Search found 27 matches

by Aspirant
Thu Oct 27, 2011 2:44 pm
Forum: NoScript Development
Topic: Security improvement: avoid installing an XPI
Replies: 9
Views: 4519

Re: Security improvement: avoid installing an XPI

Setting extensions.alwaysUnpack=True in about:config solved my problem for NoScript today, and it will prevent the same problem for other extensions. No change to NoScript is needed. Thanks again al_9x.
by Aspirant
Fri Oct 21, 2011 8:59 pm
Forum: NoScript Development
Topic: Security improvement: avoid installing an XPI
Replies: 9
Views: 4519

Re: Security improvement: avoid installing an XPI

Thanks al_9x. I will try that about:config preference. I guess that my other extensions remain unpacked because I haven't upgraded them since upgrading Firefox from 3.6 directly to 7.0. Now that I have NoScript installed packed, if I set extensions.alwaysUnpack=True and install NoScript again, will ...
by Aspirant
Fri Oct 21, 2011 5:54 pm
Forum: NoScript Development
Topic: Security improvement: avoid installing an XPI
Replies: 9
Views: 4519

Re: Security improvement: avoid installing an XPI

(Now what would happen if the malware installed as a folder instead of an XPI?) Since the external security software prevents Firefox from reading XPI extension files on the standard user account, the standard user cannot install a malware extension from Firefox. Also, reverting to the exploded fol...
by Aspirant
Wed Oct 19, 2011 6:36 pm
Forum: NoScript Support
Topic: NS upgrade removes NS and most other extensions
Replies: 3
Views: 1939

Re: NS upgrade removes NS and most other extensions

I found the problem... NoScript v2.1.5 changed the installation structure to use an XPI archive instead of a folder. Because I use other security software to block reads of XPI files by Firefox, this problem occurred. When I removed the security rule, NoScript 2.1.6rc1 works fine. Since the recent N...
by Aspirant
Wed Oct 19, 2011 6:31 pm
Forum: NoScript Development
Topic: Security improvement: avoid installing an XPI
Replies: 9
Views: 4519

Security improvement: avoid installing an XPI

In NoScript 2.1.4 and earlier, NoScript installed as a folder under C:\Users\user_name\AppData\Roaming\Mozilla\Firefox\Profiles\profile_name\extensions\ Starting with NoScript 2.1.5, NoScript installs an XPI archive in the same location. The problem with the new NoScript structure is that it prevent...
by Aspirant
Wed Oct 19, 2011 3:43 pm
Forum: NoScript Support
Topic: NS upgrade removes NS and most other extensions
Replies: 3
Views: 1939

NS upgrade removes NS and most other extensions

I prefer to upgrade NS by loading the XPI file. When I upgraded from NS 2.1.4 to 2.1.5, most of my extensions disappeared including NS (confirmed in Add-ons Manager). Luckily, I backed up my user Mozilla folder before the upgrade, so I was able to restore the old profile. The same thing happened whe...
by Aspirant
Tue Mar 08, 2011 4:07 pm
Forum: NoScript Support
Topic: [RESOLVED] will not install
Replies: 9
Views: 5686

Re: [RESOLVED] will not install

I had the same problem on the 5th of March when I attempted to install NoScript v2.0.9.9 from https://secure.informaction.com/download/releases/noscript-2.0.9.9.xpi Here is how I resolved the problem: 1. Restore my Firefox profile from backup (before the failed NoScript v2.0.9.9 install) 2. Download...
by Aspirant
Mon Nov 15, 2010 5:35 pm
Forum: NoScript Development
Topic: Enhancement Request: support comments in Whitelist
Replies: 1
Views: 1518

Enhancement Request: support comments in Whitelist

After using NoScript for over a year, I have a rather large Whitelist. I like to periodically delete domains that I no longer use. Sometimes when I delete a domain that I don't recognize, one of my trusted sites fails to work. This is because my trusted site spawns a window to another site or uses a...
by Aspirant
Fri Oct 15, 2010 12:17 pm
Forum: NoScript Support
Topic: How to block Silverlight on some trusted sites?
Replies: 2
Views: 1880

How to block Silverlight on some trusted sites?

I followed the instructions from this site for blocking or deleting super cookies: http://forums.comodo.com/other-security-products/automatically-blockdelete-super-cookies-t39123.0.html I need to allow Silverlight on one frequently-used site, so my Adblock Plus configuration permits this. Between Fi...
by Aspirant
Sat Dec 19, 2009 4:55 pm
Forum: NoScript Development
Topic: FAQ addition request
Replies: 0
Views: 1602

FAQ addition request

The FAQ at http://noscript.net/faq#qa1_10 is very helpful for many people to understand why NoScript is necessary. Some people, however, would not be convinced by this info because they don't understand computer technology or they believe the probability of problems is small. For such people, a demo...
by Aspirant
Thu Oct 22, 2009 3:24 pm
Forum: NoScript General
Topic: Is default-deny for JavaScript necessary for good security?
Replies: 22
Views: 15209

Re: Is default-deny for JavaScript necessary for good security?

Giorgio, First, I want to say thank you for having a fact-based technical dialog with me. I learned a lot, and it will be quite helpful to me in the future. I have read opinions from many people (on several forums) who strongly recommend NoScript (with default-deny of JavaScript) over the years. But...
by Aspirant
Wed Oct 14, 2009 9:08 pm
Forum: NoScript General
Topic: Is default-deny for JavaScript necessary for good security?
Replies: 22
Views: 15209

Re: Is default-deny for JavaScript necessary for good security?

Thanks Giorgio for the detailed, thoughtful response. Yes, until your financial website gets hacked, as just happened during last weekend to poste.it, the public postal service and largest private banking entity in Italy: http://twitpic.com/l070i Of course in this case it was just a very noisy demon...
by Aspirant
Tue Oct 13, 2009 12:56 am
Forum: NoScript General
Topic: Is default-deny for JavaScript necessary for good security?
Replies: 22
Views: 15209

Re: Is default-deny for JavaScript necessary for good security?

I'm not arguing that using NoScript in defalut-allow mode still provides significant protection (i.e. Anti-XSS, HTTPS enforcement, ClearClick, ABE...) without the need of whitelist training, but your statement about default-deny being unnecessary for "good security" is delusional, or depe...
by Aspirant
Mon Oct 12, 2009 11:10 pm
Forum: NoScript General
Topic: Is default-deny for JavaScript necessary for good security?
Replies: 22
Views: 15209

Re: Is default-deny for JavaScript necessary for good security?

No comment on the suggestions for Sandboxie or Hosts file, or are you here merely to spam for Comodo, which I'm beginning to believe? -- in which case, the entire topic will be deleted. As I said in http://forums.informaction.com/viewtopic.php?f=10&t=2714&start=0#p11304 I have no financial ...