According to Grapheneos mod on Grapheneos discuss, the attack is unpreventable on vanadium (if I’m reading this right):
"Reducing the number of ads by blocking known patterns does not completely eliminate ads or especially overall third party content. Third party content can also be included server side.
Vanadium has default enabled ad blocking so adding DNS filtering won’t generally improve much for the default browser. The in-browser filtering can block more than DNS filtering."
As I understand it, the whole supposed reasoning for Vanadium to not have a strict addblocker (like Mozilla) is so that it will be identified by internet systems to appear as chromium and move smoother. I find more sites work on vanadium (for me) than on ironfox.
But now it seems all JavaScript advertisemens are a liability.
Are we at the point where we need a set up where java should almost always be off?
This is why extensions like noscript are essential
Came here to say this, no script slows me down sometimes, but I’m sure it saved me a lot more than it’s inconvenience me, especially with this no click bullshit going around.