3 ms·
Yikes. I thought the point of Tor was uncompromising security? This is going to bite some less-experienced people in the ass.
by seanw444 4y ago
Yikes. I thought the point of Tor was uncompromising security? This is going to bite some less-experienced people in the ass.
- Scoundreller 4y agoIt has. The NoScript approach is dumb because it easily supports temporary and permanent white-listing of sites, which is agreeable to many (but still problematic depending on what your risk profile). With NoScript’s current approach, you get ruined when your JavaScript-free-optimized starts sending you nasty JavaScript.
- CommitSyn 4y agoJavaScript used to be disabled by default but too many users were complaining about pages not working. It's not very useful if you're a CFO trying to leak financial documents to a journalist but the website won't work. Tech-literate people use JavaScript.enabled=false in about:config.
- staringback 4y agoYou don't even need to use about:config, it is as simple as setting Security level to "Highest" using the button on the toolbar