3 ms·

I did do this with no script and just allow websites I trust but it is a massive chore to keep everything working that I've given up

mountain_peak 5y ago
About 10 years ago, I was in a meeting with our security czar and I asked him what he was 'fiddling' around with in his browser toolbar. He replied, "NoScript. Highly recommended." Ever since then, I've become adept at picking out the 'minimum' amount of JS required to enable as much website functionality as I require and don't think about it much anymore (unless I'm visiting a new site). Highly recommended!
- vorticalbox 5y ago
  I might start using it again get over that learning curve so to speak
- sumtechguy 5y ago
  I run in the mode of deny everything. And it is annoying. If I whitelisted it probably would be a lot easier. I think there are maybe 2 sites where I did that. I have gotten pretty good at picking out the bare min too. But every once and awhile you have to pull out the 'allow all' just to get a site to work. Usually it is some sort of redirect and the redirect is doing some weird bit of JS and by the time you get to it it has already failed and the GUI has no idea what to show you. My thinking of 'deny all' is something like facebook where everyone seems to like to embed little bits into their pages. But I used to also use facebook. So if I made it work for one I would accidently make it work when I did not want it to on external sites. I have been using it like this for so long I hardly even notice it anymore though. But that is just me. If I give this sort of solution to anyone I usually just give them an adblocker. That gets most of the silly things.
mountain_peak 5y ago
Definitely curious about the negative reaction to NoScript - I did some digging and there appears to have been (or still is?) some controversy around the NoScript author displaying 'dubious' ads? Not sure I've even seen a NoScript-injected ad, but I'd definitely be interested in why HN doesn't like recommend it anymore. One commenter on an older HN thread said that all script blockers eventually 'give in' to some form of monetary gain in exchange for ads - I wasn't aware that NoScript was in that category.

mountain_peak 5y ago

About 10 years ago, I was in a meeting with our security czar and I asked him what he was 'fiddling' around with in his browser toolbar. He replied, "NoScript. Highly recommended." Ever since then, I've become adept at picking out the 'minimum' amount of JS required to enable as much website functionality as I require and don't think about it much anymore (unless I'm visiting a new site). Highly recommended!

vorticalbox 5y ago
I might start using it again get over that learning curve so to speak
sumtechguy 5y ago
I run in the mode of deny everything. And it is annoying. If I whitelisted it probably would be a lot easier. I think there are maybe 2 sites where I did that. I have gotten pretty good at picking out the bare min too. But every once and awhile you have to pull out the 'allow all' just to get a site to work. Usually it is some sort of redirect and the redirect is doing some weird bit of JS and by the time you get to it it has already failed and the GUI has no idea what to show you. My thinking of 'deny all' is something like facebook where everyone seems to like to embed little bits into their pages. But I used to also use facebook. So if I made it work for one I would accidently make it work when I did not want it to on external sites. I have been using it like this for so long I hardly even notice it anymore though. But that is just me. If I give this sort of solution to anyone I usually just give them an adblocker. That gets most of the silly things.

mountain_peak 5y ago

Definitely curious about the negative reaction to NoScript - I did some digging and there appears to have been (or still is?) some controversy around the NoScript author displaying 'dubious' ads? Not sure I've even seen a NoScript-injected ad, but I'd definitely be interested in why HN doesn't like recommend it anymore. One commenter on an older HN thread said that all script blockers eventually 'give in' to some form of monetary gain in exchange for ads - I wasn't aware that NoScript was in that category.