Wilders Security Forums  

Go Back   Wilders Security Forums > Software, Hardware and General Services > other software & services
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #751  
Old July 1st, 2012, 11:14 AM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,464
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by tlu
Hm, what would that be? AFAIK, RP blocks what you don't explicitly allow.

From what I could see, it (DNT+) apparently blocks what's in <noscript> tag. Go to -http://www.avgthreatlabs.com. DNT+ blocks a connection to Omniture, which I suppose it's coming from this code:

Code:
<noscript> <img src='-http://avgtechnologies.112.2o7.net/b/ss/avgthreatlabs/1/H.22.1--NS/0' height='1' width='1' border='0' alt='' /> </noscript>

At first, I thought it could be because DNT+ loads first , but in that case, it would also block connections to Facebook, Twiter, etc., which RequestPolicy blocks. Those other connections RequestPolicy blocks are in <script> tags.

So, I believe this is a limitation in RequestPolicy, as it doesn't seem to be filtering <noscript> tags. Or, I'm doing something wrong.

-edit-

Nevermind... It does block it. I had a momentary stupid moment. If JavaScript is enabled, of course the <noscript> tags won't make the connection, hence RequestPolicy not blocking, and also the reason DNT+ blocked the code, but not the actual connection. lol This obviously means that if JavaScript is disabled, then the <noscript> connections will occur, and RP will block it.

Last edited by m00nbl00d : July 1st, 2012 at 11:22 AM.
  #752  
Old July 1st, 2012, 11:38 AM
tlu's Avatar
tlu tlu is offline
Very Frequent Poster
 
Join Date: Sep 2004
Posts: 2,066
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by m00nbl00d

Nevermind... It does block it. I had a momentary stupid moment. If JavaScript is enabled, of course the <noscript> tags won't make the connection, hence RequestPolicy not blocking, and also the reason DNT+ blocked the code, but not the actual connection. lol This obviously means that if JavaScript is disabled, then the <noscript> connections will occur, and RP will block it.

Yes, that's what I also found But that means that DNT+ blocks code once you whitelist a site in Noscript, doesn't it? On the other hand, why doesn't block RP 2o7.net once the site is (temporarily) whitelisted?
  #753  
Old July 1st, 2012, 11:58 AM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,464
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by tlu
Yes, that's what I also found But that means that DNT+ blocks code once you whitelist a site in Noscript, doesn't it? On the other hand, why doesn't block RP 2o7.net once the site is (temporarily) whitelisted?

I'm not 100% sure how NoScript works, but I believe that if there's tracking code in a domain/sub-domain that you whitelist, then DNT+ would block it, provided there's a rule to detect it.

On a side note, I discovered an additional reason to keep DNT+. In AVG Threat Labs website, if you click Show more about threat activity, after you verify a domain, then RequestPolicy will prevent the website from loading that part. Oddily enough, that part comes from avgthreatlabs.com, so it should allow. But, it didn't. So, I started to temporarily allow connections, and I had to allow a connection to s3. amazons.com. Now, the Show more about threat activity works, despite DNT+ blocking that tracker, GetSatisfaction as it's named by DNT+.

In HttpFox, I see that in the Result column, there's no indication of the status. It's empty.

I tried in Chromium, only with DNT+, and it blocks it too. But, if I use KISS Privacy, then it's blocked as well. Due to KISS Privacy way of working, if you right-click the link and open it in an new tab, it will load Show more about threat activity box just fine, unlike RequestPolicy.

I'll keep DNT+.
  #754  
Old July 1st, 2012, 12:14 PM
tlu's Avatar
tlu tlu is offline
Very Frequent Poster
 
Join Date: Sep 2004
Posts: 2,066
Default Re: What are the "Must Have" extensions for Firefox

@m00nbl00d: I'm still unsure why RP doesn't always block depending on whether the site is whitelisted in NS or not. But I agree that it's a reason why one should keep DNT+.
  #755  
Old July 1st, 2012, 12:29 PM
guest
 
Posts: n/a
Default Re: What are the "Must Have" extensions for Firefox

DNT+ or Ghostery?
  #756  
Old July 1st, 2012, 12:44 PM
TyRidian's Avatar
TyRidian TyRidian is offline
formerly: RADEON0101
 
Join Date: Apr 2012
Posts: 1,425
Default Re: What are the "Must Have" extensions for Firefox

My Must Have extensions:

Ghostery
TeaBiscuit
WOT (Web Of Trust)
  #757  
Old July 1st, 2012, 07:29 PM
m00nbl00d m00nbl00d is offline
Incredibly Massive Poster
 
Join Date: Jan 2009
Posts: 6,464
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by guest
DNT+ or Ghostery?

Either one, I suppose... Or both, who knows... I just happen to like DNT+; just a preference.
  #758  
Old July 1st, 2012, 07:41 PM
Ashanta Ashanta is offline
Frequent Poster
 
Join Date: Aug 2007
Location: Europe
Posts: 417
Default Re: What are the "Must Have" extensions for Firefox

big thanks for sharing Moonblood,

I had already AdBlock Plus with Fanboy add-ons and I forgot also to mention 'Https Everywhere' add-ons but I will try RequestPolicy and DNT+.

Did you tried ghostery ?

If you plan to install Anonymizer Nevercookie, FF will disable due to incompatibility with the latest feature of FF 13. To bypass, look at this :

http://www.fun2friend.com/topic/6596...in-firefox-13/


Quote:
Originally Posted by m00nbl00d
I'm running Firefox with Private Browsing + RequestPolicy + AdBlock Plus with Fanboy Complete Adblock and country specific list + Abine DNT+. I also have a few more extensions, but not related with quite related with privacy...

DNT+ blocks what RequestPolicy can't block and whatever Fanboy's list doesn't have. I've seen it blocking a few trackers, especially from Omniture.

I wasn't familiar with Anonymizer Nevercookie. Will have to take a look at it.
__________________
Realtime
AppGuard + Private Firewall + Exploit Shield free version

On Demand:
Shadow Defender, Hitman Pro 3.7, TDS Killer, Vba32 Anti-Rootkit, Rogue Killer, Combofix

Last edited by Ashanta : July 1st, 2012 at 08:01 PM.
  #759  
Old July 1st, 2012, 08:08 PM
Ashanta Ashanta is offline
Frequent Poster
 
Join Date: Aug 2007
Location: Europe
Posts: 417
Default Re: What are the "Must Have" extensions for Firefox

I've just installed RequestPolicy and DNT +

RequestPolicy is great add--on !

I'm trying to compare Ghostery and DNT + working together: this last one doesn't detect anything.

I pause Ghostery and reload a site that Ghostery detected 2 tracking attempts means DNT + only detected one.

PS: To Moonblood, Ghostery detected also Omniture and block it.
__________________
Realtime
AppGuard + Private Firewall + Exploit Shield free version

On Demand:
Shadow Defender, Hitman Pro 3.7, TDS Killer, Vba32 Anti-Rootkit, Rogue Killer, Combofix
  #760  
Old July 2nd, 2012, 06:14 PM
Ashanta Ashanta is offline
Frequent Poster
 
Join Date: Aug 2007
Location: Europe
Posts: 417
Default Re: What are the "Must Have" extensions for Firefox

Request Policy + Ghostery is the best combo for me:it blocks all tracking sites.
You should try it
__________________
Realtime
AppGuard + Private Firewall + Exploit Shield free version

On Demand:
Shadow Defender, Hitman Pro 3.7, TDS Killer, Vba32 Anti-Rootkit, Rogue Killer, Combofix
  #761  
Old July 13th, 2012, 02:06 PM
Pinga's Avatar
Pinga Pinga is offline
Frequent Poster
 
Join Date: Aug 2006
Location: Europe
Posts: 941
Default Re: What are the "Must Have" extensions for Firefox

Google/Yandex search link fix 1.4
by Wladimir Palant
Quote:
Google Search has the annoying habit of changing the result link when you click it. If you try to copy the link you get some gibberish instead of the actual link. This extension disables this behavior - on any Google domain, without having to configure anything. Simply install and enjoy!
https://addons.mozilla.org/en-US/fir...arch-link-fix/
__________________
The really important kind of freedom involves attention, and awareness, and discipline, and effort, and being able truly to care about other people and to sacrifice for them, over and over, in myriad petty little unsexy ways, every day.
- David Foster Wallace
  #762  
Old July 13th, 2012, 02:31 PM
vasa1's Avatar
vasa1 vasa1 is offline
Massive Poster
 
Join Date: May 2010
Posts: 3,988
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by Pinga
Google/Yandex search link fix 1.4
by Wladimir Palant

https://addons.mozilla.org/en-US/fir...arch-link-fix/
I just tried it on my Google Bookmarks page but I can't get it to work.

Here's an actual url:
http://www.omgubuntu.co.uk/2011/10/h...xubuntu-11-10/

I have it listed in my Google bookmarks. When I hover over the entry in Google Bookmarks, I see the correct url in a tooltip but if I right-click and copy-paste, I get this:
https://www.google.com/bookmarks/url...hmIksDX2A&ct=b
__________________
One can't be too rich, too thin, or too secure
  #763  
Old August 9th, 2012, 11:53 AM
operamail's Avatar
operamail operamail is offline
Frequent Poster
 
Join Date: Sep 2011
Posts: 248
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by Pinga
Google/Yandex search link fix 1.4
by Wladimir Palant

https://addons.mozilla.org/en-US/fir...arch-link-fix/
Tried it. Works great! Thanks.
__________________

Real-time: Sandboxie
On-demand: Malwarebytes Anti-Malware
Backup: Clonezilla (Just in case)
  #764  
Old August 10th, 2012, 02:49 PM
luciddream's Avatar
luciddream luciddream is offline
Very Frequent Poster
 
Join Date: Mar 2007
Location: US
Posts: 1,655
Default Re: What are the "Must Have" extensions for Firefox

What I'm using right now:

Adblock Plus
Adblock Plus Pop-up Addon
CS Lite Mod
Element Hiding Helper for Adblock Plus
Ghostery
HTTPS-Everywhere
KeyScrambler
NoScript
RequestPolicy
WOT

... and for the record, my browser is quicker with these addons than without. It takes 6-7 seconds longer to boot, but browsing is much snappier = less junk loading on pages & less connections.

*in before someone makes some remark about all of them slowing me down*
__________________
XP Pro SP3: Comodo FW/D+ 5.10Sandboxie 3.76VT Hash Check 1.01OpenVPN 2.2.1VirtualBox
  #765  
Old August 11th, 2012, 08:49 AM
CSKfan CSKfan is offline
Regular Poster
 
Join Date: May 2012
Location: The Earth
Posts: 148
Thumbs up Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by luciddream
What I'm using right now:

Adblock Plus
Adblock Plus Pop-up Addon
CS Lite Mod
Element Hiding Helper for Adblock Plus
Ghostery
HTTPS-Everywhere
KeyScrambler
NoScript
RequestPolicy
WOT

... and for the record, my browser is quicker with these addons than without. It takes 6-7 seconds longer to boot, but browsing is much snappier = less junk loading on pages & less connections.

*in before someone makes some remark about all of them slowing me down*

What do you give direct access in Sandboxie for NoScript?How do you maintain whitelist or blacklist of NoScript while using Sandboxie?
Also mention the same for ABP and ABP Popup Addon.
__________________
Impossible is nothing

Rollback Rx|Sandboxie|AppGuard|Keyscrambler Premium

Last edited by CSKfan : August 11th, 2012 at 09:06 AM.
  #766  
Old August 11th, 2012, 09:58 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by luciddream
What I'm using right now:

Adblock Plus
Adblock Plus Pop-up Addon
CS Lite Mod
Element Hiding Helper for Adblock Plus
Ghostery
HTTPS-Everywhere
KeyScrambler
NoScript
RequestPolicy
WOT

... and for the record, my browser is quicker with these addons than without. It takes 6-7 seconds longer to boot, but browsing is much snappier = less junk loading on pages & less connections.

*in before someone makes some remark about all of them slowing me down*
I use Adblock Plus and NoScript. Browsing is much faster now.

But tell me luciddream, how much does RequestPolicy overlap with NoScript in your opinion, observation and knowledge?
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #767  
Old August 11th, 2012, 10:52 AM
operamail's Avatar
operamail operamail is offline
Frequent Poster
 
Join Date: Sep 2011
Posts: 248
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by CSKfan
What do you give direct access in Sandboxie for NoScript?How do you maintain whitelist or blacklist of NoScript while using Sandboxie?
Also mention the same for ABP and ABP Popup Addon.
Add those lines to the your Firefox sandbox:
Code:
OpenFilePath=firefox.exe,*\adblockplus\* OpenFilePath=firefox.exe,*\NoScriptSTS
__________________

Real-time: Sandboxie
On-demand: Malwarebytes Anti-Malware
Backup: Clonezilla (Just in case)
  #768  
Old August 11th, 2012, 11:03 AM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by operamail
Add those lines to the your Firefox sandbox:
Code:
OpenFilePath=firefox.exe,*\adblockplus\* OpenFilePath=firefox.exe,*\NoScriptSTS
Will letting plugin-container.exe access to the internet and start/run in the Firefox sandbox do?
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #769  
Old August 11th, 2012, 11:21 AM
operamail's Avatar
operamail operamail is offline
Frequent Poster
 
Join Date: Sep 2011
Posts: 248
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by Amit
Will letting plugin-container.exe access to the internet and start/run in the Firefox sandbox do?
No, that won't help. You have to grant direct access to those files or folders for firefox.exe if you want your blocklist/whitelist to be saved.
__________________

Real-time: Sandboxie
On-demand: Malwarebytes Anti-Malware
Backup: Clonezilla (Just in case)
  #770  
Old August 11th, 2012, 01:24 PM
Amit's Avatar
Amit Amit is offline
Massive Poster
 
Join Date: May 2011
Location: Parallel Universe
Posts: 4,631
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by operamail
No, that won't help. You have to grant direct access to those files or folders for firefox.exe if you want your blocklist/whitelist to be saved.
Oh I see. Then thanks for the code. I don't have any whitelist/blocklist so not granting direct access anyways.
__________________
✓The first principle is that you must not fool yourself, and you are the easiest person to fool.
✓Science is the belief in the ignorance of experts.
✓I don't know anything, but I do know that everything is interesting if you go into it deeply enough.


-------Richard P. Feynman---------
  #771  
Old August 11th, 2012, 03:45 PM
bo elam bo elam is offline
Very Frequent Poster
 
Join Date: Jun 2010
Posts: 1,043
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by CSKfan
What do you give direct access in Sandboxie for NoScript?How do you maintain whitelist or blacklist of NoScript while using Sandboxie?
Also mention the same for ABP and ABP Popup Addon.
If you like to allow Direct access to "Options" in NoScript, allowing access to "prefs.js" is all that's needed. You ll find this file in your Mozilla Firefox profile folder.

Personally, I prefer to make changes out of the sandbox, I don't use this setting.

For Adblock, allowing access to the Adblock folder is not necessary. You can get done what you want by allowing access to "Patterns". This file is located inside the Adblock folder located in the Mozilla Firefox profile folder.

As with NoScript, I do changes out of the sandbox.

Bo
  #772  
Old August 11th, 2012, 03:53 PM
bo elam bo elam is offline
Very Frequent Poster
 
Join Date: Jun 2010
Posts: 1,043
Default Re: What are the "Must Have" extensions for Firefox

Luciddream, I use NoScript and Adblock plus. Those two addons together block pretty much all popups. The way I have it now, I only see one or two popups a year. Maybe, you are not getting anything out of the Adblock Plus Pop-up Addon.

Bo
  #773  
Old August 11th, 2012, 05:06 PM
luciddream's Avatar
luciddream luciddream is offline
Very Frequent Poster
 
Join Date: Mar 2007
Location: US
Posts: 1,655
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by Amit

But tell me luciddream, how much does RequestPolicy overlap with NoScript in your opinion, observation and knowledge?

I've used NS for 5+ years, and only recently (a few months ago) added RP. So it became quickly apparent to me that it blocks a lot of things NS didn't previously. Mostly pictures. There may be quite a bit of overlap too, but it's definitely a keeper for me. Maybe it's not blocking much for people because they load some of those default lists? I don't. I add just the US list, then trim it down quite a bit leaving only a few left apply to me (namely Amazon).
__________________
XP Pro SP3: Comodo FW/D+ 5.10Sandboxie 3.76VT Hash Check 1.01OpenVPN 2.2.1VirtualBox

Last edited by luciddream : August 11th, 2012 at 06:43 PM.
  #774  
Old August 11th, 2012, 05:15 PM
luciddream's Avatar
luciddream luciddream is offline
Very Frequent Poster
 
Join Date: Mar 2007
Location: US
Posts: 1,655
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by bo elam
Luciddream, I use NoScript and Adblock plus. Those two addons together block pretty much all popups. The way I have it now, I only see one or two popups a year. Maybe, you are not getting anything out of the Adblock Plus Pop-up Addon.

Bo

I grabbed the addon pretty much on account of 1 popup in particular. It came from a torrent site I used regularly, and was such a nuissance it made it worth it just to block that 1 thing. Nothing else did. It's rarely needed, but there are some things it will block that NS & ABP won't. Since it's not slowing me down, it's worth it to cover those albeit rare situations. I want 0 popups a year... not 1 or 2 ; ) And you can set the default rule to block all popups. This will make it block any popup whether it's listed on any of your sub. lists or not, which is comforting.
__________________
XP Pro SP3: Comodo FW/D+ 5.10Sandboxie 3.76VT Hash Check 1.01OpenVPN 2.2.1VirtualBox

Last edited by luciddream : August 11th, 2012 at 06:47 PM.
  #775  
Old August 11th, 2012, 06:52 PM
luciddream's Avatar
luciddream luciddream is offline
Very Frequent Poster
 
Join Date: Mar 2007
Location: US
Posts: 1,655
Default Re: What are the "Must Have" extensions for Firefox

Quote:
Originally Posted by CSKfan
What do you give direct access in Sandboxie for NoScript?How do you maintain whitelist or blacklist of NoScript while using Sandboxie?
Also mention the same for ABP and ABP Popup Addon.

Others have given you good advice here. It doesn't apply to me personally since I don't white/black list anything in NS. I temp. allow per case, and rarely have to allow scripts for my browsing. With Element Hiding Helper for ABP I sometimes have to run unsandboxed to add new rules, rarely. And this problem came up using HTTPS Finder (running sanboxed). It rendered the addon quite a nuisance, so I just ran unsandboxed and went to every site I frequent (bookmarks), added those rules to HTTPS-Everywhere, then deleted the addon. Checking for HTTPS for every single site = slowdown I don't want.

And I hate allowing direct access to anything in Sandboxie. To me it goes against the entire concept of sandboxing, or a large portion of it anyway. I don't even like doing it for bookmarks.
__________________
XP Pro SP3: Comodo FW/D+ 5.10Sandboxie 3.76VT Hash Check 1.01OpenVPN 2.2.1VirtualBox
 

Wilders Security Forums > Software, Hardware and General Services > other software & services « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 03:42 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums