How to block Hotspot Shield java script?

Ask for help about NoScript, no registration needed to post
FumaTodas

How to block Hotspot Shield java script?

Post by FumaTodas »

this software http://hotspotshield.com/ protect/hide your ip is very good and free but he add, in all sites, an ads (banner) the adsblock can block some elements, the NoScript block some .js too but the main (init.js) he cant block, so some pages stay with a blank frame on the top of the screen so its too bored.

i'd like know if have a way using the NoScript to block this script, maybe u can fix this problem on the next release.

cheers,
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: How to block Hotspot Shield java script?

Post by Tom T. »

This is not the answer that you asked for, but since the purpose of this forum is security, I feel that I must tell you.

This product sounded interesting, so I tried it. After installing, I could not connect without allowing an iFrame from hss2search.com. Curious, I allowed this, in a controlled environment. Firefox sent me a message that it was unable to connect to box.anchorfree.net. I use the Hosts file service provided by http://www.mvps.org/winhelp2002/hosts.htm to block known malware sites, as well as sites that install tracking cookies, web bugs, data mining, etc.
The site box.anchorfree.net was in their list, which is why my browser cannot connect to that site -- and Hotspot Shield will not let me connect unless I allow that connection.

I don't know what exactly they are doing in terms of tracking, data mining, etc., but I would prefer not to install such a tool. This is something you might wish to think about or research, and it might explain why you cannot get rid of the banner. I don't believe NoScript could fix this issue, because is won't let you connect otherwise.

Edit: Also, during the install process, there was a checkbox to install their toolbar. It was checked by default. Did you install this toolbar? It is likely another source of privacy-invasion. You could uninstall, then re-install, unchecking the "toolbar" box. But I did not install the toolbar, and still got the above "hidden connection" to the site that is banned in my list.
Last edited by Tom T. on Thu Jun 04, 2009 9:25 am, edited 1 time in total.
Reason: opt-out toolbar
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US at an expert level; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 diehard
Guest

Re: How to block Hotspot Shield java script?

Post by Guest »

Tom T. wrote:This is not the answer that you asked for, but since the purpose of this forum is security, I feel that I must tell you.

This product sounded interesting, so I tried it. After installing, I could not connect without allowing an iFrame from hss2search.com. Curious, I allowed this, in a controlled environment. Firefox sent me a message that it was unable to connect to box.anchorfree.net. I use the Hosts file service provided by http://www.mvps.org/winhelp2002/hosts.htm to block known malware sites, as well as sites that install tracking cookies, web bugs, data mining, etc.
The site box.anchorfree.net was in their list, which is why my browser cannot connect to that site -- and Hotspot Shield will not let me connect unless I allow that connection.

I don't know what exactly they are doing in terms of tracking, data mining, etc., but I would prefer not to install such a tool. This is something you might wish to think about or research, and it might explain why you cannot get rid of the banner. I don't believe NoScript could fix this issue, because is won't let you connect otherwise.

Edit: Also, during the install process, there was a checkbox to install their toolbar. It was checked by default. Did you install this toolbar? It is likely another source of privacy-invasion. You could uninstall, then re-install, unchecking the "toolbar" box. But I did not install the toolbar, and still got the above "hidden connection" to the site that is banned in my list.
Yes, those product is very interesting and it works, lot person use this tool, i dont think they ill try get us because just advanced users try use it, but i can be wrong.
I not will use it all times when im connected, I want to use it only in some circumstances.
Really i dont know if i can connect removing their IFrame, they use this frame to add an ads i think its a form to try gain some money because their software is fully free.
Otherwise I believe that noscript dev maybe can fix it because the hotspot shield work outside of the browser! he need just to do the first connection after it you can close the browser, you can use all software (eg. irc, msn, email clients, games,...) that do a remote connection and your ip ill be hide.
I removed all ads (btw i use a firefox add-on adsblock elements) but just this blank IFRAME still there.
About privacy-invasion its rly a risk and need take care but i have a lot good tools and firewall to scan and block a possible attack, you can use a software named CurrPorts or DOS command to see all remote adress and remote ports that you are connected and in which ports this adress is working, i saw it and the hotspot use the port 80 and 443 https to do their connection.
About the toolbar you can read all privace police about it, btw i didnt install the bar and the hotspot is working.
I think it isnt a hide connection its a really connection beacause this software isnt a proxy based !! its VPN and they show it for you, when the hotspot do the first connection, they show saying "VPN IP ADRESS : XXX.XXX.XX"
In the adminstraive tools you can see two hotspot installed services are you able to stop this services all times and all process and all remote connection ill be closed.

follow my screenshots... (if im wrong u are free to retouch)

http://img521.imageshack.us/img521/976/ss1a.jpg
http://img216.imageshack.us/img216/9726/ss2u.jpg
http://img216.imageshack.us/img216/6340/ss3q.jpg
http://img216.imageshack.us/img216/5213/ss4m.jpg
http://img245.imageshack.us/img245/8862/ss5s.jpg
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
fumatodas

Re: How to block Hotspot Shield java script?

Post by fumatodas »

U CAN TO IT ALSO ...

cd "D:\Instalacao de programas\Hotspot Shield\bin"
openvpnas -install
openvpnas -start
openvpntray.exe

cd "D:\Instalacao de programas\Hotspot Shield\bin"
openvpnas -remove
taskkill /F /IM openvpntray.exe
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
Locked