InformAction Forums

Three points: 1. The URL in the first post (thestack dot com). When I clicked the link there seemed to be 'something trying to download'. I used another Profile [which was also using Fx 43.0a2 (2015-09-27)] and used startpage https://startpage.com to search for the URL thestack com security This fou...

My point there is that the fact it's registered to Amazon doesn't mean much, because Amazon AWS hosts other people's content, meaning *not* Amazon stuff. I agree, barbaz put it better than I did. :) I've been talking about the likelihood of the BBC hiring [computer] resources from Amazon (for short...

Also, worth checking that 'e10s are still disabled'. Some time in the past week or so ... Mozilla 'forced on' the use of e10s AKA Electrolysis AKA "multi-process Firefox" a few days ago in Fx 42.0a2. I have 'turned it off' (again) on all my Fx 42 Profiles because I want to continue to use ...

2 of 2 3. Now, your initial question: about why the BBC might use 52.x.x.x in some situations and why nobody seems to have noticed the connections to 52.x.x.x I don't know. Here are my thoughts, they include several 'wild speculations' - they are just ideas, could well be totally wrong. 3.1 The BBC ...

Richard, you are welcome, I enjoy a puzzle. 1 of 2 Three additional points. 1. Extension for blocking outgoing requests. The advantage of an Extension to 'block requests' is the UI is easy to use and, with RPC, it is easy to see 'which domains are blocked'. I'm much less familiar with uBlock. With R...

Still using my test 'BBC iPlayer Profile' (that I setup - see above) I did the following: 2.1 Went to the BBC Homepage http://www.bbc.co.uk/ Use RPC to "Temporary allow" (TA) *.bbc.co.uk to *.bbci.co.uk 2.2 Opened http://www.bbc.co.uk/iplayer in a new Tab. This time, use NS to TA both bbc....

All, I have other 'unusual preferences' (that I choose to use to improve my Privacy and Security). A good source of ideas, and documentation of the settings are here: https://github.com/pyllyukko/user.js/ Just my personal opinion. Richard, I still think it is easier to 'block requests to domains' [t...

3 of 3 I do have some 'unusual preferences' (you can use "about:config" to change the "prefs.js"). Here are some, from the Profile I used to make this test of the iPlayer. (spam filter is blocking code tags again) user_pref("media.peerconnection.enabled", false); user_p...

2 of 3 [Even in code tags the full object, in the post above, is being blocked by the spam filter] That did not 'play the video', instead I had a 'black rectangle' (where the video would be shown). I forced a reload without cache Ctrl+Shift+R. Then I used the NS Blocked Objects Menu to TA *@http://e...

1 of 3 I cloned a test Profile. It has several Extensions including: NoScript 2.6.9.35rc2 (NS) RequestPolicy Continued 1.0.beta10 (RPC) https://requestpolicycontinued.github.io/ This version of RPC is 'not signed by Mozilla', see NoScript Not A Signed Add On (Yet)? https://forums.informaction.com/vi...

I advocate and use 'specific Profiles for specific uses / sites'. Examples include a Profile 'just used for Bank' and a separate one 'just for webmail' and a third one 'just for making online purchases' (general looking at 'things to buy' is done in yet another Profile). All my Profiles have NoScrip...

I know I'm not answering your question directly; I'm just thinking of another approach that might be easier to implement. I speculate that the BBC might use (hire) resources from Amazon (lots of companies do - Amazon Web Services etc). Are these required to use the iPlayer? I don't know, but I fear ...

Can signed XPIs be hosted on secure.informaction.com (in addition to AMO)? I think they can be: I proposed how to do this above (in the work flow). Since then, I have tried to see if there are any technical reasons why my idea would fail to work. I have used 7zip to open (copies of) "{73a6fe31-...

You don't have to actually install to see if an extension is signed. You do have to download. Once downloaded, simply open the XPI & see if it has a META-INF subdirectory. If it does, it's signed. Thanks, good to know. And I'd expect anything that comes from AMO to be that way. I was NOT confid...

While I was doing the tests (below) we got an excellent answer from barbaz. Short expounding on therube's answer: * If you want Mozilla-signed NoScript, you need to get it from https://addons.mozilla.org/addon/noscript/ (or https://addons.mozilla.org/addon/noscript/versions/ for other than latest st...