3 ms·

That treats the symptom, not the problem.

• beagle3 9y ago
  uMatrix is defense in depth. They could solve the problem today, and tomorrow a new CircleCI programmer/marketer/CEO would decide that, in fact, they do care more about analytics than about user's secrecy, and revert this change. By installing uMatrix and not approving these things, you are (a) reducing the probability that a mistake, misaligned incentives, etc, would harm you, and (b) get a notification that there's something you wish to block. uMatrix IS part of the real solution. The other part is avoiding providers whose security standards are not up to yours.
  • 45h34jh53k4j 9y ago
    Its a real solution, for YOU personally. I use and love umatrix (whitelisting ALL js/content by hand on all domains). We need to consider the good of the many, and client side solutions like umatrix are not a solution for the many.
• dom0 9y ago
  Good security does generally not rely on a single measure. The service provider not doing this in the first place is good, but the user (also) having a second line of defense is objectively better, although it may incentivize poor behaviour of SPs.