in “How Facebook Avoids Ad Blockers”

It reminds me of a lightning talk I gave at ReactConf some time ago :) Basically forward-shuffling the component tree to produce HTML that will be really hard to match using CSS Selectors usually found in adblockers and other DOM-targeting scripts. Code: [LINK] Video: [VIDEO]