Now I've got NoScript ABE giving me problems with another bank, Union Bank and I need to know my balance and to pay bills at the time when I need to as we all do of course.
This forum for some reason is the only forum I know of that does not provide users with the ability to post images, so this is an additional problem.
And on that last point, when I go to Postimage.org I can't seem to upload images tonight, I noticed this message "Our DNS provider experienced a major outage, effectively shutting us
down for half the globe. They pinky swear this won't repeat. We're sorry, guys :\", so I guess I can't provide a screen-shot of the ABE problem (and I don't have time to look into another method of posting a screen-shot at this time).
So back to my current problem, I got two different errors from ABE (as I tried by trial and error what to do), the last of which was similar to the previous one with Citibank. Below is what applies to this new situation with Union bank (again similar to Citibank previously):
For Union bank I had this previously in ABE:
Site .sso.unionbank.com
Accept from .unionbank.com
Deny
So I tried the same as I had done before with Citibank as posted below:
Site .sso.unionbank.com
Accept from .sso.unionbank.com
Deny INC
Accept from
https://start.me/* .sso.unionbank.com
Deny
But I still get the same error, thus cannot use ABE at all since the user can only enable or disable ABE and there is no way to do a SIMPLE WHITELIST of a WEBSITE ADDRESS in ABE but instead this completely obscure, esoteric code has to be used that the AVERAGE user would have no idea what it means.
The Internet is very commonly used to access bank accounts, in fact in my case this is one of the major reasons I use the Internet at all....
MY QUESTION IS WHY IN THE WORLD CAN'T NOSCRIPT take the approach to SIMPLY provide the user with a way to WHITELIST A WEBSITE IN ABE which in this case would of course simply be something like "
https://sso.unionbank.com...."
What average user would really ever want to use ABE at all not having any concept in general what to do to access their respective bank accounts when something like this occurs. All security apps generally provide a "whitelist" functionality where a website address is added to the list as an exception that is to be ignored (skipped). This idea of requiring a code that an average user should not have to try and comprehend is something that is clearly an unreasonable requirement that should be changed, imho. Average users understand URL's and I can't see any reason why the way ABE functions could not be more user friendly by applying a more INTUITIVE APPROACH.... When I used to write code it would never work to require non-tech-savvy users (average users) to need to know what to do at this level to get some security app to work.
What average user is going to know to enter the following to get ABE to ignore a website so that it will work in the users browser?
Site .sso.unionbank.com
Accept from .sso.unionbank.com
Deny INC
Accept from
https://start.me/* .sso.unionbank.com
Deny
And of course, in this case it still does not work so I'm unable to log-in to do anything with the Union Bank Website without disabling ABE altogether for all sites.
It seems to me a simple straight forward approach would simply to code NoScript in a way that a website address i.e. "unionbank.com" when added to a "whitelist" database ABE would simply ignore the site (any additional security measures, code wise) and thus not block it which could be implemented by providing user prompts i.e. to "Deny Inclusions" (whatever that is) or to "Deny" all other access which would then build the code at a level simple enough to minimally get the job done. For those who understand the code above NoScript (ABE or SSL or whatever) could always have the option provided to the user to manually enter the exceptions for a more detailed or precise application of the exception.
I tend to think a lot of NoScript users would simply end up not using (disable) ABE and possibly SSL as well for these reasons.... I'm totally confident that code could easily be programed to write exceptions (as illustrated above) in background (behind the scenes) simply by the user entering key information (written in English prompts that the user understands) to automate the code to implement the necessary exceptions to allow access to websites which I would point out would in many cases be a website that the user would have been always using for years and would therefore be considered presumably safe in the first place anyway. Security should not be so overbearing to make it in many cases nearly impossible for the average user to apply and I know this could be done by interfacing with the user via appropriate user friendly prompts to apply the exceptions code (and not at all difficult to do), but then that's just me....
But I digress, so I'll get of my soapbox....
Any ideas on what do to get the Union Bank website to allow me to log-in would be once again appreciated. (in the meantime I'm forced to once again disable ABE unfortunately, I would certainly like to be able to use these security functions in NoScript without all of the problems of course)
Now I've got NoScript ABE giving me problems with another bank, Union Bank and I need to know my balance and to pay bills at the time when I need to as we all do of course.
This forum for some reason is the only forum I know of that does not provide users with the ability to post images, so this is an additional problem.
And on that last point, when I go to Postimage.org I can't seem to upload images tonight, I noticed this message "Our DNS provider experienced a major outage, effectively shutting us
down for half the globe. They pinky swear this won't repeat. We're sorry, guys :\", so I guess I can't provide a screen-shot of the ABE problem (and I don't have time to look into another method of posting a screen-shot at this time).
So back to my current problem, I got two different errors from ABE (as I tried by trial and error what to do), the last of which was similar to the previous one with Citibank. Below is what applies to this new situation with Union bank (again similar to Citibank previously):
For Union bank I had this previously in ABE:
Site .sso.unionbank.com
Accept from .unionbank.com
Deny
So I tried the same as I had done before with Citibank as posted below:
Site .sso.unionbank.com
Accept from .sso.unionbank.com
Deny INC
Accept from https://start.me/* .sso.unionbank.com
Deny
But I still get the same error, thus cannot use ABE at all since the user can only enable or disable ABE and there is no way to do a SIMPLE WHITELIST of a WEBSITE ADDRESS in ABE but instead this completely obscure, esoteric code has to be used that the AVERAGE user would have no idea what it means.
The Internet is very commonly used to access bank accounts, in fact in my case this is one of the major reasons I use the Internet at all....
MY QUESTION IS WHY IN THE WORLD CAN'T NOSCRIPT take the approach to SIMPLY provide the user with a way to WHITELIST A WEBSITE IN ABE which in this case would of course simply be something like "https://sso.unionbank.com...."
What average user would really ever want to use ABE at all not having any concept in general what to do to access their respective bank accounts when something like this occurs. All security apps generally provide a "whitelist" functionality where a website address is added to the list as an exception that is to be ignored (skipped). This idea of requiring a code that an average user should not have to try and comprehend is something that is clearly an unreasonable requirement that should be changed, imho. Average users understand URL's and I can't see any reason why the way ABE functions could not be more user friendly by applying a more INTUITIVE APPROACH.... When I used to write code it would never work to require non-tech-savvy users (average users) to need to know what to do at this level to get some security app to work.
What average user is going to know to enter the following to get ABE to ignore a website so that it will work in the users browser?
Site .sso.unionbank.com
Accept from .sso.unionbank.com
Deny INC
Accept from https://start.me/* .sso.unionbank.com
Deny
And of course, in this case it still does not work so I'm unable to log-in to do anything with the Union Bank Website without disabling ABE altogether for all sites.
It seems to me a simple straight forward approach would simply to code NoScript in a way that a website address i.e. "unionbank.com" when added to a "whitelist" database ABE would simply ignore the site (any additional security measures, code wise) and thus not block it which could be implemented by providing user prompts i.e. to "Deny Inclusions" (whatever that is) or to "Deny" all other access which would then build the code at a level simple enough to minimally get the job done. For those who understand the code above NoScript (ABE or SSL or whatever) could always have the option provided to the user to manually enter the exceptions for a more detailed or precise application of the exception.
I tend to think a lot of NoScript users would simply end up not using (disable) ABE and possibly SSL as well for these reasons.... I'm totally confident that code could easily be programed to write exceptions (as illustrated above) in background (behind the scenes) simply by the user entering key information (written in English prompts that the user understands) to automate the code to implement the necessary exceptions to allow access to websites which I would point out would in many cases be a website that the user would have been always using for years and would therefore be considered presumably safe in the first place anyway. Security should not be so overbearing to make it in many cases nearly impossible for the average user to apply and I know this could be done by interfacing with the user via appropriate user friendly prompts to apply the exceptions code (and not at all difficult to do), but then that's just me.... :D
But I digress, so I'll get of my soapbox.... ;)
Any ideas on what do to get the Union Bank website to allow me to log-in would be once again appreciated. (in the meantime I'm forced to once again disable ABE unfortunately, I would certainly like to be able to use these security functions in NoScript without all of the problems of course)