Page 1 of 1

Independent assessment of noscript?

Posted: Sun Mar 16, 2014 5:30 pm
by chimpscript
Hi folks,

Like most users here im concerned with my online security. My main concern is the ability of browser extensions to steal users passwords. Has noscript been independently audited to ensure its only blocking unwanted scripts, and not taking/storing user passwords/data?.

Im in no way saying it is, but extensions have been compromised before

http://tinyurl.com/2c6qwgx

I know the source code is available to view, but we are not all coders.

Many thanks. :mrgreen:

Re: Independent assessment of noscript?

Posted: Sun Mar 16, 2014 8:30 pm
by Hecuba's daughter
nvm

Re: Independent assessment of noscript?

Posted: Sun Mar 16, 2014 9:12 pm
by chimpscript
Thank you kindly for that. I guess Its interesting that security ultimately rests on the fact, that you must trust someone eventually.

Cheers. :D

Re: Independent assessment of noscript?

Posted: Mon Mar 17, 2014 12:53 am
by Thrawn
You can, of course, disable automatic updates and always wait before manually updating, to ensure that there is time for anything untoward to get caught.

But I trust Giorgio with my web.

Re: Independent assessment of noscript?

Posted: Mon Mar 17, 2014 2:47 pm
by therube
> the ability of browser extensions to

To.
To do whatever they want.
And since they can, any of them, all should be suspect.
So if you don't trust the measures already in place to watch out for this, & if you're not able to decipher it yourself, then best not to use any extension you have doubts about.