5 ms·

Another user here, and things weren't so smooth. Everytime you reach a new website you'll need to change rules and reload it. It's ok if you're always going to

by rakoo 6y ago

Another user here, and things weren't so smooth. Everytime you reach a new website you'll need to change rules and reload it. It's ok if you're always going to the same sites, but if you always discover new places (and I believe HN participates in that) it's a constant weight to lift. Always useful, but still not natural IME.

dylan604 6y ago
It gets a lot easier if you only allow self-hosted JS. Block any JS loaded from a domain other than the one you are actually visiting. If the site I am visiting cannot function properly from self-hosted JS, then I move right along. It has to be a webiste I'm really interested in for me to even consider allowing 3rd party JS.
smittywerben 6y ago
I've been whitelisting JavaScript since No-Script was new. I've used uMatrix recently but with it's end-of-development[0] I am considering switching back. I grew tired of having some shitty virus dropped to %appdata% for the N-th time loading a web page, exempli gratia [1] It's gotten a lot more annoying the last several years with 5mb webpages. Backing up the whitelist saves a lot of time. For perspective, I use 4 separate profiles (--user-data-dir) listed in descending order of how annoying they are for me to use. 1). School browser: Chrome + uBlock origin 2). Shopping/low security (when the payment processor is an iFrame and I don't want to refresh...): Firefox + uBlock origin + CanvasBlocker 3). General browsing like browsing Google or YouTube: Chrome + uBlock Origin + uMatrix 4). VPN browser: Chrome + uBlock origin + uMatrix + CookieAutoDelete + VPN extension I've gone from 2 browsers (Firefox + IE6) to 4 browsers (Firefox, Chrome1, Chrome2, Chrome3). By 2030 I'll be running 16 browsers in a virtual machine on a remote server that I connect to with my browser browser. [0] https://www.ghacks.net/2020/09/20/umatrix-development-has-ended/ https://www.ghacks.net/2020/09/20/umatrix-development-has-en... [1] http://forums.mozillazine.org/viewtopic.php?f=38&t=368230 http://forums.mozillazine.org/viewtopic.php?f=38&t=368230 (2006)

by rakoo 6y ago

dylan604 6y ago

It gets a lot easier if you only allow self-hosted JS. Block any JS loaded from a domain other than the one you are actually visiting. If the site I am visiting cannot function properly from self-hosted JS, then I move right along. It has to be a webiste I'm really interested in for me to even consider allowing 3rd party JS.

smittywerben 6y ago

I've been whitelisting JavaScript since No-Script was new. I've used uMatrix recently but with it's end-of-development[0] I am considering switching back. I grew tired of having some shitty virus dropped to %appdata% for the N-th time loading a web page, exempli gratia [1] It's gotten a lot more annoying the last several years with 5mb webpages. Backing up the whitelist saves a lot of time. For perspective, I use 4 separate profiles (--user-data-dir) listed in descending order of how annoying they are for me to use. 1). School browser: Chrome + uBlock origin 2). Shopping/low security (when the payment processor is an iFrame and I don't want to refresh...): Firefox + uBlock origin + CanvasBlocker 3). General browsing like browsing Google or YouTube: Chrome + uBlock Origin + uMatrix 4). VPN browser: Chrome + uBlock origin + uMatrix + CookieAutoDelete + VPN extension I've gone from 2 browsers (Firefox + IE6) to 4 browsers (Firefox, Chrome1, Chrome2, Chrome3). By 2030 I'll be running 16 browsers in a virtual machine on a remote server that I connect to with my browser browser. [0] https://www.ghacks.net/2020/09/20/umatrix-development-has-ended/ https://www.ghacks.net/2020/09/20/umatrix-development-has-en... [1] http://forums.mozillazine.org/viewtopic.php?f=38&t=368230 http://forums.mozillazine.org/viewtopic.php?f=38&t=368230 (2006)