Slashdot Mirror


NoScript Awarded $10,000

An anonymous reader noted an interesting bit of information about a tool a ton of Slashdot users make use of every day: "NoScript has been chosen as the recipient of the DRG Security Innovation Grant. This is a great honor and a spur to keep making the Web a safer place. I feel the urge to thank the committee for recognizing NoScript as a pioneering force in browser security, and the community of contributors, researchers, translators, beta testers, and loyal users who keep this project alive day after day. The grant will fund the effort to merge the current two development lines, i.e. 'traditional' NoScript for desktop environment."

178 comments

  1. Should have been a default in browsers from day 1 by elrous0 · · Score: 5, Insightful

    The fact that this ever had to be an *add-on* is just shameful. The fact that IE and Safari still don't have it (or something very similar) is close to criminal. Okay, Chrome has NotScripts, but that apparently requires some weird hacking to use securely.

    And, no, the non-default ability to turn *all* scripts on or off isn't even close to the same thing. As the great Jules would say--it's not the same ballpark, not the same league, not even the same sport.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
  2. Did they also get a grant... by twocows · · Score: 3, Informative
    1. Re:Did they also get a grant... by improfane · · Score: 1

      Yes, the author does not have a good track record.

      He apologized for it but you do have to wonder. Money blinds.

      --
      Slashdot needs Geekcode | Can anyone recommend any good SCIFI? My tastes: Foundation, Startide Rising, CITY, Ringworld,
    2. Re:Did they also get a grant... by Anonymous Coward · · Score: 5, Insightful

      Yes, two fucking years ago the guy made a poor decision in the heat of the moment which he later apologized for. We should definitely crucify him for it forever.

    3. Re:Did they also get a grant... by twocows · · Score: 5, Insightful

      It certainly was a while ago and he did apologize (after the backlash), and I agree that we shouldn't hold it against him forever. Still, I tend to be wary of NoScript these days because of it. I'm not sure I would trust someone who abused his position like that with a $10k grant is all. Maybe I'm being unreasonable, but I don't think it's a big leap to think that someone who abused their position for monetary gain once might do so again. And it's definitely something that I think people who use NoScript should know about, old or not.

    4. Re:Did they also get a grant... by Baloroth · · Score: 3, Interesting

      Maybe not. But, it definitely raises questions about the guy's integrity. And, you can't help but wonder if this hadn't been noticed and created massive outcry, whether he would have apologized at all, or whether he was just imitating large corporations policy of "hope they don't notice, apologize if they do."

      Oh yeah, and why one addon is able to make changes to another in Firefox without notifying the user. I haven't used Firefox much (prefer Opera), but is this still possible? If it is, why? Seems like a pretty large security problem. The answer is obviously only to install trusted addons, but if even a major addon like this has a history of doing it, what can you really trust?

      --
      "None can love freedom heartily, but good men; the rest love not freedom, but license." --John Milton
    5. Re:Did they also get a grant... by Microlith · · Score: 4, Insightful

      So he has a stupid spat with the guys at AdBlock Plus. So what?

      People make stupid mistakes every once in a while. He apologized, and hasn't done anything dumb since. In the meantime, NoScript has continued to be a valuable tool that I add to every Firefox installation I use (well, all once he adds support for Firefox Mobile.)

    6. Re:Did they also get a grant... by Anonymous Coward · · Score: 1

      (well, all once he adds support for Firefox Mobile.)

      NoScript 3 alpha for Mobile here

    7. Re:Did they also get a grant... by drsmack1 · · Score: 1

      Good thing you are posting anonymously, betcha don't want to get caught again!

    8. Re:Did they also get a grant... by TheVelvetFlamebait · · Score: 1

      Two years! Wow, they practically get a free ride in /. terms! If Microsoft could have had a two year grudge period, back when they did things wrong...

      --
      You know, there is a difference between trolling and pointing out the flaws in your reasoning. Just saying.
    9. Re:Did they also get a grant... by Anonymous Coward · · Score: 0

      Yes, not getting $10k is certainly a crucifixion.

    10. Re:Did they also get a grant... by tlhIngan · · Score: 1

      Maybe not. But, it definitely raises questions about the guy's integrity. And, you can't help but wonder if this hadn't been noticed and created massive outcry, whether he would have apologized at all, or whether he was just imitating large corporations policy of "hope they don't notice, apologize if they do."

      Who cares about the guy's integrity? After all, NoScript is open-source and isn't that the important part?

      If you don't trust the guy, take the latest revision (it's GPLv2+ and the source is in the XPI file), and fork it - isn't that the whole point of open source? Considering we've got LibreOffice forked when Oracle acquired Sun and OpenOffice. I don't see why we can't have FreeNoScript as well.

      Don't trust it, fine, but when its usefulness is there and it's open-source, I don't see why a more trusted version can't be created. Heck, I'm surprised no one has created a malware version of NoScript.

    11. Re:Did they also get a grant... by Anonymous Coward · · Score: 0

      YMBNH

      Once true is always true on the never forgetting Internet.

      For example, Linux 2.4 had poor hardware support. This fact makes the following also facts: Linux 3.0 still has poor hardware support, its amazing it works on anything at all. Anyone that does manage get Linux working with their hardware has to patch their Kernel using vi.

      This extends to all kinds of useful tactics which you can use to "inform" others about essential truths.

      1. State an undeniable fact.
      2. Then, state as fact something you would like to be true for the sake of your argument. (Hint it doesn't actually have to be true.)
      3. When they try to "correct" you, simply point out how right you are about your first point. This will weaken their resolve since they won't be able to counter your rightness. Remember, the appearance of certainty alone is often enough for a +5 informative.
      4. In all caps use either "WOW", "REALLY???", or combine the two for extreme effect. Expressing amazement at an apposing view point is a strong bullet point for any attempt to win the Internet. Often entire arguments can be summed up with those two words.
      5. Always state that you have many years of experience (even if the technology isn't that old).
      5. Use at least two buzz words associated with article summary especially if they are ambiguous. Then use a buzz word from another reoccurring shashdot discussion. It doesn't have to be relevant, just use it. Sounding technical is the same as sounding certain.

      Welcome to the intertubes, dude. Here's your diploma.

    12. Re:Did they also get a grant... by interkin3tic · · Score: 1

      Dude writes one of the most useful extensions ever to most people who uses it, protecting millions, lets the world use it for free, makes one questionable move, apologizes for it a few days later, continues making useful product...

      And people act like he's a scumbag.

      If you feel hurt by his actions, you get a free year of using noscript. You can use it all you want and don't have to pay him a dime. If you've donated a reasonable amount in the past, you can whine about it. If you were using noscript for free, THEN SHUT THE FUCK UP.

    13. Re:Did they also get a grant... by hedwards · · Score: 1

      If MS had only made one mistake 2 years ago, I doubt very much that we'd be after them to this extent.

    14. Re:Did they also get a grant... by Baloroth · · Score: 1

      We can. But, unless you, personally, look through the source code, you can't be sure that that is any more trustworthy than the version that already exists. In fact, it might even be less so, if simply because fewer people use it (and, as you say, nothing prevents someone making a malware version and calling it "FreeNoScript"). And frankly, I have little desire in having to do so.

      Of course, being open source and popular means that I can usually trust someone to look at it and call out any problems, and I trust most open source sources, but its always possible for it to have malware behavior, and its part of the reason I am wary of ANY addons or extensions at all, though I do use a few in Opera. Extensions just happen to be particularly bad as they are usually done by one or two random people whom I have no particular reason to trust.

      --
      "None can love freedom heartily, but good men; the rest love not freedom, but license." --John Milton
    15. Re:Did they also get a grant... by melikamp · · Score: 1

      As much as I loved NoScript, I uninstalled it the moment the story broke. But After reading Giorgio's apology I was totally convinced that he meant no harm and learned his lesson, so I reinstalled NoScript only a few days later.

    16. Re:Did they also get a grant... by Mister+Whirly · · Score: 1

      I don't doubt it at all. People can take any problem no matter how unrelated and still blame Microsoft here.

      --
      "But this one goes to 11!"
    17. Re:Did they also get a grant... by Anonymous Coward · · Score: 0

      The problem is that microsoft can't go 2 years without pulling some kind of shit, or getting caught doing some sort of shit.

    18. Re:Did they also get a grant... by Anonymous Coward · · Score: 0

      If you've donated a reasonable amount in the past, you can whine about it. If you were using noscript for free, THEN SHUT THE FUCK UP.

      You have a bizarre and shallow view of the world. If at any point in your life you had learned anything about ethics, you would actually understand the issue at hand. It isn't your fault that you don't. Not everyone gets the education they should.

    19. Re:Did they also get a grant... by interkin3tic · · Score: 1

      Can't tell if trolling or just extremely bad at explaining your position... the guy has done plenty of penance is what I'm saying.

    20. Re:Did they also get a grant... by Anonymous Coward · · Score: 0

      Writing a user-hostile feature into your app is "in the heat of the moment"? I should think that NO programming counts as that -- it takes enough time for you to consider what you're doing.

  3. Recognition vs usefulness by DeHackEd · · Score: 4, Interesting

    Does this mean web designers will start making their web sites actually work when users without javascript try to use them?

    (The list of offenders is too long to name.)

    1. Re:Recognition vs usefulness by betterunixthanunix · · Score: 2

      How dare you speak that kind of blasphemy against web 2.0! Do you not see how using javascript for everything is improving the user experience and making the world a better place?!

      --
      Palm trees and 8
    2. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      Why should they? JavaScript, while being a fairly unpleasant language to write, is extremely helpful for making useful, clean, modern websites. It just can't be done without AJAX.

      Looking at static pages and using traditional forms is cute, but it doesn't cut it anymore.

    3. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      No they will keep the status que. Don't want to run our scripts, fuck you gtfo.

    4. Re:Recognition vs usefulness by space_jake · · Score: 1

      Don't let the comedic animated gif hit you on the way out.

    5. Re:Recognition vs usefulness by Bengie · · Score: 2

      AJAX reduces server load by removing excess postbacks. Pretty much any interactive website.

      The problem are websites that don't require postbacks but use Javascript for random crap.

    6. Re:Recognition vs usefulness by 6031769 · · Score: 5, Insightful

      JavaScript [...] is extremely helpful for making useful, clean, modern websites.

      I'll see your "useful, clean, modern" and raise you "glacial, bloated, bug-ridden".

      Both JS and non-JS sites can be written well or poorly, and I'm not averse to a little javascript where it demonstrably improves the user experience, such as auto-focus into form fields for example. However, the problem is that some designers/developers just don't know when to stop, and seemingly only test their results on a gigabit LAN with a browser on their quad-core monster. As a consequence they think nothing of pulling in scripts and libraries from half a dozen sources and then proceed to use only one tenth of that code in the page. Frequently I see JS code where the whole way through it keeps testing over and over again for specific user agents so that it can choose which hackish workaround to employ instead of testing once and pulling in a brower-specific library. I have a 10Mbps broadband connection here and some pages take longer to load and render than they did 15 years ago.

      Good designers and devs can produce excellent JS-based sites. But the other 99% are just a struggle to use and a good proportion of those are close to unusable.

      --
      Burns: We're building a casino!
      McAllister: Arrr. Give me 5 minutes.
    7. Re:Recognition vs usefulness by PPH · · Score: 1

      lynx, is that you?

      --
      Have gnu, will travel.
    8. Re:Recognition vs usefulness by wwfarch · · Score: 3, Interesting

      I don't even think using Javascript is the issue. The problem is requiring Javascript for random crap. Graceful degradation is something most websites fail to adhere to even when it's easily possible.

    9. Re:Recognition vs usefulness by Anrego · · Score: 1

      Graceful degradation is something most websites fail to adhere to even when it's easily possible.

      Not enough return on investment to be worth the bother of even thinking about it for the tiny fraction of users you turn away having a site not work without javascript.

      Web accessibility is much like building accessibility. Totally not worth the owners money (from a purely business standpoint..). Unless it's done as a PR thing (someone whines loudly enough) or the law comes by and says "look, we know it's not financially worth it for you.. but do it anyway because it's the moral thing to do" .. probably won't happen on the large scale.

      And I really hope they don't legislate web accessibility! I think it's a great idea... but I have a feeling any laws mandating web accessibility would be so broken and ass-backwards that they would just make things worse.

    10. Re:Recognition vs usefulness by hedwards · · Score: 4, Insightful

      Javascript itself isn't the problem so much as the tendency to need to allow javascript from 20 or 30 sites just to view a page in its entirety. Typically they don't tell you what sites they genuinely use so if you don't recognize the domain name then you don't have any way of knowing if it's intended to be executed by the web devs.

    11. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      > Does this mean web designers will start making their web sites actually work when users without javascript try to use them?

      I am the author of a web application, and the whole application is centered around a third-party API that is only available as a Javascript library. As much as I would like to honor your preferences -- and much more important, as much as I would like to make my site accessible to the visually impaired, just for the sake of not being an ass -- I simply cannot.

      I'm still wondering why the web designers get the blame for such a situation.

    12. Re:Recognition vs usefulness by Requiem18th · · Score: 2

      I've come to realise this was a huge blunder from the beginning of the web.

      Remember how we took so long to make a standard for moving fonts over the web? We could have done so much better if we only had invented a way for a page to contain the required fonts, and images, and scripts.

      Loading a web page basically means code injection. Even without javascript, every "src=" in a web page is code executed in your host, as commanded by an untrusted source.

      But alas, we were too concerned with net load. We had to, the net was very slow back then. However, as long as the same origin policy is honoured the risk of loading external resources is --I suppose-- null. And assuming your browser is properly sandboxed, so is running scripts.

      In my opinion, and I might be wrong, what's wrong with Javascript as long as all connections are done to the same host? RequestPolicy is, in my opinion, a much important game changer than NoScript.

      --
      But... the future refused to change.
    13. Re:Recognition vs usefulness by b4dc0d3r · · Score: 3, Interesting

      I leave sites when they require JS, and follow up by sending them a screenshot of me placing an order on a competitor's web site (with certain identifying information blanked out).

      Depending on their site design, I also point out how they spent more effort blocking script-less usage than it would have taken to have a graceful fallback. That's not always the case, but it helps.

      I never get a reply, but I don't expect one either.

    14. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      +1 and of course ./ is an example of just how well a site can work without JS

      *clears throat*

    15. Re:Recognition vs usefulness by atomicbutterfly · · Score: 1

      This seems like a lot of time/effort/trouble for what you even admit doesn't get any result or feedback from the owners of the offending site.

    16. Re:Recognition vs usefulness by Mandrel · · Score: 1

      My primary reason for using No Script is not security but to eliminate distracting content animations and auto-play videos.

    17. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      I leave sites when they require JS

      So, what are you doing here?

    18. Re:Recognition vs usefulness by DaVince21 · · Score: 1

      JS is extremely helpful to enhance modern websites. It should not keep you from seeing all information a web page provides, however, which is something that just happens all too often. This is Design 101.

      --
      I am not devoid of humor.
    19. Re:Recognition vs usefulness by DaVince21 · · Score: 1

      Que?

      --
      I am not devoid of humor.
    20. Re:Recognition vs usefulness by DaVince21 · · Score: 1

      Even then, you'd damn well make sure the website works even if someone turned off scripts.

      --
      I am not devoid of humor.
    21. Re:Recognition vs usefulness by Anonymous Coward · · Score: 0

      Javascript makes it a lot easier to be tracked, go here with javascript enable and with it disabled, and note the difference in how much information they can glean from your browser, information which can be used to identify and track you.

    22. Re:Recognition vs usefulness by Requiem18th · · Score: 1

      Also, slashdot's javascript makes it impossible to click on links. Or write comments.

      --
      But... the future refused to change.
  4. sad by orange47 · · Score: 1

    its sad that we have to remove functionality to be more secure. I do like noscript and use it all the time, but the problem is more and more websites require js for simple tasks. wish there was a better way, for eg using user interaction to select which part of js are 100% ok or something like that. or perhaps whitelisting md5sums of common scripts (if that hasn't been already done). ironically, posting this comment seems to require some scripts turned on.

    1. Re:sad by hedwards · · Score: 1

      It's a phase that's looking more and more like a new normal. We were lucky with those huge painterly sites of the late 90s that they eventually went away. Sure they looked cool, but on a dial up connection they'd take 20 minutes to fully load.

      Now, sites take 20 minutes to load because they've got to load content from all over the web and frequently the slowest things to load are the ads. Each hop from server to server takes more time and with the sites pulling in stuff from other sites it can easily stall out if you're doing anything else with your connection.

  5. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 2, Insightful

    For safari: Glimmer blocker is both an ad blocker and can deny and or rewrite scripts on the fly.

  6. Help with NoScript updates by Anonymous Coward · · Score: 0

    For some reason I seem to be on the testing branch, receiving different release candidates almost every day. How do I switch to the stable branch where I get to run only final versions?

    1. Re:Help with NoScript updates by DaVince21 · · Score: 1

      Remove the version you have installed, restart Firefox, go to the Firefox addons page for the non-RC NoScript addon.

      --
      I am not devoid of humor.
  7. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 1

    The fact that this ever had to be an *add-on* is just shameful.

    As long as it's disabled by default. It'd make more sense for Adblock Plus to be integrated by default with ad/privacy lists added. NoScript is still a usability-destroying sledgehammer unfortunately. I haven't been able to find a reason as to why I should keep it installed and endure the headache.

  8. They will probably celebrate with a new version by ydrol · · Score: 1

    Any excuse for those page hits. Good tool though, but I switched of the bit that opens the home page every time there is a new "important" update.

    1. Re:They will probably celebrate with a new version by psyclone · · Score: 1

      I like watching changelogs, to see what holes were patched. With NoScript, the right pane shows the changes -- new attack vectors are blocked all the time. (At this point they are mostly minor, but still crazy that default browser security with respect to local and remote script invocation is nearly non-existent.)

  9. Re:Why I don't use NoScript by JBMcB · · Score: 4, Insightful

    That's too bad, because it's awesome. I haven't found anything else that comes close to how flexible and easy to use it is.

    As far as trust goes - I trust the developer of NoScript over the entirety of the javascript code injected by advertising and tracking agencies out there.

    By the way - did you read the NoScript developer's mea culpa?

    --
    My Other Computer Is A Data General Nova III.
  10. MOD PARENT UP by mdm42 · · Score: 0

    Please.

    --
    New mod option wanted: -1 DrunkenRambling
  11. Re:Why I don't use NoScript by NoNonAlphaCharsHere · · Score: 0

    I've tried to use it four or five times through the years, and I always end up removing it almost immediately. I find the UI to be confusing (and just plain bad) to the point of uselessness, and the damn thing wastes more CPU cycles running than the wild JavaScript it purports to block.

    I'd like it much better if browsers themselves simply didn't execute any JavaScript from any inactive tabs/minimized windows.

  12. Re:Why I don't use NoScript by grommit · · Score: 3, Insightful

    Even though the author recognized his mistake, backed out the changes, and apologized profusely in a very public manner you still don't trust him? Harsh man, harsh.
    http://hackademix.net/2009/05/04/dear-adblock-plus-and-noscript-users-dear-mozilla-community/
    I'd rather not blacklist somebody over a single incident. However, if you happen to know of other instances where he did something sketchy, please let us know.

  13. Not the holy grail of browser security by Quick+Reply · · Score: 0

    There are plenty of vulnerabilities found that do not need scripts, lets not make NoScript out to be more than what it is.

    1. Re:Not the holy grail of browser security by Anonymous Coward · · Score: 0

      While you are correct, running NoScript prevents you catching most of the script based malware ...

    2. Re:Not the holy grail of browser security by Anonymous Coward · · Score: 2, Informative

      here are plenty of vulnerabilities found that do not need scripts

      For many of them (e.g. Clickjacking or cross-zone CSRF with DNS rebinding) NoScript features specific countermeasures which go far beyond script blocking.

      Furthermore NoScript blocks plugins, XSLT, HTML5 media and web fonts on untrusted sites, which reduces the attack surface to HTML/CSS parsing or image decoding vulnerabilities, relatively rare nowadays. And even those, usually, still require scripting to be exploitable on modern systems (e.g. for heap spray preparation).

    3. Re:Not the holy grail of browser security by schwit1 · · Score: 1

      No browser is perfect, but all other things being equal NoScript makes the web a far safer place. Include Adblock and not running the browser as an admin, and you are pretty safe.

    4. Re:Not the holy grail of browser security by CCarrot · · Score: 4, Insightful

      There are plenty of vulnerabilities found that do not need scripts, lets not make NoScript out to be more than what it is.

      I'm sorry, I've got to call BS. That's like saying "There are plenty of illnesses out there that aren't virus-based or bacterial, so let's not make washing our hands out to be more important than it is."

      Fact is, NoScript is an invaluable resource, with a clear, easy-to-use interface, and even the less-than-tech-savvy user can use it to vastly reduce their chance of 'catching' something. Yes, it does not provide perfect protection from everything, but I'm afraid the only way you can achieve that is to pull the plug on teh interwebs and live in your own virtual 'bubble'.

      I for one applaud this award as well-deserved. Good on them!

      --
      "I love animals! Some are cute, others are tasty, what's not to like?" - Betsy Schroeder, Jeopardy contestant
    5. Re:Not the holy grail of browser security by couchslug · · Score: 1

      "My condom won't stop buckshot and is therefore useless."

      --
      "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  14. Re:Why I don't use NoScript by Anonymous Coward · · Score: 0

    Wish I could mod you up!

  15. Re:Why I don't use NoScript by Anonymous Coward · · Score: 0

    Fool me once, fool me twice...

  16. Re:Should have been a default in browsers from day by uigrad_2000 · · Score: 4, Informative

    Ghosteryexists for Firefox/Chrome/IE/Safari, and can be taught to behave as noscript.

    --
    Free unix account: freeshell.org
  17. Re:Why I don't use NoScript by ArchieBunker · · Score: 1

    Hey its open source, aren't you reading every line of code that's run on your system?

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  18. Re:Should have been a default in browsers from day by fast+turtle · · Score: 3, Interesting

    Well I love the Neutered web experience because I absolutely Hate flash/silverlight and iframes because they've been exploited to many times. As to the usability of a website, I feel that any site that absolutely depends upon flash/silverlight to be usable is one I don't need to visit again. For those business sites like Asus or HP, I've begun filing ADA (american disabilities act) complaints that the websites are no accessible to disabled users (flash doesn't support screen readers - nor does it work worth a damn for those who have even a mild vision impairment).

    Hopefully, we'll start seeing companies getting it right by sticking with Standards compliant HTML for their main pages with proper links to the various departments. There is absolutely no reason for a website to depend on anything except HTML for functionality, as it is the lowest common denominator.

    --
    Mod me up/Mod me down: I wont frown as I've no crown
  19. Re:Why I don't use NoScript by VGPowerlord · · Score: 2

    Fool me once, fool me twice...

    No, no, no.... it's
    "Fool me once, shame on... shame on you. Fool me... you can't get fooled again!" -- GW Bush

    --
    GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
  20. Re:Why I don't use NoScript by grommit · · Score: 1

    As far as trust goes - I trust the developer of NoScript over the entirety of the javascript code injected by advertising and tracking agencies out there.

    That is a very very good point.

  21. Re:Should have been a default in browsers from day by nabsltd · · Score: 5, Informative

    This, exactly. I would rather backup my machine properly and practice safe browsing habits then put up with NoScript's bullshit. Ive read for years people extolling its virtues, but i personally cannot stand the neutered web it presents.

    The whole point of NoScript is to allow you to control whether scripts run on a finer level than the "off/on" that browsers support natively, and it does that easily, with one click per domain.

    If you use NoScript to deny scripts globally, then you are using it wrong. Instead, you enable each domain (just once, as NoScript remembers the setting) that you deem safe. This makes browsing much more secure, although you can still be caught if a trusted domain starts serving malware scripts, but it's better than being open to attack from every domain.

  22. Re:Why I don't use NoScript by Bengie · · Score: 1

    They're adding in real-time socket communication to Javascript. If I was chatting with a friend and had to keep the window in focus, that would irk me. Good idea, but would definitely have to be optional. May be trusted sites?

  23. Re:Why I don't use NoScript by Anonymous Coward · · Score: 1

    Thing is I trust websites even less.

    Turned it off and surfed around for about 2 hours. 3 damn viri...

    So I surf around with a broken internet...

  24. Re:Should have been a default in browsers from day by Pope · · Score: 1

    It was. Netscape up to version 3 had menu items that would turn JavaScript on and off, and images on and off. For NS4 those were buried in the settings dialog, and were therefore not easily switched on the fly.

    --
    It doesn't mean much now, it's built for the future.
  25. Re:Why I don't use NoScript by nabsltd · · Score: 3, Insightful

    I've tried to use it four or five times through the years, and I always end up removing it almost immediately. I find the UI to be confusing (and just plain bad) to the point of uselessness

    What, exactly, is confusing about clicking one time on a menu item that reads "Allow slashdot.org" (for example)?

    The only time I find there to be a problem is when a domain loads scripts from 5-10 other domains. That does make it difficult to figure out which scripts are required to make the site functional, but that's not a problem with NoScript...that's a problem with the site. And, it's exactly this "code from random sites" that makes NoScript important for browser security.

  26. WTF... by MBC1977 · · Score: 1, Troll

    Are you stupid / dumb / bat-shit crazy / or high off of canned air?

    What the fuck...does this have to do with NoScripts?

    --
    Regards,

    MBC1977,
    1. Re:WTF... by Anonymous Coward · · Score: 0

      both noscript and the cat cut off your balls.

  27. Re:Should have been a default in browsers from day by drsmack1 · · Score: 0

    Next stop on the information highway: Nutsville, population: you

    Shame on you for mis-using the ADA for your pet peeves. Asshole.

  28. Helps prevent trojan infections by madhatter256 · · Score: 4, Interesting

    No Script helped in stemming the amount of infected PCs I received. I'd install it on my customer's PCs and showed them how it worked and that they should turn it off only when doing stuff like online banking, otherwise leave it on.

    It was of tremendous help and a lot of repeat customers stopped coming back with the same infection.

    --
    Previewing comments are for sissies!
  29. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    The ability to turn all scripts off is the same ballpark, the same league and the same sport. You're forgetting that 98% of people who use these web browsers don't know what a script is.

  30. Re:Should have been a default in browsers from day by jellomizer · · Score: 1

    For a simple reason it isn't installed by default.
    Security isn't convenient.
    The best security tools make your experience seem like you are warden of a jail house. There is only so much you can do to make them easy. The rest the company will decide not to add because it will make the app too hard to use. Especially if you need to compete with Internet Explorer. Where you need to be more secure and show that it can run all the stuff that IE can.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  31. Re:Should have been a default in browsers from day by Tolkien · · Score: 1

    I think, personally, that the fact that we even need NoScript is shameful.

  32. Flash *does* support screen readers by Anonymous Coward · · Score: 2, Informative

    I'm not a big fan of Flash on the web, but it is absolutely untrue that Flash doesn't support screen readers. http://www.adobe.com/accessibility/products/flash/best_practices.html

    What is true is that it is possible to build websites in either HTML or Flash that don't support screen readers.

  33. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 2, Informative

    It was. Netscape up to version 3 had menu items that would turn JavaScript on and off, and images on and off. For NS4 those were buried in the settings dialog, and were therefore not easily switched on the fly.

    PrefBar restores this functionality. Single-click control of images (for those not-necessarily-SFW threads), colors (for that asshat on FailSpace who thought that red on a green background was a good idea), and of course, Javashit, Java, Flash, cookies, referrer-sending, and so on.

  34. Re:Should have been a default in browsers from day by Tsingi · · Score: 1

    it's not the same ballpark, not the same league, not even the same sport.

    You know, I could use a foot massage.

  35. If nothing else, use it for speed. by dezert1 · · Score: 3, Informative

    Not having JS loading makes all pages load incredibly fast. Use it like a turbo button. That combined with Ghostery and Better Privacy make for a pretty good browsing experience (and shows you what each page is attempting to do). If you are looking for perfection, there is nothing stopping you from writing your own browser. NoScript is the biggest reason I stick with FF. Love it!

    1. Re:If nothing else, use it for speed. by Anonymous Coward · · Score: 1

      +1
      Every computer I set up gets FF and:
      NoScript (top level domains enabled),
      Adblock Plus (disabled for sites you use all the time),
      Ghostery,
      Flashblock,
      Bettery Privacy,
      Beef Taco,
      Google Analytics Opt Out,
      Advertising Cookie Opt Out,

      A quick twenty minute instructional and folks are good to go.
      And a couple of days later they thank me for speeding up their online experience. Hell, yesterday the Guatemalan short order cook at the hot dog place bought my lunch for me because of these very changes. Said the web was so much better and faster for him.

    2. Re:If nothing else, use it for speed. by tunapez · · Score: 1

      And all the ad servers and affiliates! Fecebook, Twatter, Google, Google Syndication, Google Analytics, the 3rd party adverts that malware peddlers crack regularly. Fuck that.

      NS and Live Bookmarks is why I stayed through all the post 3.5 feature bloat. I could run any stripped browser in a sandbox, but what I can't find is a Live Bookmark equivalent...ie: just headlines, no pix, no diarrhea of the keyboard descriptions, no new windows, no muss. Just headlines to scan.

      --
      Imagination drew in bold strokes, instantly serving hopes and fears, while knowledge advanced by slow increments...
    3. Re:If nothing else, use it for speed. by Anonymous Coward · · Score: 0

      -1 Troll

      Quit showing off. The truth is that JS is here to stay.

    4. Re:If nothing else, use it for speed. by Anonymous Coward · · Score: 0

      Agreed. There are websites nowadays that retrieve their content from 40+ domains, using JS of course, resulting in pages that need minutes to load on my (not very fast) computer for just showing two or three paragraphs of text. Even when you ignore the security benefits NoScript and the other tools you mention keep the web usable.

      Unfortunately an increasing number of websites seems to be made by by people who aren't aware that te HT in HTML means hypertext, that HTML supports hyperlinks out of the box. For some reason more and more hyperlinks are handled by JavaScript events, and they don't use a plain HTML hyperlink as a fallback mechanism but link to '#' or something just as useless. That doesn't work well with NoScript. Perhaps the frameworks or CMSs they use are to blame, or perhaps the site builders use those tools in an inapprorpiate way. Web sites should be tested with JavaScript turned off. The basic navigation, hyperlinks that don't require any special processing to function, should just work.

    5. Re:If nothing else, use it for speed. by Anonymous Coward · · Score: 0

      The best Firefox addon I have found for improving speed is ImgLikeOpera.

  36. Re:Should have been a default in browsers from day by phatphoton · · Score: 2

    I use both. it makes the list of scripts that I should consider considerably shorter and also blocks confusing scripts I may otherwise allow in the process of trying to get a webpage to work. They all make life easier and more secure. Or at least I feel secure knowing so many things that used to happen now are blocked and I still have a usable web browsing experience.

  37. All your scripts are belong to noscript by djl4570 · · Score: 2

    The author deserves this. I reported a small problem on Amazon and he had a release candidate ready for testing about six hours later.

    1. Re:All your scripts are belong to noscript by Anonymous Coward · · Score: 0

      That's incredibly generous of you.... oohhhh... I see. You mean he deserves this *from other people*, not from you personally ! ;)

      *I re-read this prior to posting, and it sounds a bit catty/sarcastic... so for the record I am joking and I *do* understand the parents intent. Honest!

  38. Re:Why I don't use NoScript by larry+bagina · · Score: 1

    prior to that, he pushed out a lot of incredibly minor updates ("fixed a typo in a comment"), seemingly to increase the ad impressions on his web site. Which used javascript (google analytics and ads) and was whitelisted by default.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  39. Re:Should have been a default in browsers from day by hedwards · · Score: 1

    The point of noscript is to deny scripts globally and then just enable the ones that you deem to be safe. I assume that's what you meant because if you just blacklist domains that you know to be malicious you might as well just send your information directly to the crackers.

  40. Re:Why I don't use NoScript by hedwards · · Score: 2

    The UI isn't confusing, what is confusing is the tendency of sites to use a large number of largely anonymous servers to give even basic functionality. What NoScript really needs is a way of blacklisting domains manually so that I have to manually enable them if I decide I want them. For things like Facebook which are inexplicably everywhere even though they aren't necessary on any site that I routinely go to.

  41. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    You'd still be safe even if a domain is hijacked to serve malware if you block dynamic content for trusted sites (JS can execute, but things like flash need to be activated by clicking on the placeholder), I've been doing this for years and don't look back.

  42. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    Using noscript is an inconvenience, sure. But restoring from backup is a greater inconvenience. You should keep backups in hopes you'll never have to use them not because you plan to use them regularly. Simply put, I'd rather put more effort into the prevention of problems than coping with them.

    I used keep backups so I could reinstall Windows once or twice a year when it became slow and unreliable. I got tired of dealing with Windows being defective. I switched OSes and now I use backups as a "just in case" rather than to facilitate an annual chore.

  43. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    It's the law. Grow up, asshole. Dickwad.

  44. MOD PARENT DOWN by Anonymous Coward · · Score: 0

    ...and mod the grandparent up.

  45. Re:Why I don't use NoScript by Anonymous Coward · · Score: 0

    Are you seriously that stupid? The guy makes an awesome addon that protects millions of users, releases it for free, makes one mistake that he apologizes for a few days later, and suddenly you can't trust one of the most useful addons of Firefox?

    If your mom was like you, you would've probably been put down shortly after birth. Probably for the better.

  46. Except you have to turn it off everywhere by pavon · · Score: 2

    I tried to use it for a couple months, but more than half of the web-forms on the internet require javascript to submit properly. So I would spend all this time filling out these forms, get to the end, and either nothing happens when you click submit or you get an error. So I disable NoScript for the site, only to have the browser (or the website) clear everything that I just entered into the form, and I have to start over again.

    Other sites wouldn't have working menus, others didn't have working links at all. All of this is the fault of bad developers, but regardless of who is to blame, I still have to live with it. JavaScript is too tangled up into the design of most sites to be able to disable it and not have half the web break. It isn't like plugins like flash, where you get a nice segregated box that is disabled, and everything else works like normal.

    The only way I could stand to use NoScript was to Allow All, but keep the cross-site scripting protection on.

    1. Re:Except you have to turn it off everywhere by antdude · · Score: 1

      Ditto. It was frustrating to me too. I do use other addons/extensions like PrefBar (disable referrers, Java, etc.), AdBlock Plus, etc. Even those run into problems once in a while. NoScript drove me nuts.

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
  47. Re:MOD SIBLING SIDEWAYS by Anonymous Coward · · Score: 1

    ... and mod the great-grandparent diagonally.

  48. Re:Why I don't use NoScript by 0123456 · · Score: 3, Interesting

    What NoScript really needs is a way of blacklisting domains manually so that I have to manually enable them if I decide I want them.

    You mean like 'mark as untrusted'?

    I'd like to see domain-based functionality, so for example I can allow Facebook Javascript when I'm actually using Facebook, but block if when I'm at any other site.

    Ah, I still remember the early days of Javascript when we were telling people what a horrible insecure pile of crap it would be and they were assuring us that nothing could possibly go wrong.

  49. Re:Why I don't use NoScript by Anonymous Coward · · Score: 0

    I've tried to use it four or five times through the years, and I always end up removing it almost immediately. I find the UI to be confusing (and just plain bad) to the point of uselessness, and the damn thing wastes more CPU cycles running than the wild JavaScript it purports to block.

    You must be dumb as a fucking plank then.

  50. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    there are some of us who still think browsers shouldn't be scriptable, period. if you want to make an application, release binaries.

  51. Re:Why I don't use NoScript by geminidomino · · Score: 2

    I haven't found anything else that comes close to how flexible and easy to use it is.

    Have you checked out Request Policy?

    I don't suggest it out of NoScript hate[0] -- I still run noscript on some machines -- but because it's fantastically easy to use to do things you need to mess with ABE to do on NoScript (if even then. I haven't had the time to mess much with ABE). My favorite is being able to block everything google, and then only allow it, if needed, permanently and only on the sites that need it (mostly on sites using recaptcha)

    It's pretty nice and one of the four extensions that keeps me shackled to Firefox, much to my continued misery (The other four being ABP, PasswordMaker, and Lazarus)

    [0]Though its insistence on opening up the homepage twice a week lately on minor updates is becoming a pet peeve.

  52. Re:Should have been a default in browsers from day by roman_mir · · Score: 1

    For those business sites like Asus or HP, I've begun filing ADA (american disabilities act) complaints that the websites are no accessible to disabled users

    - yeah, because for some reason companies must spend time and money building things for corner cases rather than for their main target customer. Government. Is there anything it can do that does not hurt the economy? If it can, I haven't found one example yet so far.

  53. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    NoScript have a blacklist mode (allows scripts to be run by any site that isn't blacklisted). It isn't enabled by default and it doesn't have en editor in the UI to add or remove sites from the blacklist, but it is easy to add a new site to the blacklist, just click on the NoScript icon in the notification field (is it called that in English?).

    The option to turn on blacklist-mode (and off whitelist-mode) is called something like "Allow scripts globally" (sorry if the translation is wrong, I don't have an English language UI). Paired with Adblock Plus (which blocks content based on blacklist you can subscribe to), this give good enough protection (feel free to correct me if I'm wrong!).

    The blacklist-mode still give you good protection against a lot of JavaScript attacks (and that might cause trouble on sites with horrible security practises).

    Of course, as always, Opera have built in functionality that do this better then NoScript and Adblock. Damn shame I'm not allowed to use Opera by my bank and some other sites.

    I would say that 99% of the sites I visit that depend on JavaScript being enabled, shouldn't really depend on JavaScript, they are just coded by lazy people. But unfortunately I do "need" to be able use some of those sites and blacklist-mode is more convenient then whitelist-mode.

  54. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 4, Insightful

    Government. Is there anything it can do that does not hurt the economy? If it can, I haven't found one example yet so far.

    +5 ironic for writing that on the internet.

    --
    When information is power, privacy is freedom.
  55. Re:Should have been a default in browsers from day by TheRaven64 · · Score: 2

    Safari still has menu items to turn images, JavaScript, and CSS on and off for the current web page. The point of NoScript is to give you a greater level of granularity (i.e. allow just these scripts on this site, but not those) and to make these persist across browsing sessions.

    --
    I am TheRaven on Soylent News
  56. xxxterm by Anonymous Coward · · Score: 1

    why not just use xxxterm?

  57. Re:Should have been a default in browsers from day by roman_mir · · Score: 1

    +5 ironic for writing that on the internet.

    - Oh, yes. Al Gore invented it, while DARPA misused an old packet switching protocol from POTS and mixed it up at tax payers expense with existing communication systems. Or did you think that before DARPA there were no networks? Or that DARPA came up with packet switching out of nothing?

    How much innovation is stifled by government intervention into the economy, by mis-allocation of resources, and what would we have today if there was no government intervention and mis-allocation?

    No, I don't consider my original comment ironic at all, I consider yours misguided.

  58. Re:Should have been a default in browsers from day by Hobart · · Score: 1

    For those business sites like Asus or HP, I've begun filing ADA (american disabilities act) complaints that the websites are no accessible to disabled users

    Who exactly are you filing the complaints with?

    It seems that there is at least a settled class-action suit (NFB v. Target 2006) (with no judgement entered to set precedent) , are there any cases that went to judgment for website accessibility?

    --
    o/~ Join us now and share the software ...
  59. javascript == slow? by Anonymous Coward · · Score: 0

    Why do all people assume that Javascript makes a site slow to load?

    Javascript was the tool by which I could significantly *cut down* loading time for my site. Previously, I had to transmit a lot of redundant HTML. Now I'm transmitting the actual payload data as JSON and build the DOM tree on the client side.

    Really, NoScript is the equivalent of "people use hammers when they should use screwdrivers, so let's ban all hammers". That's all fun and games unless you're the one who has to push a nail into the wall with a screwdriver because all hammers were banned in the latest panic wave du jour.

    1. Re:javascript == slow? by ColdWetDog · · Score: 1

      Why do all people assume that Javascript makes a site slow to load?

      Javascript was the tool by which I could significantly *cut down* loading time for my site. Previously, I had to transmit a lot of redundant HTML. Now I'm transmitting the actual payload data as JSON and build the DOM tree on the client side.

      Really, NoScript is the equivalent of "people use hammers when they should use screwdrivers, so let's ban all hammers". That's all fun and games unless you're the one who has to push a nail into the wall with a screwdriver because all hammers were banned in the latest panic wave du jour.

      Unfortunately, there are one hell of a lot of hammers on the Internet.

      --
      Faster! Faster! Faster would be better!
  60. Slashidiots strike again by __aancvu2993 · · Score: 0

    NoScript is THE extension I install on every FF. Incredibly useful and smart. Free. Along with FlashBlock they are my browsing essentials. When I get (more) geeky it's also several more but the important ones are those two. The retards here have complaints about it. The slashretards here have complaints about everything. Fuck you, people, you are scum. Slashdot is no more, the moderators are scum and this is dead. I could elaborate, but fuck you all the way to hell.

  61. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    You mean like it is in Opera?

  62. Re:Should have been a default in browsers from day by hitmark · · Score: 1

    I see a potential improvement for Noscript, the identification of known tracking services.

    --
    comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
  63. If $10k were a lot... by Anonymus · · Score: 1

    I would call NoScript nagware more than anything else. I imagine he's made at least ten times that from donations, seeing as every new version (which is about every couple of weeks) takes you to his website where he's begging for cash (and covered in ads). Also, he's been involved in probably more scandals than any other plugin created, including things like default whitelisting of many sites including advertisers, circumventing AdBlock Plus to display his own ads, and his general belligerent attitude in several other run-ins with other developers.

    For the reason that this is already essentially commercial nagware, I'd say this is stupid, but I guess $10k isn't a lot of money for something used by millions of people.

  64. Re:Why I don't use NoScript by ColdWetDog · · Score: 1

    [ 0]Though its insistence on opening up the homepage twice a week lately on minor updates is becoming a pet peeve.

    You can change this, but of course, you have to RTFM to discover that. The horrors....

    --
    Faster! Faster! Faster would be better!
  65. Re:Should have been a default in browsers from day by drsmack1 · · Score: 0

    A bit of a coward too, nice combination Mr AC / fast turtle.

    Every time a wacko like you misuses the ADA it weakens the case of actually disabled people. You doing that shit dilutes the meaning of "disabled". Now, this is not to say that Aspergers people like yourself are not *socially* disabled, but that is not what the ADA is for.

    It's just all about you and what bothers you; who care who you hurt in your holy crusade. I guess that is right out of the dictionary definition of autistic spectrum, isn't it?

  66. Re:Should have been a default in browsers from day by rgviza · · Score: 1

    You should print this out and hang it over your desk. That way when some crappy site's hacked javascript redirects you to a 0day flash driveby and your computer gets totally destroyed by 0day stuff that the antivirus and microsoft patches haven't dealt with yet, you can remember that you called whitelist security "nonsense".

    Suggest everyone read this http://www.ranum.com/security/computer_security/editorials/dumb/index.html. The parent is guilty of items 1-3 on this list. He's a network infrastructure turd polisher.

    People will say "Default deny is Hard(tm)". Then again so is reinstalling operating systems and getting all your gear and software to work again because you got redirected into malware that you can't remove because the malware removal guys are 6 months behind the malware writers.

    I sleep very soundly at night and my kid won't get redirected to porn videos when he types "toy" in google. I am, in fact, releasing a very easy to use content filtering proxy fork, which is based on default deny, at the end of this month.

    It's compiled for Yoggies but since Yoggie went out of business, I need to find another similar type of whitebox hardware to package it for, preferably a wireless device that runs linux, with a candy bar form factor, so I can make money installing them :-) If anyone knows of such a device, please reply to this post. It can either be wireless or have 2 NICs built in. It should cost $80 or less, though $150 is probably a more realistic target.

    --
    Don't kid yourself. It's the size of the regexp AND how you use it that counts.
  67. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    As a person who's legs don't work that well, it's kinda sad you use disabled people as your personal weapon to get revenge on things you don't like.

    People use "the children" all the time as the excuse. "The disabled" is just another set of people. Not much difference; they both seem to be above everyone else according to the law.

  68. I wish it supported white/black list groups. by BlueCoder · · Score: 2

    One feature I would love is if it supported whole lists. That is whole white and black lists from different people that are assigned at different priority levels.

  69. Re:Should have been a default in browsers from day by Little_Professor · · Score: 1

    It makes the web unusable. I don't want to spend half my browsing time clicking on popups to decide if I want to allow every innocuous minor action by a pirce of sandboxed javascript code

  70. Re:Should have been a default in browsers from day by Ant+P. · · Score: 1

    IE had "zones" 10 years ago. Chrome has had per-site whitelisting for several major releases.

    Mozilla... Mozilla has an open bug from the previous millenium.

  71. Re:Should have been a default in browsers from day by Mister+Whirly · · Score: 3, Insightful

    This morning I was awoken by my alarm clock powered by electricity generated by the public power monopoly regulated by the US Department of Energy. I then took a shower in the clean water provided by the municipal water utility. After that, I turned on the TV to one of the FCC regulated channels to see what the National Weather Service of the National Oceanographic and Atmospheric Administration determined the weather was going to be like using satellites designed, built, and launched by the National Aeronautics and Space Administration. I watched this while eating my breakfast of US Department of Agriculture inspected food and taking the drugs which have been determined as safe by the Food and Drug Administration. At the appropriate time as regulated by the US Congress and kept accurate by the National Institute of Standards and Technology and the US Naval Observatory, I get into my National Highway Traffic Safety Administration approved automobile and set out to work on the roads built by the local, state, and federal Departments of Transportation, possibly stopping to purchase additional fuel of a quality level determined by the Environmental Protection Agency, using legal tender issued by the Federal Reserve Bank. On the way out the door I deposit any mail I have to be sent out via the US Postal Service and drop the kids off at the public school. Then, after spending another day not being maimed or killed at work thanks to the workplace regulations imposed by the Department of Labor and the Occupational Safety and Health Administration, I drive back to my house which has not burned down in my absence because of the state and local building codes and the fire marshal's inspection, and which has not been plundered of all its valuables thanks to the local police department. I then log onto the Internet which was developed by the Defense Advanced Research Projects Administration and post on Slashdot how the government can't do anything right.

    --
    "But this one goes to 11!"
  72. Well-deserved by man_the_king · · Score: 1

    A very well-deserved award. That extension right there is the primary reason I always use Firefox. Well, that, Adblock Plus, Flashblock, and Nuke Anything Enhanced. Makes viewing almost every webpage/site a clean, 99% ad-free readable experience.

  73. NoSlashdot by Anonymous Coward · · Score: 1

    That's real funny considering Slashdot apparently no longer supports script-free operation.

    WHERE THE FUCK IS NOSCRIPT SUPPORT FOR SETTING COMMENT RATING THRESHOLD/DISPLAY MODE? WHY DID YOU REMOVE THIS, YOU DICKS.

    Today's the first time I've been back here for weeks after being a daily reader for many years. The site has just progressively lost its functionality to the point I just don't care anymore. So I moved on.

    1. Re:NoSlashdot by Ant+P. · · Score: 1

      It's in the D1 layout in the same place it's always been, YOU BLIND INGRATE.

  74. Re:Should have been a default in browsers from day by roman_mir · · Score: 0

    Yes, all those things, none of them should exist or be done by government. I read about 2 lines, then the last line, the mid-section is obviously more of the same.

  75. Re:Why I don't use NoScript by hedwards · · Score: 1

    Yes, and as far as I can tell there isn't any way of doing it now. Which is annoying when you are OK temporarily allowing a long list, except for Facebook.

    And allowing it site by site would definitely be helpful, just because I'm trusting a site with javascript doesn't mean that every site should also get that trust.

  76. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    Access to the law is not misuse of the law. The law of the ADA as set forth by the DOJ is quite clear - government websites and commercial enterprises on the Web are required to be accessible by the deaf and blind. Period. Claiming that this is "misuse" is the equivalent of kicking your little feet and screaming you didn't ask to be born - you obviously have some issues with authority.

    AC - yes fuckyouverymuch, I don't need griefers like you chasing me around the boards.

    And no, I don't have Asperger's. Nice ad hominem. Do you have a problem with people with Asperger's, or other disabilities? I suggest you may need to look inward for the source of your issues with the ADA.

    Grow the fuck up, Sport, or get the hell out.

  77. Re:Should have been a default in browsers from day by St.Creed · · Score: 2

    I so agree! I've always wanted to print my own currency, but that darn gubermint just stops me all the time! :)

    --
    Therefore, by the (faulty) logic you're using, you're just a cow with a keyboard - osu-neko (2604)
  78. Re:Should have been a default in browsers from day by roman_mir · · Score: 0

    Government shouldn't be printing its own currency either.

    Mint can only mint coins for you, you bring it the gold/silver and it mints coins out of that for you. It's your material and coins that come out are also yours. They can charge a nominal fee for the work, that's all.

    Government printing money is unconstitutional, but I'll be moded troll here for this again, but hey, what else is new?

  79. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 1

    Well - opinionated and can't be bothered to be informed. That's two out of three, if you are white you are automatically a Tea Party member! Congratulations!

    Regulation bad. Anarchy good. Yeah, great argument. Because people will always voluntarily do the right thing if there are no consequences if they don't. Have you taken a look around at society lately? Thank god for laws.

  80. incomplete, thus misrepresentation by Onymous+Coward · · Score: 1

    If you want people to be aware of Giorgio Maone's mentality and motivations, you should probably link them to his blog entry on the matter. He goes into great detail.

    Here are some snippits:

    I screwed up. Big time.

    Please let me apologize first, then briefly explain what happened from a slightly different point of view than Wladimir Palantâ(TM)s, then apologize again.

    ... I began tracking EasyList changes and counterreacting. Of course Ares2 didn't stop, nor I did, so we engaged in an escalation through more than 30 EasyList updates (even 4-5 per day) specifically aimed at my sites ... If you've got some familiarity with Adblock Plus filters, you'll notice any standard web technology beyond basic HTML/CSS (scripting, frames, AJAX) was completely disabled.
    They got to the point where users could no longer even see the regular links to install NoScript or FlashGot.

    If you're describing his actions only as "[abusing his] position for monetary gain", you are spreading a simplistic understanding of the situation. That is virtually misinformation.

    If anyone expects to have and share an opinion on this matter they really ought to read his blog post.

  81. Re:Should have been a default in browsers from day by roman_mir · · Score: 0

    Yes, actually having an opinion and having debunked the same thing over for about 145 times makes one stop caring about somebody stating the obvious wrong argument the 146 time around.

    Will people voluntarily do the 'right thing'? Who is going to tell 'people' what the 'right thing' is? You?

  82. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 1

    Al Gore invented it,

    But of course I shouldn't expect to reason you out of a position you never reasoned yourself into in the first place.

    while DARPA misused an old packet switching protocol from POTS

    Saying that shows that you fundamentally misunderstand the difference between POTS, by which you presumably mean circuit switching, and packet switching. It wasn't even derivative, much less "misuse" of circuit switching.

    The earliest work on packet switching was done by Paul Baran at the RAND Corp, a US defense contractor.

    How much innovation is stifled by government intervention into the economy, by mis-allocation of resources, and what would we have today if there was no government intervention and mis-allocation?

    You write that as if the same can't be said of private corps. The world is far less black and white than you desire it to be.

    No, I don't consider my original comment ironic at all, I consider yours misguided.

    Ok, not ironic, just militantly ignorant.

    --
    When information is power, privacy is freedom.
  83. Re:Should have been a default in browsers from day by operagost · · Score: 1

    Now I've found the problem with progressives. They've mixed up the words "regulation" and "innovation". By the way, the Fed is actually a corporation and not part of the government.

    --

    Gamingmuseum.com: Give your 3D accelerator a rest.
  84. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    My account has been downmoded, over 20 comments or so have been downmoded in about an hour to 'troll' and 'flame', etc., so I can't respond under my nick, it's locked for 24 hours, etc.etc. So I am sorry I can't reply under my nick. I think my comments are not needed on /., it looks like a consensus.

  85. Re:Should have been a default in browsers from day by Mister+Whirly · · Score: 1

    Who says I am a "progressive" besides you? I am not a huge "government should regulate everything" kind of guy, but saying the government has NEVER done anything right and provides no benefit is as naive as it is silly. There are things they have done right, and a list of some of them is in my post. Why does everybody on Slashdot need to put people in to one of two groups : Those who think everything the government does is evil, and those who think everything the government does is great? I don't think either of those represents my view at all. I think the government has done some things right, and some things wrong.

    --
    "But this one goes to 11!"
  86. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 1

    So you posted to whine instead?

    Way to confirm the worst stereotypes of people like yourself.

    --
    When information is power, privacy is freedom.
  87. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    My point is, once I can reply under my nick I will. I don't like posting as AC.

    As to the gist of your comment - you have stereotypes about 'people like me'? Funny.

    Let's see

    not an American.
    lived in US, in Canada, in Israel, in Russia, in Ukraine, in Germany, in Switzerland in Singapore, run a couple of small businesses. Any stereotypes so far? Anyway, you'll have to wait until I can use my account. Cheers, asshole.

  88. Re:Should have been a default in browsers from day by SleazyRidr · · Score: 1

    So, you basically want to live in a land with no government at all?

  89. What's the Point? by AmberBlackCat · · Score: 1

    I don't agree with this. I think awarding them for making the web safer by removing javascript is like awarding somebody for keeping children from hurting themselves by locking them in cages. Of course you're safer if you don't do anything. But the real goal should be to make things safer while still being able to use those features. they might as well give an award to Lynx for safe browsing.

  90. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 1

    ?As to the gist of your comment - you have stereotypes about 'people like me'? Funny.

    Yes, the stereotype is uncompromisingly loud-mouthed. thin-skinned and intellectually rigid. People like that love to trot out meaningless credentials as an appeal to authority. So yeah you hit the stereotype on the head with that reply too.

    --
    When information is power, privacy is freedom.
  91. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 1

    So, you basically want to live in a land with no government at all?

    Nah, he's all talk. Read his resume, he's spent years working for a canadian telco, sucking at the teat of government regulation.

    --
    When information is power, privacy is freedom.
  92. Re:Should have been a default in browsers from day by drsmack1 · · Score: 1

    I understand you are blind to your own biases and issues. That doesn't mean you are not causing problems. I would bet real money that you would score high on the spectrum were you to honestly take any autistic spectrum test.

    >> If I want kids, I'll go with a contract marriage that spells out the responsibilities of both parties.
    >> Much cheaper in the long run and ensures that there is no possibility of being nailed for spousal
    >> support or Alimony because of the contract.

    REALLY high on the spectrum. Big money.

  93. Re:Should have been a default in browsers from day by nabsltd · · Score: 1

    Yeah, I was a little unclear.

    What I meant was that if you just install NoScript (which by default denies all scripts) and then never enable scripts on any site, you end up with the "neutered web" that the GP wrote about. If you do that, you don't need NoScript...you can just disable Javascript in the browser.

  94. Re:Should have been a default in browsers from day by spire3661 · · Score: 1

    I would like to say "Fuck you" to whoever modded me Troll, you are a child. I merely pointed out MY experience with the program, i never said for others not to use it. Thats pretty much the opposite of a troll.

    --
    Good-bye
  95. Re:Should have been a default in browsers from day by spire3661 · · Score: 1

    My computer is fully prepared to die, thats what backups are for. I dont worry about virii because I back up like a crazy person with no less then 3 full versions in 3 separate physical locations with versioning. I can be up and running in less then 10 minutes with a loss of no more then 8 hours of work. I would rather risk that then constantly approve/deny considering I have to backup no matter what.

    You made my point for me: "how do you stop a 0 day? With backups thats how." IM not quite sure what to make of your "network infrastructure turd polisher" comment. Also, if re-deploying a drive clone is hard for you then I'm sorry that you suck. Hmm maybe you were too busy jerking off to your precious whitelist.

    My main point is this, Noscript is more work then its worth FOR ME. I can mitigate its damage easier then the constant vigilance of running a list.

    --
    Good-bye
  96. Don't use Javascript... by Anonymous Coward · · Score: 0

    ...for tasks that can be accomplished through other means. Or at least design your site so that it works without Javascript.

  97. Re:Should have been a default in browsers from day by DaVince21 · · Score: 1

    Chrome has the default ability to turn off all scripts, and then selectively reallow scripts for specific websites. That sounds very much like NoScript's main functionality, if you ask me.

    --
    I am not devoid of humor.
  98. Re:Why I don't use NoScript by geminidomino · · Score: 1

    My problem wasn't with the opening of the page itself. It was with the frequency. Is some localization changes worth an update?

      It turns out, no. I apparently got bit by some AMO bug or something that got me on the testing version so every single blasted change prompted me for an update.

  99. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    People use "the children" all the time as the excuse. "The disabled" is just another set of people. Not much difference; they both seem to be above everyone else according to the law.

    Why am I surrpised this comment is from an AC?

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  100. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    I am probably one of the least PC people on the planet. I would give you an example but I would hate for you to Godwin so early. Using the laws for the disabled to push your own personal agenda sucks big time. Make that you sucks big time.

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  101. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    I don't know about you but can't you just feel the love?

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  102. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    I own the building that is my office. No client ever comes to the actual office as it is not necessary. The only person who attends my office is me. Didn't stop them from forcing me to put in a ramp! And forbid that i should ever light a cigarette on my own property.

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  103. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    If it wasn't for the DOE you wouldn't have electricity, right?
    and if it wasn't for the fire marshall and the bureacrats behind the building codes your house would be a smouldering ruin, right?
    LOL - you're a bit thick aren't you?

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  104. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    That makes you a wheat eating, seal clubbing, zionist, republican, communist, nazi without testicles. Am I close?

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  105. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    I wouldn't worry about the moderation here anymore. /. has been invaded over the last few years by the anti-intellectuals and they seem to get a lot of modding input given to them.

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  106. Re:Should have been a default in browsers from day by uninformedLuddite · · Score: 1

    It makes the web unusable. I don't want to spend half my browsing time clicking on popups to decide if I want to allow every innocuous minor action by a pirce of sandboxed javascript code

    and others are sick of being told that because we are the millionth fuckstick-moron not using no-script that we have won a prize. The prize being an all expenses paid trip to a website that not only sells Viagra but gives you a chance to do a free IQ test. Fucking Hooray!

    --
    The new right fascists are bilingual. They speak English and Bullshit.
  107. Re:Should have been a default in browsers from day by roman_mir · · Score: 1

    No, that's impossible. I find that using 5 flag methodology works though.

  108. Re:Should have been a default in browsers from day by roman_mir · · Score: 1

    Ha, I worked for many Canadian and US telcos on contracts. I also had a contract with electrical utility, which used to be an arm of government.

    I also contracted for Symcor, ADP, IFDS, Christie Digital, Boomboat, Avema. Subcontracted for World Insure, Davis + Henderson, Danli Promotions.

    For the last 2 years I've been building my own suite of software for retail chains in Asia.

    Thanks for asking.

  109. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    funny, your comments are filled with ad-hominems here, talk about stereotypes.

  110. Re:Should have been a default in browsers from day by Jah-Wren+Ryel · · Score: 1

    funny, your comments are filled with ad-hominems here, talk about stereotypes.

    Really? Do you know what an ad-hominem is? It ain't an insult. It's a argumentive fallacy that says "you are wrong because you suck." What I've done here is say "doing that means you suck because ..." Like making up an excuse to not respond to my points but instead still posting about how he's so put upon and unwanted. That's sucking.

    Note that he came back 24 hours later and still didn't live up to his word to respond with his own account, despite posting a non-denial elsewhere in this thread. That's more proof of sucking.

    --
    When information is power, privacy is freedom.
  111. Re:Should have been a default in browsers from day by Anonymous Coward · · Score: 0

    IE zones are terrible though, and don't work very well. Nothing at all like noscript.

    And we won't even get into why the 'high security' zone still allows ActiveX and Javascript to run. And hell, I think it even allows font downloads still (how many exploits have there been for auto-font downloads, I lost count).