InformAction Forums

Giorgio Maone wrote: Not yet: current top priorities are 1) Android native UI compatibilit 2) investigation on new Clickjacking techniques and countermeasures 3) Chrome porting

Giorgio, I wonder why you didn't include Noscript 3 desktop version. Is it postponed

The problem with that site persists in NS 2.2.9rc1. A modified G-A surrogate would be highly appreciated as an appropriate ABE rule is only the second-best solution. Actually it works for me . Could you doble check whether it's something else, e.g. Adblock Plus? Giorgio, I don't know what to say. :...

The problem with that site persists in NS 2.2.9rc1. A modified G-A surrogate would be highly appreciated as an appropriate ABE rule is only the second-best solution.

IMHO only, I don't much care what cookies the site itself sets, since they're all session-only, and deleted before moving on, if the "moving on" is at all privacy-sensitive. Third-party cookies are always blocked by default. For those who allow permanent cookies (not to my taste, thank yo...

Interesting thread, indeed! Just some additional comments: Critical is to disable geo.enabled in about:config , I think that the privacy threats of having geolocation enabled are limited considering what is said here . In other words, geolocation is completely opt-in. Regarding cookie management: I ...

(The documentation isn't clear on whether just *.friend.com, or just .friend.com will suffice as wildcards or "globs" by themselves, and there's already a request to Giorgio to clarify that when he's able to turn his attention to it. So let's just follow the entire pattern until then.) To...

rschnauzer wrote:I hope the next release will help to use facebook by allowing facebook.com only on its own site and to prevent it from collecting informations on all other visited sites with the like buttons.

Already available.

I found the culprit: ticketonline.de was blocked by Fanboy's Tracking/Stats Blocking list in AdblockPlus. I should have noticed that earlier. I'm afraid I'm getting senile

I tried a new profile and found that ticketonline.de now shows up in the Noscript menu. So I guess another addon is the culprit. Sorry for the confusion. :oops: BTW: I cannot confirm that ticketonline.de only shows up under the Blocked Objects menu if i/frames are blocked. Here it shows up in the &q...

On www.stage-entertainment.de/musicals/tar ... eshop.html I tried to order online tickets but didn't succeed: That same site was loaded again and again although I had whitelisted stage-entertainment.de in Noscript 2.2.5rc1 using FF 9.0. (etracker.com is in my blacklist). Out of curiosity I started C...

Ian wrote:

tlu wrote:Not here. With youtube.com and ytimg.com whitelisted and cookies blocked (with CookieMonster) all videos play without a problem.

Maybe it depends on the browser version. Have you tested it on version 8.0.1. ?
Today I re-checked again and nothing has changed.

No problems here with 8.0 either.

therube wrote: With NoScript enabled & cookies blocked (& other settings as outlined above), can't seem to be able to force it to play.

Not here. With youtube.com and ytimg.com whitelisted and cookies blocked (with CookieMonster) all videos play without a problem.

Idk about Chrome's Flash setup. Can one block it by default, as with NoScript? Yes, you can - see http://www.howtogeek.com/58058/how-to-enable-flashblock-in-chrome-and-make-it-5000-more-secure/ . It's actually more flexible than the current NS version as you block flash by default but can still all...

Giorgio Maone wrote:Please check latest development build 2.1.8rc1

Thanks again! Those examples are indeed successfully blocked! (Somehow I was pretty sure that you would come up with a solution - you're really incredible )

Giorgio Maone wrote: That said, I'm gonna implement in next dev build a further (pretty unique) mitigation, which will neutralize this attack even if the injected script source comes from a trusted origin.

That's really great! Giorgio, thank you very much!!