6 ms·
Cross-Browser NoScript Hits the Chrome Store
- ToFab123 8y ago<Regrettably, the additions and enhancements which resulted from this work have not picked up by Google. Maybe Microsoft does and push it upstream?
- peteretep 8y agoI’d been a keen user of this until a while ago when they completely overhauled the UI in a way I couldn’t figure out all, when I abandoned it.
- ttctciyf 8y agoI had the same reaction, but persevered with it, stared at it until I worked it out and decided it was really quite usable. Not that hard :) I still use it.
- skilled 8y agoDamn, I have to agree. The UI (Chrome) is horrendous.
- Severian 8y agoI was the same. I switched to uMatrix and found it to be more intuitive and fine-grained.
- rum3 8y agoThe new UI is absolutely horrible and confusing. I can't remember how many time I have disabled restrictions globally and always forgot to turn it off because the icon says nothing.
- kawera 8y agoMaybe you'll enjoy this one: https://github.com/maximelebreton/quick-javascript-switcher https://github.com/maximelebreton/quick-javascript-switcher. Works well.
- tcd 8y agoI don't get this. I also thought the new UI was horrible but actually, it makes a lot of sense. You have default, temp trusted, trusted or untrusted. It really is simple to figure out, if you can't, maybe you need an easier plugin that just toggles JS in general.
- paulryanrogers 8y agoWhile I agree the change in UI was disruptive, it shows more info and in a more accessible way than before. (At least once one takes the time to learn it.) If a simpler interface is preferred then it's already possible to blacklist JS in Chrome and enable it per-site by clicking to the left of the page address for the access privileges.
- DONT_BE_A_MORON 8y agois ANYONE on here talking about the massive problem with the major browsers forcing http-auditing into browsers??????????????????????????????????????????????
- howiroll 8y agoFYI, Noscript had a serious zero-day which runs js files with MIME type text/css.
- zamadatix 8y ago"FYI", so what am I supposed to do with this information? If software were perfect we wouldn't need solutions like this in the first place.
- howiroll 8y agoThe software is to block scripts, duh. Imagine sudo giving root access to anyone. That’s how severe the vulnerability was. This means there is a severe problem with the dev cycle of this software.
- oliwarner 8y agoRuns? You mean doesn't block?
- howiroll 8y agoYeah. I was wrong but if mime was set as "text/html;/json" full JS pwnage was possible. https://gist.github.com/x0rz/8198e8e22b1f70fddb9c815c1232b795 https://gist.github.com/x0rz/8198e8e22b1f70fddb9c815c1232b79...
- Causality1 8y agoIn my opinion NoScript is the single most powerful security tool for the home user. It's a shame they've rendered it nearly unusable with the new UI. I don't know why it's a trend with developers these days to turn readable menus into oversimplified buttons/icons. I have to rely on tooltips just to work my Gmail and that's ridiculous.
- amelius 8y ago> In my opinion NoScript is the single most powerful security tool for the home user Unfortunately, it is also a great tool for breaking websites ...
- Causality1 8y agoTrue, but that's what the whitelist is for. Browsers are so complex these days that visiting a website you've never heard of before may as well be you running a random executable. Will your browsers security hold up if the website is hostile? Probably, in the same way the security features of your OS and/or anti-malware software will probably keep you safe from a random malicious executable.
- giancarlostoro 8y agoI have ran malware on known sites due to faulty ads and some Java 0-day about 5 years ago. I never enabled Java in my browser again. I do wonder if having used NoScript would of saved me since it does block Java applets too.
- amelius 8y agoThe problem is that if you suffer from information-addiction, like most people nowadays do, the whitelist quickly becomes filled with every website out there.
- tomatotomato37 8y agoI've actually had the opposite problem, I have yet to make a habit of saving my noscript (now umatrix) settings, so any time-saving of eliminating slow scripts is wasted refreshing it three times trying to figure out which cdn is the important one; and trying to selectively enable the scripts of a video streaming site is even worse. Still worth having it though, especially when you go to traditionally sketchy download sites and see it have a cleaner UI than the apple homepage with just a single download button.
- Khaine 8y agoI wish NoScript would work with Safari. With Apple's commitment to privacy, they really need to lift their game with safari extension support.