NoScript prevents you get RickRolled!

General discussion about the NoScript extension for Firefox
Post Reply
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

NoScript prevents you get RickRolled!

Post by luntrus »

Hi users of NoScript,

Another issue where we should be glad we have the additional protection of NoScript, you won't get Rickrolled when you venture out here: http:// 1227.com/
With Fx without NS you are vulnerable to this Browser exploit: JOKE/BrowserMessage or Joke.NoClose JS
the endless alert popup ...
AV Scan Status: Virus: Virus: Joke.NoClose.JS.A
APH Scan Status : not phishing
JS Scan Status : not malicious

It's strongly recommended that you navigate away without NS; it should be the browser that prevents the captive loop really- Opera does, but Firefox still doesn't. I am not aware anyone launched a bug report for this jokeful annoyance. Good NS protects us here, thanks Giorgio Maone,

luntrus
Last edited by Alan Baxter on Sat Mar 27, 2010 10:30 pm, edited 1 time in total.
Reason: Made rogue link non-clickable
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.16) Gecko/2010010414 Firefox/3.0.16 Flock/2.5.6
Alan Baxter
Ambassador
Posts: 1586
Joined: Fri Mar 20, 2009 4:47 am
Location: Colorado, USA

Re: NoScript prevents you get RickRolled!

Post by Alan Baxter »

luntrus wrote:I am not aware anyone launched a bug report for this jokeful annoyance.
Preventing a rogue web page from taking control of Firefox with an Alert popup has been requested in bugzilla already, luntrus -- probably many times. If you'd like to check on its progress, a search in https://bugzilla.mozilla.org will find it.

Edit: Here are a couple I already had bookmarked.
https://bugzilla.mozilla.org/show_bug.cgi?id=123913
https://bugzilla.mozilla.org/show_bug.cgi?id=59314
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

Re: NoScript prevents you get RickRolled!

Post by luntrus »

Hi Alan Baxter,

Thanks for the additional info here, so these issues have been with us quite some time now and they will not be going away either soon.
Here is how they tackled the issue in GoogleChrome while getting alert 1: https://bug61098.bugzilla.mozilla.org/a ... ?id=377667
And indeed as you posted when we search for these infinite loops there are quite some bug reports. Nonetheless NS inside the browser is very helpful here,

luntrus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.16) Gecko/2010010414 Firefox/3.0.16 Flock/2.5.6
Alan Baxter
Ambassador
Posts: 1586
Joined: Fri Mar 20, 2009 4:47 am
Location: Colorado, USA

Re: NoScript prevents you get RickRolled!

Post by Alan Baxter »

luntrus wrote:Nonetheless NS inside the browser is very helpful here
Absolutely! In my NoScript test profile, NoScript blocked the script which was preventing me from closing the tab or Firefox.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

Re: NoScript prevents you get RickRolled!

Post by luntrus »

Hi Alan Baxter,

This is the particular bug filed against this particular rickroll.swf:
https://bugzilla.redhat.com/show_bug.cgi?id=439858
The site it was on was non-malicious: http://wepawet.iseclab.org/view.php?has ... 96&type=js

luntrus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.16) Gecko/2010010414 Firefox/3.0.16 Flock/2.5.6
luntrus
Senior Member
Posts: 237
Joined: Sat Mar 21, 2009 6:29 pm

Re: NoScript prevents you get RickRolled!

Post by luntrus »

Hi Alan Baxter,

For April Fool's Day Sophos launched their RickRoll Protector: http://www.f-secure.com/weblog/archives/00001924.html

luntrus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.16) Gecko/2010010414 Firefox/3.0.16 Flock/2.5.6
Post Reply