Search found 8 matches

by donwms
Fri Oct 16, 2009 9:16 pm
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

Yes, I like your example. I want conditional trust. I may be willing to let a top level trusted site abc.com use def.com to collect browsing stats, but not when some other trusted site is the top level. In both cases the top level is trusted. However, trust for def.com is conditional based on who is...
by donwms
Wed Sep 30, 2009 4:26 pm
Forum: NoScript Support
Topic: Displaying reference to untrusted site...
Replies: 2
Views: 2676

Displaying reference to untrusted site...

I'm browsing ibm.com. I've allowed ibm.com, but not cmcore.com. They seem to be using a third-party site, cmcore.com, but when I view the page source (Ctrl+U), I can't find a reference to cmcore.com. Is there some option in NoScript to display the location in the code that is actually referencing cm...
by donwms
Tue Sep 08, 2009 1:46 pm
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

Sandboxing is like putting your shields up. However, I seems to me, that sooner or later you're going to have to do something outside your sandbox. While your shields are down, you better know what doing, where you're going, etc. or you're going to get hit. You need education to know what to avoid. ...
by donwms
Mon Sep 07, 2009 4:48 am
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

I'd be one fat king :-)
by donwms
Mon Sep 07, 2009 4:32 am
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

Yes, Sandboxie was recommended by SecurityNow with Steve Gibson in their Virtual Machine series. I have not tried Sandboxie, yet. It does not claim to identify badware, it just prevents it from being installed. While prevention is good, I would like notification as well. Of course, it is not a trivi...
by donwms
Mon Sep 07, 2009 3:22 am
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

Unless you have some way to sandbox and test a script, view the code, etc. a temporary allow could let malicious code execute without you even knowing it (and as Steve Gibson on SecurityNow has said many times, “you’re toast”). I'm fairly sure that most users don't have the time (or take the time) t...
by donwms
Sun Sep 06, 2009 10:31 pm
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

[/quote] ...Certainly plugin whitelisting is not as finely controllable. I would say that many particular site requirements for plugin whitelisting could be met by a user creating a profile for this kind of whitelisting. Sorry, I rambled on and on in my previous post. I should have simply said that ...
by donwms
Sat Sep 05, 2009 11:13 pm
Forum: NoScript Development
Topic: Discussion: Site Specific Permissions Policy
Replies: 165
Views: 147683

Re: Discussion: Site Specific Permissions Policy

I have known about NoScript for a quite a while, but only after I heard an endorsement on SecurityNow by Steve Gibson and Leo Laporte, did I decide to trust and install NoScript. It appears to be a great piece of software. Thank You. It is generally agreed that disabling unneeded software features r...