NoScript 10 Permissions

Post a reply

Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: NoScript 10 Permissions

Re: NoScript 10 Permissions

by Guest » Sun Dec 10, 2017 5:14 pm

Giorgio Maone wrote:
Guest wrote:The download related permissions are needed for the new settings import/export feature.
This :) WebExtensions cannot interact with the local filesystem, except for user driven uploads and downloads, and for the latter this permission is required.
Couldn't tell that from the way Firefox asks for these permissions.
Sounded quite suspicious, at least in German.

Re: NoScript 10 Permissions

by barbaz » Sun Dec 10, 2017 4:23 pm

Guest wrote:for the last update (NoScript version 10.1.5.7, I assume) Firefox asks me for the following permissions:

[*]Download files
[*]Read and change download log
https://forums.informaction.com/viewtop ... =7&t=24138

Re: NoScript 10 Permissions

by Guest » Sun Dec 10, 2017 4:21 pm

Hi Signore Maone, for the last update (NoScript version 10.1.5.7, I assume) Firefox asks me for the following permissions:

[*]Download files
[*]Read and change download log

Image

Thanks a lot for all your good work making our browsing experience safer and giving us the power to choose to avoid unwanted content.

Please explain why NoScript needs those additional rights.
Makes my stomach churn if a software could download anything and then hide its tracks. I'm pretty sure you won't send us any "makezombie.exe", "passscan.com" or "keyhook.exe" without asking... ;)
But still, with all respect, you shouldn't be able too.

Re: NoScript 10 Permissions

by Giorgio Maone » Tue Nov 21, 2017 9:33 pm

Guest wrote: *Access data for all web sites
NoScript needs to inject content scripts inside each page to create placeholder for replaced elements. Once a script run inside a page, can access all its data.
Guest wrote: *Read and modify privacy settings
NoScript needs it to tighten them.
Guest wrote: *Access browser tabs
Same as above, in order to decide what to block it needs to know which site is navigated.
Guest wrote: *Store unlimited amounts of client-side data
Whitelists / blacklists can grow considerably...
Guest wrote: *Access browser activity during navigation
This is for webRequest, the main API allowing NoScript to analyze load attempts and block the unwanted ones.
Guest wrote: Sorry for the silly question, I can see why it would need access to these things butI've never seen them with a firefox installation before (guess it's the new system) and it's worded a bit ominous.
Still, if it was a Youtube skin or some flowered theme claiming to need those permissions, I'd like to know in advance ;)

Re: NoScript 10 Permissions

by Arkonor » Tue Nov 21, 2017 6:23 pm

barbaz wrote:Threads merged.
Thank you

I've been reading something about this (not about FF but Chrome, but the principle remains the same)

https://stefanheule.com/blog/posts/2015 ... b-browser/

Re: NoScript 10 Permissions

by barbaz » Tue Nov 21, 2017 6:18 pm

Threads merged.

Please, explain why you ask those permissions

by Arkonor » Tue Nov 21, 2017 6:16 pm

One of the things that modern mobile apps and FF Quantum add-ons makes me more worried about are permissions. I know that in many cases they ask you to grant them for a justified reason, although few times I've seen any developer explaining why they are requiring them (in fact, just once) Probably there's no difference between what this add-on can and cannot do in comparaison with older FF versions, but still I'd feel better about my privacy if they explained why they are requiring things such as "access to privacy configuration", and the ever-present permission to "access your data in all the websites" (it could be used as a key logger, but I'm not saying it's the case here)

NoScript 10 Permissions

by Guest » Tue Nov 21, 2017 5:01 am

I didn't want to make a new thread just for a small question and this one seems to be gaining traction as a catch-all for questions regarding the new version so I thought I'd just post it here quickly to see (hope that's ok.)

I was just wondering if it's normal to give the new noscript access to all these things it's asking for on installation - I guess they were things which it had anyway before webextensions changed the system but I just wanted to check to make sure I'm downloading the right thing.

*Access data for all web sites
*Read and modify privacy settings
*Access browser tabs
*Store unlimited amounts of client-side data
*Access browser activity during navigation

Sorry for the silly question, I can see why it would need access to these things butI've never seen them with a firefox installation before (guess it's the new system) and it's worded a bit ominous.

Thanks!

Top