InformAction Forums

I've searched the set of noscript forums; didn't find this issue.

I'm an expert techie in several applications, and have reasonable to good or better operating system knowledge. I'm surprised at how difficult a time I'm having in trying to determine how to implement, and whether I've implemented, the advice Startpage.com provides, to "Disable Scripts from startpage-proxy.com and its subdomains", which I'm interpreting as meaning to blacklist or mark as untrusted startpage-proxy.com.

https://startpage.com/uk/disable-script ... tions.html

says in part:

The Startpage Proxy prevents most security problems by removing most Javascript code from the proxied pages.

For added security Startpage recommends disabling Javascript, Java, Flash and other scripting from the entire startpage-proxy.com domain and its subdomains.

To do so:
1. Make sure you are using the Firefox Web Browser
2. Install the NoScript Add-on

3. For greatest ease-of-use, configure NoScript to:
A. Allow Scripts Globally, and
B. Disable Scripts from startpage-proxy.com and its subdomains.

I'm using Firefox
I installed NoScript

I initially didn't notice the icon. (I suggest supplementing the instructions, including providing a picture of the icon.)

Even after finding the icon, I'm not seeing what I think I should, and I'm doubtful that I've blacklisted startpage-proxy.com.

Problems/symptoms:

1) I don't see an Untrusted tab in my noscript options.

2) I gather that a way to blacklist a not-yet-blacklisted site is to (a) be at or go to that site, (b) click the noscript icon, and (c) click the first selection, which will be "Mark [sitename] as untrusted." However, that didn't work regarding startpage-proxy.com. I went to the site (and got a "Server not found" screen, which arguably would confuse many users), and clicked/hovered over the icon, but the resultant menu options didn't include to mark it as untrusted.

3) FYI, I overall was concerned in that startpage provided what seemed on paper to be straightforward directions, yet that--after I installed noscript--I realized left so much unstated. After I installed, and didn't notice the icon, I looked around for instructions. I ultimately found some by using medium/advanced googling skills. This would be way too much for many users.

FUrther to the above (I'm being lazy and not taking time to integrate this in the above write-up).

http://noscript.net/features#blacklist
says in part,

"If you know you don't want to allow a certain site now and in the foreseeable future, you can permanently mark it as untrusted: just click the NoScript icon, open the Untrusted menu and select the Mark bad-site.com as Untrusted menu item."

BUt when I click the icon, for example as I just now did at www.marksmith.com (which I chose at random, which I realize is a bit dangerous, but take that as a sign of my being frustrated about this), there is no "untrusted" menu. The only options are:

-- a number of "Mark [sitename] as untrusted"
-- recently blocked sites
-- forbid scripts globally
-- options...
-- about NoScript 2.6.8.1


My requests/suggestions:

Please tell me, how to get to the untrusted menu.
If, as I suppose could be the case, the problem is that my install is faulty, please advise. FYI Firefox's Help->About says I have 24.0 and that it's up to date.

StartPage.com, please consider providing very specific instructions as to how to implement the steps that are at the "instructions" page.

Please advise, am I correct in interpreting Startpage.com's instructions to "Disable Scripts from startpage-proxy.com and its subdomains", as meaning to blacklist or mark as untrusted startpage-proxy.com? If so, then Startpage.com, please state those terms ("blacklist" and "mark as untrusted"). If not, then please advise, what might startpage.com mean by "Disable Scripts from startpage-proxy.com and its subdomains"?

noscript, I suggest that at the following FAQ, you add a picture/photo/screenshot of the NoScript toolbar button (or perhaps a picture of each incarnation of it):

"3.2
Q: I cannot find the NoScript toolbar button. Where is it?
A: Right+click on any toolbar and choose the "Customize" menu item.
A window will appear where you'll find the NoScript button: just drag and drop it on the toolbar you prefer. "

Thanks for reading, and for any responses.

> 1) I don't see an Untrusted tab

Won't display unless you have specifically denied Forbidden a domain.

> 2) startpage-proxy.com

hmm.
Perhaps if on the Whitelist tab, if 'Allow' did more, like if it had a Forbid (or Mark As Untrusted...) or side dropdown for that button...?

> 3.2 Q: I cannot find the NoScript toolbar button. Where is it?

I believe that is referring to the NoScript icon.
Which should be there.
Always is in SeaMonkey, Though I have seen it go AWOL in FF?
Perhaps, http://forums.informaction.com/viewtopi ... =7&t=17202

Please tell me, how to get to the untrusted menu.

The FAQ instructions for marking a site as Untrusted assume you are in the default 'Forbid Scripts Globally' mode.
Since you are in Scripts Globally Allowed mode, you don't use the Untrusted submenu. Instead, simply use the 'Forbid xxx' menu items.

As documented on the Features page, the Options dialog does not have a GUI for the blacklist (there is no Untrusted tab). You can edit it manually by exporting your NoScript options, editing them, and re-importing them, if you want.

StartPage.com, please consider providing very specific instructions as to how to implement the steps that are at the "instructions" page.

I'm disappointed that Startpage recommended the Scripts Globally Allowed mode. If you want safety, then it doesn't make sense to block Startpage (which is probably safe) and whitelist the rest of the internet (which may be dangerous).

Please advise, am I correct in interpreting Startpage.com's instructions to "Disable Scripts from startpage-proxy.com and its subdomains", as meaning to blacklist or mark as untrusted startpage-proxy.com?

Yes.