NotScript, a Chrome Extension

General discussion about the NoScript extension for Firefox

NotScript, a Chrome Extension

Postby Scott(0) » Thu Apr 28, 2011 6:22 pm

There's a new NoScript like extension out for Chrome called NotScript. Before installing it I'm interested to know your thoughts on it.

Thanks for a great product.

NotScript Extension > https://chrome.google.com/extensions/de ... kcfn?hl=en


Scott
Mozilla/5.0 (Windows NT 6.1; rv:2.0) Gecko/20100101 Firefox/4.0
Scott(0)
 
Posts: 4
Joined: Fri Jun 04, 2010 8:08 pm

Re: NotScript, a Chrome Extension

Postby Giorgio Maone » Thu Apr 28, 2011 6:33 pm

Scott(0) wrote: I'm interested to know your thoughts on it.

Its author is honest when he writes:
NotScripts home page wrote:NotScripts is inspired by the “NoScript” addon for Firefox (http://noscript.net) and seeks to emulate it within the limitations of the Google Chrome extensions API. It is not affiliated with “NoScript“, I just happen to like it’s functionality.


Due to persisting Chrome/Chromium/Webkit limitations, any clone of NoScript cannot be as complete and reliable as the original.
If/when these limitations were removed, I'd be happy to work on a porting of the one and only NoScript.
In other words, the gist of what I wrote here still stands.
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0
User avatar
Giorgio Maone
Site Admin
 
Posts: 7328
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: NotScript, a Chrome Extension

Postby GµårÐïåñ » Thu Apr 28, 2011 8:52 pm

Its a minimally effective tool that doesn't really provide the security and features of NoScript and should not be relied upon as a NoScript replacement AT ALL. Giorgio may be nice and not say it, but don't put your trust in it as you would NoScript, you will be sorely disappointed. In fact, the extension has not been updated for a long while (as of the last time I looked) and it doesn't use any useful or effective API to do what it claims, it rather uses CSS and some other HTML tools to "hide" or interfere with things, the content is still loaded. Either intentionally or simply by incompetence, Google has failed to provide a complete and effective API to accomplish what NoScript does and that's probably motivated by their desire for money and ability to track and gather information on people and probably will not happen anytime soon, so much for "do no harm".
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
[ Major's Blog ] .:. [ Security Pack ] .:. [ Productivity ]
Mozilla/6.9 (en-US; rv:6.9.6.9) Gecko/66666666 Firefox/6.6.6
User avatar
GµårÐïåñ
Lieutenant Colonel
 
Posts: 2923
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA

Re: NotScript, a Chrome Extension

Postby Scott(0) » Fri Apr 29, 2011 4:37 am

Thanks for the replies.
Mozilla/5.0 (Windows NT 6.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Scott(0)
 
Posts: 4
Joined: Fri Jun 04, 2010 8:08 pm

Re: NotScript, a Chrome Extension

Postby GµårÐïåñ » Fri Apr 29, 2011 6:30 pm

Scott(0) wrote:Thanks for the replies.

You are welcome, just wanted you to walk into this with your eyes open, that's all. The worst thing one can suffer is a false sense of security. Good luck.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
[ Major's Blog ] .:. [ Security Pack ] .:. [ Productivity ]
Mozilla/6.9 (en-US; rv:6.9.6.9) Gecko/66666666 Firefox/6.6.6
User avatar
GµårÐïåñ
Lieutenant Colonel
 
Posts: 2923
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA

Re: NotScript, a Chrome Extension

Postby nzpossum » Sun May 01, 2011 11:44 am

Will this take care of the problem in Chrome

http://code.google.com/chrome/extension ... quest.html
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.60 Safari/534.24
nzpossum
 
Posts: 6
Joined: Tue Nov 24, 2009 11:56 pm

Re: NotScript, a Chrome Extension

Postby Giorgio Maone » Sun May 01, 2011 1:58 pm

nzpossum wrote:Will this take care of the problem in Chrome

http://code.google.com/chrome/extension ... quest.html

Only partially, since no API is provided to control inline scripting.
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
User avatar
Giorgio Maone
Site Admin
 
Posts: 7328
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: NotScript, a Chrome Extension

Postby nzpossum » Thu Jun 09, 2011 10:46 pm

Giorgio Maone wrote:
nzpossum wrote:Will this take care of the problem in Chrome

http://code.google.com/chrome/extension ... quest.html

Only partially, since no API is provided to control inline scripting.


Does this brand new API provide inline script blocking

http://code.google.com/chrome/extension ... tings.html
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.91 Safari/534.30
nzpossum
 
Posts: 6
Joined: Tue Nov 24, 2009 11:56 pm

Re: NotScript, a Chrome Extension

Postby Giorgio Maone » Thu Jun 09, 2011 11:16 pm

nzpossum wrote:Does this brand new API provide inline script blocking

http://code.google.com/chrome/extension ... tings.html

Not just "brand new" (8 hours ago), but "experimental" (which means it's not available by default in stable Chrome versions yet).

And yes, it is more or less what we discussed with Google more than 2 years ago, but it comes with several limitations and caveats (cross-frame permissions inheritance, blind redirects and so on...)

Furthermore, even if it was safe and ready for prime time (and it is not yet), there's lot more in NoScript aside script blocking (e.g. ClearClick, andvanced XSS filters, HTTPS enhancements or ABE) which can't be done in Chrome yet.

However, maybe we're gonna have a proper "NoScript Lite" for Chrome (branded as such and developed by me) by the end of this year :)
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
User avatar
Giorgio Maone
Site Admin
 
Posts: 7328
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: NotScript, a Chrome Extension

Postby nzpossum » Fri Jun 10, 2011 12:05 am

Awesome, the possibility of a Noscript lite sounds great. I think Google is doing a mass rollout of privacy related APIs in the 3rd or 4th quarter so fingers crossed.
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.91 Safari/534.30
nzpossum
 
Posts: 6
Joined: Tue Nov 24, 2009 11:56 pm


Return to NoScript General

Who is online

Users browsing this forum: No registered users and 2 guests