InformAction Forums

If all the sites you do business with are not actually trustworthy, then you have bigger problems. It is fun, how we cannot understand each other, because of different life experience, I guess. Imagine, your (g)mail account was hacked using javascript exploit, and all your mail, containing valuable...

Then it doesn't sound like they are really 'trusted' in the sense that NoScript uses that word. Then I conclude that NoScript is based on a false concepts, because there is no such things as absolutely trustworthy organisations as there is no an "absolute security" thing. NoScript, as a t...

I don't need to trust that my bank's security will be perfect, only that they will be the ones who will wear the cost of something going wrong. As for me, it is wrong idea to think that somebody's will wear the cost. First, dangerous code is not something that alerts "hello, i'm a dangerous co...

And how would this handle inline scripts? And there are often dozens of scripts on a site, sometimes hundreds, so you'd potentially be drowning in alert spam. 1. Well, sure, I would. But on the other hand it's a bad idea to put inline scripts onto the site and especially - to generate different qua...

http://noscript.net/faq#qa1_11 https://addons.mozilla.org/de/firefox/addon/jsview/ shows "Dieses Add-on wurde durch seinen Autor entfernt." and the "When a respectable site gets compromised, 99.9% of the times malicious scripts are still hosted on a different domain" is BS due t...

Imagine that a site which I allowed to use javascript is attacked by hackers who put some dangerous code instead of original. My question is: can NoScript create some hash of all scripts on the page which I have enabled and ask me every time it founds some changes in JS? Obviously, I would need to c...