Search found 27 matches
- Thu Oct 27, 2011 2:44 pm
- Forum: NoScript Development
- Topic: Security improvement: avoid installing an XPI
- Replies: 9
- Views: 4519
Re: Security improvement: avoid installing an XPI
Setting extensions.alwaysUnpack=True in about:config solved my problem for NoScript today, and it will prevent the same problem for other extensions. No change to NoScript is needed. Thanks again al_9x.
- Fri Oct 21, 2011 8:59 pm
- Forum: NoScript Development
- Topic: Security improvement: avoid installing an XPI
- Replies: 9
- Views: 4519
Re: Security improvement: avoid installing an XPI
Thanks al_9x. I will try that about:config preference. I guess that my other extensions remain unpacked because I haven't upgraded them since upgrading Firefox from 3.6 directly to 7.0. Now that I have NoScript installed packed, if I set extensions.alwaysUnpack=True and install NoScript again, will ...
- Fri Oct 21, 2011 5:54 pm
- Forum: NoScript Development
- Topic: Security improvement: avoid installing an XPI
- Replies: 9
- Views: 4519
Re: Security improvement: avoid installing an XPI
(Now what would happen if the malware installed as a folder instead of an XPI?) Since the external security software prevents Firefox from reading XPI extension files on the standard user account, the standard user cannot install a malware extension from Firefox. Also, reverting to the exploded fol...
- Wed Oct 19, 2011 6:36 pm
- Forum: NoScript Support
- Topic: NS upgrade removes NS and most other extensions
- Replies: 3
- Views: 1939
Re: NS upgrade removes NS and most other extensions
I found the problem... NoScript v2.1.5 changed the installation structure to use an XPI archive instead of a folder. Because I use other security software to block reads of XPI files by Firefox, this problem occurred. When I removed the security rule, NoScript 2.1.6rc1 works fine. Since the recent N...
- Wed Oct 19, 2011 6:31 pm
- Forum: NoScript Development
- Topic: Security improvement: avoid installing an XPI
- Replies: 9
- Views: 4519
Security improvement: avoid installing an XPI
In NoScript 2.1.4 and earlier, NoScript installed as a folder under C:\Users\user_name\AppData\Roaming\Mozilla\Firefox\Profiles\profile_name\extensions\ Starting with NoScript 2.1.5, NoScript installs an XPI archive in the same location. The problem with the new NoScript structure is that it prevent...
- Wed Oct 19, 2011 3:43 pm
- Forum: NoScript Support
- Topic: NS upgrade removes NS and most other extensions
- Replies: 3
- Views: 1939
NS upgrade removes NS and most other extensions
I prefer to upgrade NS by loading the XPI file. When I upgraded from NS 2.1.4 to 2.1.5, most of my extensions disappeared including NS (confirmed in Add-ons Manager). Luckily, I backed up my user Mozilla folder before the upgrade, so I was able to restore the old profile. The same thing happened whe...
- Tue Mar 08, 2011 4:07 pm
- Forum: NoScript Support
- Topic: [RESOLVED] will not install
- Replies: 9
- Views: 5686
Re: [RESOLVED] will not install
I had the same problem on the 5th of March when I attempted to install NoScript v2.0.9.9 from https://secure.informaction.com/download/releases/noscript-2.0.9.9.xpi Here is how I resolved the problem: 1. Restore my Firefox profile from backup (before the failed NoScript v2.0.9.9 install) 2. Download...
- Mon Nov 15, 2010 5:35 pm
- Forum: NoScript Development
- Topic: Enhancement Request: support comments in Whitelist
- Replies: 1
- Views: 1518
Enhancement Request: support comments in Whitelist
After using NoScript for over a year, I have a rather large Whitelist. I like to periodically delete domains that I no longer use. Sometimes when I delete a domain that I don't recognize, one of my trusted sites fails to work. This is because my trusted site spawns a window to another site or uses a...
- Fri Oct 15, 2010 4:12 pm
- Forum: NoScript Support
- Topic: How to block Silverlight on some trusted sites?
- Replies: 2
- Views: 1880
Re: How to block Silverlight on some trusted sites?
Thanks Giorgio!
- Fri Oct 15, 2010 12:17 pm
- Forum: NoScript Support
- Topic: How to block Silverlight on some trusted sites?
- Replies: 2
- Views: 1880
How to block Silverlight on some trusted sites?
I followed the instructions from this site for blocking or deleting super cookies: http://forums.comodo.com/other-security-products/automatically-blockdelete-super-cookies-t39123.0.html I need to allow Silverlight on one frequently-used site, so my Adblock Plus configuration permits this. Between Fi...
- Sat Dec 19, 2009 4:55 pm
- Forum: NoScript Development
- Topic: FAQ addition request
- Replies: 0
- Views: 1602
FAQ addition request
The FAQ at http://noscript.net/faq#qa1_10 is very helpful for many people to understand why NoScript is necessary. Some people, however, would not be convinced by this info because they don't understand computer technology or they believe the probability of problems is small. For such people, a demo...
- Thu Oct 22, 2009 3:24 pm
- Forum: NoScript General
- Topic: Is default-deny for JavaScript necessary for good security?
- Replies: 22
- Views: 15209
Re: Is default-deny for JavaScript necessary for good security?
Giorgio, First, I want to say thank you for having a fact-based technical dialog with me. I learned a lot, and it will be quite helpful to me in the future. I have read opinions from many people (on several forums) who strongly recommend NoScript (with default-deny of JavaScript) over the years. But...
- Wed Oct 14, 2009 9:08 pm
- Forum: NoScript General
- Topic: Is default-deny for JavaScript necessary for good security?
- Replies: 22
- Views: 15209
Re: Is default-deny for JavaScript necessary for good security?
Thanks Giorgio for the detailed, thoughtful response. Yes, until your financial website gets hacked, as just happened during last weekend to poste.it, the public postal service and largest private banking entity in Italy: http://twitpic.com/l070i Of course in this case it was just a very noisy demon...
- Tue Oct 13, 2009 12:56 am
- Forum: NoScript General
- Topic: Is default-deny for JavaScript necessary for good security?
- Replies: 22
- Views: 15209
Re: Is default-deny for JavaScript necessary for good security?
I'm not arguing that using NoScript in defalut-allow mode still provides significant protection (i.e. Anti-XSS, HTTPS enforcement, ClearClick, ABE...) without the need of whitelist training, but your statement about default-deny being unnecessary for "good security" is delusional, or depe...
- Mon Oct 12, 2009 11:10 pm
- Forum: NoScript General
- Topic: Is default-deny for JavaScript necessary for good security?
- Replies: 22
- Views: 15209
Re: Is default-deny for JavaScript necessary for good security?
No comment on the suggestions for Sandboxie or Hosts file, or are you here merely to spam for Comodo, which I'm beginning to believe? -- in which case, the entire topic will be deleted. As I said in http://forums.informaction.com/viewtopic.php?f=10&t=2714&start=0#p11304 I have no financial ...