InformAction Forums

Hi users of NoScript,

Another issue where we should be glad we have the additional protection of NoScript, you won't get Rickrolled when you venture out here: http:// 1227.com/
With Fx without NS you are vulnerable to this Browser exploit: JOKE/BrowserMessage or Joke.NoClose JS
the endless alert popup ...
AV Scan Status: Virus: Virus: Joke.NoClose.JS.A
APH Scan Status : not phishing
JS Scan Status : not malicious

It's strongly recommended that you navigate away without NS; it should be the browser that prevents the captive loop really- Opera does, but Firefox still doesn't. I am not aware anyone launched a bug report for this jokeful annoyance. Good NS protects us here, thanks Giorgio Maone,

luntrus

luntrus wrote:I am not aware anyone launched a bug report for this jokeful annoyance.

Preventing a rogue web page from taking control of Firefox with an Alert popup has been requested in bugzilla already, luntrus -- probably many times. If you'd like to check on its progress, a search in https://bugzilla.mozilla.org will find it.

Edit: Here are a couple I already had bookmarked.
https://bugzilla.mozilla.org/show_bug.cgi?id=123913
https://bugzilla.mozilla.org/show_bug.cgi?id=59314

Hi Alan Baxter,

Thanks for the additional info here, so these issues have been with us quite some time now and they will not be going away either soon.
Here is how they tackled the issue in GoogleChrome while getting alert 1: https://bug61098.bugzilla.mozilla.org/a ... ?id=377667
And indeed as you posted when we search for these infinite loops there are quite some bug reports. Nonetheless NS inside the browser is very helpful here,

luntrus

luntrus wrote:Nonetheless NS inside the browser is very helpful here

Absolutely! In my NoScript test profile, NoScript blocked the script which was preventing me from closing the tab or Firefox.

Hi Alan Baxter,

This is the particular bug filed against this particular rickroll.swf:
https://bugzilla.redhat.com/show_bug.cgi?id=439858
The site it was on was non-malicious: http://wepawet.iseclab.org/view.php?has ... 96&type=js

luntrus

Hi Alan Baxter,

For April Fool's Day Sophos launched their RickRoll Protector: http://www.f-secure.com/weblog/archives/00001924.html

luntrus