Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

"Gee coldpie, why do you use NoScript? All you're doing is breaking every website you visit!"

Shoe's on the other foot now, hahaha!

:)



Having no sites on the internet actually work finally paid off huh


Personally, the content I'm usually interested in when I visit a page is just the text and images. There are some exceptions, but that's what a whitelist is for. Even if you don't count the numerous security benefits, denying scripts by default has made my websurfing much more enjoyable.


It's a great filter for nonsense. Usually sites that cause problems for NoScript are crap anyways. Not always, but often enough that I see it as a net benefit.


I use NoScript as well (and I wish more people would) but to be fair I doubt the users who were part of the botnet even noticed it at all. It's only github who would've benefited from these users running NoScript.


Yeah, it was obviously a lighthearted comment, but the larger issue is that every web user is running someone else's untrusted code on every website they visit. Frankly I'm surprised these kinds of attacks aren't more common. NoScript helps mitigate this issue, and while it has lots of other incidental bonuses that a nerd like myself cares about, I freely admit it results in a worse end-user experience for almost everyone else.


They could have done a similar attack with an <IMG> tag. Or do you block images too?


Erm, you don't? I suggest you read the Basilisk FAQ before you get into real trouble...

http://ansible.uk/writing/c-b-faq.html


Something like Request Policy could cover this




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: