6 ms·

JShelter – An anti-malware browser extension

44 points by yewenjie 5y ago

1MachineElf 5y ago
Awesome tool and fills a growing niche. If you scroll down, you'll see it's supported in part by NLnet: https://nlnet.nl/ https://nlnet.nl/ I am really impressed by the amount of great technology projects they support.
- nuccy 5y ago
  For the Firefox there is a direct link to a Czech version of addons.mozilla.org, having English or auto-decting one [1] would be better. [1] https://addons.mozilla.org/firefox/addon/javascript-restrictor/ https://addons.mozilla.org/firefox/addon/javascript-restrict...
- nuccy 5y ago
  Indeed nice project. I wonder how rounding the timer in JS which is active for all levels above 1, would affect JS engines of sites. P.S. For the Firefox there is a direct link to a Czech version of addons.mozilla.org, having English or auto-decting one [1] would be better. [1] https://addons.mozilla.org/firefox/addon/javascript-restrictor/ https://addons.mozilla.org/firefox/addon/javascript-restrict...
oblak 5y ago
Not bad, though I am not giving up on NoScript any time soon. It's almost zero effort to me, even my wife has been trained to use it. All I had to do was force her to use common sense and deduct domain names when allowing stuff. It's been working great for about a decade. Good luck with this add on. Hopefully it won't be acquired by an ad agency like so many others have.
- thomzane 5y ago
  JShelter is not a replacement for NoScript. It is a complimentary tool partially developed by the NoScript dev.
Nezteb 5y ago
I'll be keeping an eye on this because it looks neat. Suggestion: Consolidate the websites/names. I see two: - JShelter: http://jshelter.org/ http://jshelter.org/ - JavaScript Restrictor: https://polcak.github.io/jsrestrictor/ https://polcak.github.io/jsrestrictor/ It was slightly off-putting to click on the JShelter Chrome link only to be greeted with a "different" extension. I assume the project was originally called "JavaScript Restrictor" and is undergoing a rename (which is fine), but I could see new users being wary of installing it because of this. Thanks for sharing!
spansoa 5y ago
Neat project. Disabling JS globally in something like uBlock Origin has been my goto solution for a while now. Now and then I have to whitelist a page and run some JS and oftentimes the page is just a blank white screen that doesn't tell the user they need JS to view the content. I take a risk doing that because you don't know if the page is laced with malware or a fingerprinting script, so this tool looks promising if it makes JS safer to use by messing with various JS APIs.
johnnyfived 5y ago
This looks really cool, unfortunately the UI window that appears when I click the extension is like 50 pixels wide for me and unusable.
- richij 5y ago
  me too :-(

44 points by yewenjie 5y ago

Awesome tool and fills a growing niche. If you scroll down, you'll see it's supported in part by NLnet: https://nlnet.nl/ https://nlnet.nl/ I am really impressed by the amount of great technology projects they support.

nuccy 5y ago
For the Firefox there is a direct link to a Czech version of addons.mozilla.org, having English or auto-decting one [1] would be better. [1] https://addons.mozilla.org/firefox/addon/javascript-restrictor/ https://addons.mozilla.org/firefox/addon/javascript-restrict...
nuccy 5y ago
Indeed nice project. I wonder how rounding the timer in JS which is active for all levels above 1, would affect JS engines of sites. P.S. For the Firefox there is a direct link to a Czech version of addons.mozilla.org, having English or auto-decting one [1] would be better. [1] https://addons.mozilla.org/firefox/addon/javascript-restrictor/ https://addons.mozilla.org/firefox/addon/javascript-restrict...

oblak 5y ago

Not bad, though I am not giving up on NoScript any time soon. It's almost zero effort to me, even my wife has been trained to use it. All I had to do was force her to use common sense and deduct domain names when allowing stuff. It's been working great for about a decade. Good luck with this add on. Hopefully it won't be acquired by an ad agency like so many others have.

thomzane 5y ago
JShelter is not a replacement for NoScript. It is a complimentary tool partially developed by the NoScript dev.

Nezteb 5y ago

I'll be keeping an eye on this because it looks neat. Suggestion: Consolidate the websites/names. I see two: - JShelter: http://jshelter.org/ http://jshelter.org/ - JavaScript Restrictor: https://polcak.github.io/jsrestrictor/ https://polcak.github.io/jsrestrictor/ It was slightly off-putting to click on the JShelter Chrome link only to be greeted with a "different" extension. I assume the project was originally called "JavaScript Restrictor" and is undergoing a rename (which is fine), but I could see new users being wary of installing it because of this. Thanks for sharing!

spansoa 5y ago

Neat project. Disabling JS globally in something like uBlock Origin has been my goto solution for a while now. Now and then I have to whitelist a page and run some JS and oftentimes the page is just a blank white screen that doesn't tell the user they need JS to view the content. I take a risk doing that because you don't know if the page is laced with malware or a fingerprinting script, so this tool looks promising if it makes JS safer to use by messing with various JS APIs.

johnnyfived 5y ago

This looks really cool, unfortunately the UI window that appears when I click the extension is like 50 pixels wide for me and unusable.

richij 5y ago
me too :-(