3 ms·

I only have so many CPUs, and I visit more websites than that.

lsbehe 4y ago
Consider disabling javascript on websites by default and only allowing it on those that you trust. e.g. uBlock origin has that built in. You'd be surprised how much still works perfectly fine and of cause, which sites break for no good reason.
- hgazx 4y ago
  I want an extension that disables JavaScript by default and then allows me to enable and disable JavaScript for the current site that I’m visiting (and all of its dependencies; I don’t want to deal with enabling it also for its cdns etc) with only one click and then remembers my setting. Does that exist?
  - simcop2387 4y ago
    Umatrix from the author of ublock origin can do this. Not with a single click (it'll take two, one to enable and one to tell it to remember) but it's very close. https://addons.mozilla.org/en-US/firefox/addon/umatrix/ https://addons.mozilla.org/en-US/firefox/addon/umatrix/
    - dredmorbius 4y ago
      Clarifying, for those unfamiliar with it: uMatrix permits enabling or disabling JS (and other website features: images, CSS, media, frames, XSS, ...) by domain or subdomain, including default allow/deny permissions should you choose. You can also temporarily enable or disable specific permissions, and save those changes permanently should you choose. It's fiddly, but good fiddly.
  - boring_twenties 4y ago
    NoScript used to do it in 1 click. Now that it's a Web Extension, it takes two.
  - ajvs 4y ago
    You can do that in uBlock Origin, just enable advanced mode then you can block 1st + 3rd party scripts across all domains in two clicks..
    - LargoLasskhyfv 4y ago
      https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-...
jvanderbot 4y ago
This actually doesn't make sense. Any trusted code can absolutely run on a trusted processor, and the usual timesharing methods will handle your stackoverflow tabs.
- tedunangst 4y ago
  So you use the same password for SO and HN?
  - jvanderbot 4y ago
    I have no idea what that means relative to this conversation. Either I'm out of my depth or we're talking past each other. Either way, no big deal.
    - tedunangst 4y ago
      If you use different passwords, you must believe they are in different trust zones, and the usual time sharing methods won't work, in light of this and many other attacks. You will need separate CPUs as suggested by rayiner.
      - idle_zealot 4y ago
        You can run trusted code on one processor and untrusted on another. The untrusted processor must not perform speculative execution. It'd be slow but should solve the presented conundrum.
        czinck 4y ago
        Their point is untrusted code can still have private info (I don't want a random website to be able to steal my private key or my info like credit cards or password in other tabs), so you need a new core for each website, which is obviously impractical.
        4y ago

Consider disabling javascript on websites by default and only allowing it on those that you trust. e.g. uBlock origin has that built in. You'd be surprised how much still works perfectly fine and of cause, which sites break for no good reason.

hgazx 4y ago
I want an extension that disables JavaScript by default and then allows me to enable and disable JavaScript for the current site that I’m visiting (and all of its dependencies; I don’t want to deal with enabling it also for its cdns etc) with only one click and then remembers my setting. Does that exist?
- simcop2387 4y ago
  Umatrix from the author of ublock origin can do this. Not with a single click (it'll take two, one to enable and one to tell it to remember) but it's very close. https://addons.mozilla.org/en-US/firefox/addon/umatrix/ https://addons.mozilla.org/en-US/firefox/addon/umatrix/
  - dredmorbius 4y ago
    Clarifying, for those unfamiliar with it: uMatrix permits enabling or disabling JS (and other website features: images, CSS, media, frames, XSS, ...) by domain or subdomain, including default allow/deny permissions should you choose. You can also temporarily enable or disable specific permissions, and save those changes permanently should you choose. It's fiddly, but good fiddly.
- boring_twenties 4y ago
  NoScript used to do it in 1 click. Now that it's a Web Extension, it takes two.
- ajvs 4y ago
  You can do that in uBlock Origin, just enable advanced mode then you can block 1st + 3rd party scripts across all domains in two clicks..
  - LargoLasskhyfv 4y ago
    https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-scripting https://github.com/gorhill/uBlock/wiki/Per-site-switches#no-...

jvanderbot 4y ago

This actually doesn't make sense. Any trusted code can absolutely run on a trusted processor, and the usual timesharing methods will handle your stackoverflow tabs.

tedunangst 4y ago
So you use the same password for SO and HN?
- jvanderbot 4y ago
  I have no idea what that means relative to this conversation. Either I'm out of my depth or we're talking past each other. Either way, no big deal.
  - tedunangst 4y ago
    If you use different passwords, you must believe they are in different trust zones, and the usual time sharing methods won't work, in light of this and many other attacks. You will need separate CPUs as suggested by rayiner.
    - idle_zealot 4y ago
      You can run trusted code on one processor and untrusted on another. The untrusted processor must not perform speculative execution. It'd be slow but should solve the presented conundrum.
      - czinck 4y ago
        Their point is untrusted code can still have private info (I don't want a random website to be able to steal my private key or my info like credit cards or password in other tabs), so you need a new core for each website, which is obviously impractical.
        4y ago