Comments on: Firefox NoScript Extension

By: IO01

IO01 — Tue, 20 Jan 2009 09:10:04 +0000

What about reading the NoScript FAQ?

It looks like Bloglines is not exactly "every site", and the fix is pretty easy.

If you're still wondering why people hating UAC do love NoScript, that's because NoScript never stops you with a blocking prompt and you can always tweak it at your preferred security level.

By: Tyler Reguly

Tyler Reguly — Mon, 19 Jan 2009 14:20:06 +0000

Thanks for the link to the FaQ…

As for why people hate UAC and love NoScript… I don't know how valid of a reason that is… NoScript may not be a full "block" but it does hurt page rendering and page execution and you can tweak UAC via secpol.msc (on higher end versions of Vista) and via regedit (HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem) on any version of Vista.

By: NuLL

NuLL — Mon, 11 Aug 2008 09:38:12 +0000

The point of no script is to stop the execution of scripts by doing this you protect your self against xss and other exploits that my be used in web pages. I would rather deny then decide to allow a script and have to reload the page then lose personal data like user names and password to xss exploits. This is also more convenient then havening to enable/disable these scripts in the options of firefox. I would also like to say I am not to crazy about highly scripted web site the more complex something is the room for error, there is something to be said for simplicity.

By: Henrik

Henrik — Mon, 13 Aug 2007 22:13:34 +0000

There is not a problem with no script. The problem is that not all sites follow the global standard, but some webdesigner follow the standard Microsoft is trying to set. I have a masters degree in computer systems engineering and I can ensure you that software developers with respect for themselves all use firefox, which is the most secure browser on the marked, and no script function as it should. It is more likely that you ended up at a site, that was not properly designed. And you should never allow global scriptet, because you thereby allow script to execute code on your maschine, and thereby you will be an easy attack for spyware and virus.

Regards
Henrik
M.Sc.Eng.

By: Tyler Reguly

Tyler Reguly — Sat, 21 Jul 2007 18:13:26 +0000

Thanks for the link to the FaQ…

As for why people hate UAC and love NoScript… I don’t know how valid of a reason that is… NoScript may not be a full “block” but it does hurt page rendering and page execution and you can tweak UAC via secpol.msc (on higher end versions of Vista) and via regedit (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System) on any version of Vista.

By: IO01

IO01 — Sat, 21 Jul 2007 11:55:11 +0000

What about reading the NoScript FAQ?

http://noscript.net/faq#qa3_13

It looks like Bloglines is not exactly “every site”, and the fix is pretty easy.

If you’re still wondering why people hating UAC do love NoScript, that’s because NoScript never stops you with a blocking prompt and you can always tweak it at your preferred security level.