Internet banking - help needed with unwanted popup

[Mr Blobby]

Hi

Wonder if anyone can help me with this problem please?

If you go to this URL:

http://www.hsbc.co.uk/1/2/personal/internet-banking

You get prompted with this damned annoying popup from HSBC requesting you to download their Rapport rubbish.

If you click the 'do not download...' option you get reprompted (in Firefox anyway)!

Anyway, if I forbid hsbc.co.uk in NoScript, you don't get the popup but you also don't get access to online banking either after logging on, because the site requres Javascript to work properly. Doh.

Is there any way to disable the annoying unwanted prompt in either NoScript or Adblock Plus without interfering with the normal operation of the site please?

I'd be really grateful for any pointers.

TIA

[therube]

> What is "Rapport"?
Heh. Oh that!
I cannot believe a site would do something like that.

Perhaps a surrogate would handle it?


For Bank of America, I keep JavaScript disabled until I go to Online Banking.
OB states that it requires JavaScript, so once there, I enable it.
When I'm done with OB, I disable it again, giving me more leeway when I'm on the BoA site.

If you can determine what is causing the Rapport popup you may be able to block it with NoScript (ABE perhaps, depending on where its coming from) or Adblock Plus?

BoA OB also has an annoying (JavaScript) "Feedback" button - that "follows you around". Haven't taken the time to rid myself of that - yet.


I guess this is it?

Code: Select all

view-source:http://www.hsbc.co.uk/1/PA_1_1_S5/content/uk/scripts/light_box/rapport_lightbox.js

Adblock Plus method:
http://www.ozwarren.co.uk/index.php/sha ... ort-pop-up

Suppose Giorgio will show us a NoScript way.

[Mr Blobby]

Hi m8,

Thanks very much for your help.

Yes, like your BOA experience, I similarly found two ways of working around this HSBC annoyance.

1. As you did. Forbid hsbc.co.uk, log-in then temporarily re-enable to get the functionality back.

2. Click the 'DO download spam..' button (which funnily enough doesn't pop up a download window?!) then carry on logging-in.

Both very inelegant solutions too eh?

Nice find, with the ozwarren site, and that's exactly the sort of solution I was looking for. It works pretty well in ABP. Excellent.

It's a comfy feeling knowing that HSBC 'think' they're bugging me to download their malware when in fact you're not even prompted with it. The whole point of ABP in the first place! Nice.

Yes, a NoScript solution would be good too if poss.

What's a surrogate btw?

[Giorgio Maone]

Yes, a NoScript solution would be good too if poss.

Open NoScript Options|Advanced|ABE, and add the followin rule to your USER ruleset:

Code: Select all

Site http://www.hsbc.co.uk/*/logon_lightbox.js*
Deny

Here's something about surrogates.

[Mr Blobby]

Hi Giorgio

Thanks for your help, but the code you supplied doesn't seem to work, but I get the general idea now.

This seems to work though:

Code: Select all

Site http://www.hsbc.co.uk/1/PA_1_5_S5/content/uk/scripts/light_box*
Deny

[Mr Blobby]

Actually, this more general one seems to work best:

Code: Select all

Site http://www.hsbc.co.uk/*/light_box*
Deny

The reason seems to be that when you log out, then try to log back in again the URL is appended with a load of "https://www.hsbc.co.uk/1/2/HSBCINTEGRAT ... 000UJ3P93N...." crap, so when you click the log in button again the popup reappeared.

[Mr Blobby]

Wow, sorry but still struggling slightly with this.

In the ABE tab can you use regular expressions?

The problem is if I use http://www.hsbc.co.uk/*/light_box* then log-out and log-in again, the URL has changed to https... and the filter no longer works!

I tried https?://www.hsbc.co.uk/*/light_box* but it doesn't seem to work.

Or do I need to add a separate entry altogether?

Thanks

[therube]

Thinking ABE is not going to affect https?

Wrong.

http://noscript.net/abe/
http://noscript.net/abe/abe_rules.pdf

I think either of these will work:

Code: Select all

Site http://www.hsbc.co.uk/*/light_box*   https://www.hsbc.co.uk/*/light_box*
Deny

Code: Select all

Site ^https?://www\.hsbc\.co\.uk/.*/light_box.*
Deny

PS: You can test the https: page by loading it directly (i.e. no need to "log out" - for those who do not have a HSBC account):
https://www.hsbc.co.uk/1/2/personal/internet-banking.

[Mr Blobby]

Hi Rube.

Yes, both of those work. Thank you.

My understanding of regular expression syntax is practically nil. As an ex programmer I feel quite ashamed! LOL

Anyway, problem solved. No more Rapport pop-ups. Great.

[Giorgio Maone]

Code: Select all

Site http://www.hsbc.co.uk/*/light_box*   https://www.hsbc.co.uk/*/light_box*
Deny

Code: Select all

Site ^https?://www\.hsbc\.co\.uk/.*/light_box.*
Deny

Thanks therube. This will work as well, without regexps nor repetitions:

Code: Select all

Site www.hsbc.co.uk/*/light_box*
Deny