[REQ] Play a sound for blocked objects, instead of scripts

[shutin]

The sound-on-script-blocked feature seems a bit useless. Nearly every site on the internet has Javascript, so basically you are getting a bell every time you visit a new site. What I would love to see is a sound for blocked Java Applets, or blocked Flash. Better yet, you'd be able to customize the sound for the different object types!

I realize you are more focused on the nitty gritty aspects of safe browsing, but this would be a great method to help people become aware of when a site has possibly been hijacked and is serving up exploits. Almost not legitimate sites out there use Java Applets anymore, so to have an audible bell telling you when mywateringhole.com has suddenly decided to push an applet at you would be hugely beneficial in identifying compromised sites.

Thank you for the awesome plugin. I promise I wil get off ny duff and finally donate if I see this feature implemented!

[Thrawn]

Nearly every site on the internet has Javascript, so basically you are getting a bell every time you visit a new site.

True. I don't use it.

What I would love to see is a sound for blocked Java Applets, or blocked Flash. Better yet, you'd be able to customize the sound for the different object types!

Interesting idea...am not sure how much it would add to the codebase size (probably not a lot).

It's not something that matters to me personally, but it sounds worthwhile.

[Giorgio Maone]

It's not something that matters to me personally, but it sounds worthwhile.

Low priority TODO.

[shutin]

It's not something that matters to me personally, but it sounds worthwhile.

Low priority TODO.

Awesome! You've motivated me to motivate you by donating finally.

My interest in this feature was borne out of a desire to finally have some notification you are actually visiting an honest-to-god attack site. For instance, why is there no "metasploit browser autopwn" detector plugin? Sure, NoScript will block Java and Flash, but for Pete's sake, why can't there be some kind of alarm system that lets you know when a page just tried to shove 8 different java applets at you in one sitting? Let's be honest, there is very little room for a false-positive in that scenario. It's pretty ridiculous that it's so incredibly easy to write these attack pages but detection is this huge guessing game that takes serious knowledge to uncover. We shouldn't be stuck relying on google bots and automated scanners to discover compromised hosts. Let's bring power back to the PEOPLE by giving them simple tools to recognize when something definitely isn't right. I want my mom to be able to run Noscript (with the bare minimum settings because theres no way she has the patience to manually allow all sites) with the instructions "mom, if you hear the Applet dong noise, that site is BAD! You just got saved from an infection where'd I'd have to reinstall windows (again)!

For example, Alice visits Bob's small time blog that she trusts once a week. One day she visits and log and behold, the Applet Bell dongs and she knows that hey, that's not typical. She emails Bobs to tell him "Bob, why are you serving Java Applets? Do you know how unsafe those are! You could be losing tons of visitors because they are afraid to visit you!" Bob proceeds to freak the #@$# out because he knows he didn't install such a thing and discovers his site was compromised and promptly fixes it and prevents untold numbers of his precious userbase from becoming infected.

Yeah I know a bell is minor but I'm just sick of how stupidly easy these exploits are to serve up, yet how difficult it is to see that they were loaded behind the scenes for your average user. BRING ON THE DONGS!

[Thrawn]

Hmm...a generic 'active content on this site has changed' indicator/blocker is an interesting idea. Kind of a similar idea to Certificate Patrol, which monitors security certificates and alerts you if they change.

Unlike the first request, this would undoubtedly add quite a lot to NoScript's size, and might be well suited to a separate addon.