Page 2 of 2

Re: BBC iplayer wants to run amazon scripts by direct IP add

Posted: Wed Aug 19, 2015 7:49 pm
by barbaz
My point there is that the fact it's registered to Amazon doesn't mean much, because Amazon AWS hosts other people's content, meaning *not* Amazon stuff.

Re: BBC iplayer wants to run amazon scripts by direct IP add

Posted: Wed Aug 19, 2015 7:55 pm
by Richard (MQ)
DJ-Leith wrote:Richard,
you are welcome, I enjoy a puzzle.

1 of 2

Three additional points.

1. Extension for blocking outgoing requests.

The advantage of an Extension to 'block requests' is the UI is easy to use and, with RPC, it is easy to see
'which domains are blocked'. I'm much less familiar with uBlock.

With RPC it blocks 'all requests' to the 'other domain', not just scripts.
I just realised that I don't know what this "RPC" that you are referring to is?
Fix for installing unsigned add-ons in Firefox Dev and Nightly
http://www.ghacks.net/2015/08/04/fix-fo ... d-nightly/
This is useful to know! Thanks.
So I use RPC to TA

Code: Select all

*.ghacks.net to *.ghacks.net
(requests TA TO same domain and sub-domains of ghacks ONLY from ghacks) the pictures are shown. Still no JS is allowed. I didn't allow JS on this visit, I did see 'everything I wanted to see'.
I am keen to try this.
Richard, my "noscript.untrusted", on all my Profiles, is EMPTY because RPC is 'blocking before NS even has a
chance to assess if the content is active'. NS never even sees it, unless I went to the site or I allowed site A
to send requests to Site B. Of course, if NS never saw it neither did I (LOTS of Adverts are blocked) and
pages load faster too.
Yes, I see the advantage of this.
2. I hope you saw the advantage, especially when testing, of having a separate Profile.
Anything you 'allow' is confined to that Profile (either TA or added to the Whitelist).
And of this!
Many thanks
Richard

Re: BBC iplayer wants to run amazon scripts by direct IP add

Posted: Wed Aug 19, 2015 8:38 pm
by DJ-Leith
barbaz wrote:My point there is that the fact it's registered to Amazon doesn't mean much, because Amazon AWS
hosts other people's content, meaning *not* Amazon stuff.
I agree, barbaz put it better than I did. :)

I've been talking about the likelihood of the BBC hiring [computer] resources from Amazon
(for short-term 'live sports events' where there is likely to be 'sudden peak demand').

> I speculate that the BBC might use (hire) resources from Amazon ...

> ... the BBC 'book an Amazon resource' just ...

> ... to one of the BBC's 'hired 52.x.x.x addresses' ...

I believe Mozilla also use AWS for some of their infrastructure.
Richard (MQ) wrote:I just realised that I don't know what this "RPC" that you are referring to is?
Sorry, my jargon in looooong posts: RPC is RequestPolicy Continued.

> All my Profiles have NoScript (NS) to block Javascript (and other active content) and
> RequestPolicy Continued (RPC) to block all outgoing requests from the 'site I appear to be on',
> as seen in the 'URL bar', to other sites.

I used:
RequestPolicy Continued 1.0.beta10 (which I have called "RPC" for short)
https://requestpolicycontinued.github.io/

for all the tests (and in all my browsing).

Have a read of the RPC wiki
https://github.com/RequestPolicyContinu ... olicy/wiki
and the RPC quick start
https://github.com/RequestPolicyContinu ... Quickstart
to get some idea of what it is like before you try it.

DJ-Leith

Re: BBC iplayer wants to run amazon scripts by direct IP add

Posted: Thu Aug 20, 2015 7:18 pm
by therube
(Oh, & speaking of Amazon [EC2], Multiple Vulnerabilities in Pocket.)