Extra security... Firefox "script blocking" add-on

Karak567 · #1 05-29-2006, 08:52 PM

After speaking to a friend about the "attack" last night... this was recommended to me. Normally I'd post this in the computing forum, but due to recent events, I thought some people here may find it useful.

https://addons.mozilla.org/firefox/722/

"Extra protection for your Firefox: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree: Firefox is really safer with NoScript ;-)"

sok0 · #2 05-29-2006, 09:00 PM

Thanks!

jokerthief · #3 05-29-2006, 09:02 PM

Thanks.

When is it ok to allow scripts? When are they needed and when aren't they?

Ed Miller · #4 05-29-2006, 09:29 PM

Also, please if you use Firefox, upgrade to the latest version: 1.5.0.3.

Karak567 · #5 05-29-2006, 09:38 PM

[ QUOTE ]
Also, please if you use Firefox, upgrade to the latest version: 1.5.0.3.

[/ QUOTE ]

Was I safe if I had that installed last night when I clicked the link?

Phil153 · #6 05-29-2006, 10:05 PM

[ QUOTE ]
Thanks.

When is it ok to allow scripts? When are they needed and when aren't they?

[/ QUOTE ]
They're needed for a lot of things including video on youtube, break etc, flash games and movies, some menus, dynamic content like some news sites, etc. A lot of things will stop working when you use this extension until you specifically allow that site. It's OK to allow any major site, just have it turned on when surfing seedier sites and following unknown links.

scrub · #7 05-29-2006, 10:16 PM

[ QUOTE ]
After speaking to a friend about the "attack" last night... this was recommended to me. Normally I'd post this in the computing forum, but due to recent events, I thought some people here may find it useful.

https://addons.mozilla.org/firefox/722/

"Extra protection for your Firefox: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree: Firefox is really safer with NoScript ;-)"

[/ QUOTE ]

The problem with using NoScript is that it makes FF a lot less functional. I am pretty paranoid, but NoScript is too much of a hassle for me.

Then again, it's probably a must for people who aren't going to be extremely selective about the sites they visit.

scrub

sok0 · #8 05-29-2006, 11:11 PM

[ QUOTE ]
[ QUOTE ]
After speaking to a friend about the "attack" last night... this was recommended to me. Normally I'd post this in the computing forum, but due to recent events, I thought some people here may find it useful.

https://addons.mozilla.org/firefox/722/

"Extra protection for your Firefox: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree: Firefox is really safer with NoScript ;-)"

[/ QUOTE ]

The problem with using NoScript is that it makes FF a lot less functional. I am pretty paranoid, but NoScript is too much of a hassle for me.

Then again, it's probably a must for people who aren't going to be extremely selective about the sites they visit.

scrub

[/ QUOTE ]

When using NoScript there is an added context menu to the right click that allows you to allow specifc domains that NoScript blocked.

sublime · #9 05-29-2006, 11:14 PM

[ QUOTE ]
Also, please if you use Firefox, upgrade to the latest version: 1.5.0.3.

[/ QUOTE ]

how do you tell what version you are running?

pankwindu · #10 05-29-2006, 11:16 PM

[ QUOTE ]
The problem with using NoScript is that it makes FF a lot less functional. I am pretty paranoid, but NoScript is too much of a hassle for me.

[/ QUOTE ]
I'd encourage interested users not to let the hassle factor scare you away. It's two clicks on the first visit to any particular site to allow scripting for that site (set it and forget it). After a couple weeks of browsing you pretty much have all your favorite sites set up correctly, while new unknown sites you encounter will still have their scripts blocked.