Page 2 of 2

Re: Need to remove a Javascript pop-up notice

Posted: Sun Sep 13, 2015 11:11 pm
by barbaz
arcadian wrote:is there any simple basic info for us types anywhere I can read as to what NS does and aims to do ?
The simple explanation of what NoScript does & aims to do, is to make your web browser MUCH more secure.
I'm not sure that's the answer you were looking for, and if I explain more details you probably won't consider it "simple basic info"... so I'm not sure I understand the question... Image
arcadian wrote:Also what does ABE and XXXs mean ?
ABE
By default it just blocks websites from accessing anything on your local network.

XSS = Cross-Site Scripting. Basically it's when one site (attack site) tries to have its scripts run by another site (victim, usually sensitive site in some way) when this is not intended by the webmaster of the victim site, using users' browsers as the means to attack rather than attempting hacking the site.
arcadian wrote:Anyway first thing I did when it happened was to contact the bank who said it was nothing to do with them, which with hindsight was ridiculous given what you've just told me. Instead they should have automatically told me to immediately report it as a security breach but they didn't ! So now to report it to the bank as I simply daren't tamper with anything....
Well, when you first reported this you were probably just saying that this notice came up, which yes, they would reply that it's not their problem. There's no reason to think it's a site security hole from that description.
Now, you can report that it's the result of NoScript preventing them using a highly insecure practice. You should get a different response.
Oh, and I would suggest you give them the link to this thread if possible.
arcadian wrote:Again many thanks will keep you posted....!!!!!! :)
You're welcome & thanks.

Re: Need to remove a Javascript pop-up notice

Posted: Mon Sep 14, 2015 1:47 pm
by arcadian
Yes much clearer all round thank you though still hopelessly lost with all the technical stuff ! :)

Bank said the same as before basically it's my end so after a bit of googling etc. pretty sure they're right and as you might have said probably a browser hijack.

I've now tried just about every cleaner going with no luck, so will get my repair guy to do it who's been in the business over 30 years. However I did discover as a temporary work around that refreshing Firefox completely worked fine, though only after I also discovered you have to mark the Bank as untrusted to begin with otherwise you have to keep on refreshing Firefox !

Will let you know what he finds and recommends later on....

Thanks again ! :)

Re: Need to remove a Javascript pop-up notice

Posted: Mon Sep 14, 2015 2:10 pm
by barbaz
arcadian wrote:Bank said the same as before basically it's my end so after a bit of googling etc. pretty sure they're right and as you might have said probably a browser hijack.
Hang on... you're saying that they *can't* reproduce this issue with Fx + NS - as when they try it, they neither A) have anything writing to window.name in such a way that NS complaining about it when testing it out, nor B) have the browser trying to download something that looks like it was once a javascript: URI?

Because with the information we now have, that is the only way that they could reasonably say the problem it's on your end.
arcadian wrote:However I did discover as a temporary work around that refreshing Firefox completely worked fine, though only after I also discovered you have to mark the Bank as untrusted to begin with otherwise you have to keep on refreshing Firefox !
Resetting Firefox completely sounds too extreme to me. You can reset only NoScript by going to NoScript Options & clicking Reset (on the very bottom)...

Re: Need to remove a Javascript pop-up notice

Posted: Mon Sep 14, 2015 2:37 pm
by arcadian
barbaz wrote:Hang on... you're saying that they *can't* reproduce this issue with Fx + NS - as when they try it, they neither A) have anything writing to window.name in such a way that NS complaining about it when testing it out, nor B) have the browser trying to download something that looks like it was once a javascript: URI?

Because with the information we now have, that is the only way that they could reasonably say the problem it's on your end.
No sorry it's the main help desk in London over the phone dealing with general account queries who are only allowed to access customer's accounts, and nothing to do with the internet which as a newbie I'd originally thought was a possibility.
barbaz wrote:Resetting Firefox completely sounds too extreme to me. You can reset only NoScript by going to NoScript Options & clicking Reset (on the very bottom)...
Thanks for the tip....