Page 6 of 11
Re: NoScript Sightings
Posted: Wed Aug 11, 2010 10:01 am
by Giorgio Maone
Re: NoScript Sightings
Posted: Wed Aug 18, 2010 12:07 pm
by Giorgio Maone
The Register: Clickjacking threat punts Facebook survey scam
The Register wrote:
Prospective marks running the NoScript Firefox plug-in are protected from the line of attack, which continues with a supposed "human verification step". Marks are invited to complete a time-wasting survey before they are allowed to view the T-shirts.
Maybe because I'm not a native English reader, I find the statement above quite obscure.
Softpedia's Report "'Top T-Shirt Fails' Facebook Scam Employs Clickjacking" is fairly more understandable to me:
Softpedia wrote:
In this case a hidden Facebook Share button is positioned over the Next one on Step 2 of the "facebook human verification" dialog.
Firefox users who use the NoScript extension will see a warning about a clickjacking attempt being blocked when they click the Next button.
Re: NoScript Sightings
Posted: Wed Sep 29, 2010 12:34 pm
by Giorgio Maone
Re: NoScript Sightings
Posted: Tue Oct 26, 2010 11:20 pm
by therube
Critical vulnerability in Firefox 3.5 and Firefox 3.6
10.26.10 - 02:30pm
Issue:
Mozilla is aware of a critical vulnerability affecting Firefox 3.5 and Firefox 3.6 users. We have received reports from several security research firms that exploit code leveraging this vulnerability has been detected in the wild.
Impact to users:
Users who visited an infected site could have been affected by the malware through the vulnerability. The trojan was initially reported as live on the Nobel Peace Prize site, and that specific site is now being blocked by Firefox’s built-in malware protection. However, the exploit code could still be live on other websites.
Status:
We have diagnosed the issue and are currently developing a fix, which will be pushed out to Firefox users as soon as the fix has been properly tested.
In the meantime, users can protect themselves by doing either of the following:
Disabling JavaScript in Firefox
Using the
NoScript Add-on
http://blog.mozilla.com/security/2010/1 ... refox-3-6/
Re: NoScript Sightings
Posted: Fri Mar 04, 2011 6:44 am
by LouCypher
Beware enticing Bieber links, free offers on Facebook
InSecurity Complex - CNET News
...yadda..yadda...
If you see a potential or obvious scam on Facebook report it to the person whose account is spreading it, M86
said. The NoScript Firefox plug-in protects against clickjacking attacks such as this, it added.
Re: NoScript Sightings
Posted: Fri Mar 25, 2011 9:47 pm
by Giorgio Maone
Re: NoScript Sightings
Posted: Fri Mar 25, 2011 9:48 pm
by Giorgio Maone
Re: NoScript Sightings
Posted: Tue May 03, 2011 7:36 pm
by Giorgio Maone
Re: NoScript Sightings
Posted: Sun Oct 02, 2011 6:31 pm
by tlu
The man in the browser and Phishing with legit URL’s
Of course noscript will prevent these kind of attacks ...
Re: NoScript Sightings
Posted: Fri Oct 21, 2011 4:49 pm
by therube
Re: NoScript Sightings
Posted: Tue Dec 27, 2011 9:38 pm
by Giorgio Maone
Forbes - Best Read: Brand'ts Top 5 Malware Threats in 2012
David Coursey wrote:
If you’re not running Firefox with NoScript installed, you need to do so right now. As far as I can tell, it’s the only surefire method of preventing an accidental infection of a Windows PC by exploit-kitted Web pages.
Re: NoScript Sightings
Posted: Wed Dec 28, 2011 3:54 am
by Tom T.
Giorgio Maone wrote:Forbes - Best Read: Brand'ts Top 5 Malware Threats in 2012
David Coursey wrote:
If you’re not running Firefox with NoScript installed, you need to do so right now. As far as I can tell, it’s the only surefire method of preventing an accidental infection of a Windows PC by exploit-kitted Web pages.
I believe I'll link that in the thread,
"Google Chrome vs. FX+NS;", thanks.
Re: NoScript Sightings
Posted: Wed Jan 04, 2012 5:55 pm
by therube
Softpedia.com:
NoScript 2.2.5 Released
It took only three release candidates for the developer to come out with the stable version for NoScript 2.2.5.
All the features you’ve been accustomed to have been preserved and there is no addition in the extension. As all the effort invested to reach this version number was to eliminate bugs and improve compatibility with various widgets and websites.
As such, the new release brings to the table better compatibility with Verified by VISA (
www.securesuite.net). On the same note, ClearClick feature has also been improved, as there is better compatibility with recent Disqus widget versions.
Linux tooltips obstructing the embedding unblocking confirmation dialog should no longer occur as the developer came up with a workaround for the issue.
NoScript allows JavaScript, Java, Flash and other plugins to be executed only by trusted websites of your choice. You can download it from this page.
Re: NoScript Sightings
Posted: Wed Jan 11, 2012 8:36 am
by Giorgio Maone
Remove Facebook Timeline' themed scam circulating on Facebook (
Zero Day, ZDNet's security news by Ryan Nairaine Dancho Danchev):
Re: NoScript Sightings
Posted: Wed Jan 11, 2012 9:03 am
by Tom T.
@ Giorgio:
Did you break the lnk deliberately? There's a space after the URL closure tag that caused a line feed in the wrap, I think. Removing the space (butting up "Remove" to the "]" makes the link work.
Seems like a safe link that users might want to click, but of course I wouldn't edit your posts without checking first. If it was broken deliberately for anti-SEO or whatever, cool.
