Service workers

Discussion in 'other software & services' started by stapp, Nov 16, 2020.

  1. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    23,939
    Location:
    UK
  2. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,344
    Location:
    Italy
    It is also possible to use this rule in UBO:

    Code:
    *$csp=worker-src 'none'
     
  3. Deletedmessiah

    Deletedmessiah Registered Member

    Joined:
    Feb 20, 2018
    Posts:
    130
    Location:
    Outer space
    Thanks Sampei Nihira for this trick. It works.
     
  4. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,344
    Location:
    Italy
    @Deletedmessiah

    :thumb:

    __________________________________________________

    I don't know the situation of other firefox-based browsers.
    But in my New Moon they are disabled by default:


    300.JPG

    @To all

    Check it out
     
  5. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,868
    Location:
    Outer space
    In Firefox it is enabled by default, though I do not have any serviceworkers listed (about:serviceworkers). This may be due to NoScript.
     
  6. Stupendous Man

    Stupendous Man Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    2,843
    Location:
    the Netherlands
    Even without NoScript, I do not have any serviceworkers listed in Firefox about:serviceworkers. I don't know if that is default, or because of strict browser settings.
     
  7. swami

    swami Registered Member

    Joined:
    Mar 24, 2006
    Posts:
    215
    Cookie AutoDelete takes care of those for me.
     
  8. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,868
    Location:
    Outer space
    On machine I also have Cookie AutoDelete, but not the other.
     
  9. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,344
    Location:
    Italy
    This rule inserted in Chrome (I don't know if also in other chrome-based browsers) prevents the correct display of many websites.
    The best known is the VirusTotal.
     
  10. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    I don't get it, I've got 275 in Vivaldi, but it seems like all of them have a Running Status of "Stopped". I have never heard of this stuff, how to disable them and is this some kind of security risk? :confused:
     
  11. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    Man, did I ever develop a low-level headache reading about Service Workers!
    That'd be me! Several rungs above my pay grade, for sure.

    But the best thing I came away with is that I have Chrome set to clear browser data when I close the browser, PLUS I clear it manually frequently during a long browsing session. Some of this is a throwback to my Sandboxie practices of periodically closing the browser to delete everything in there.

    I see that there are Chrome extensions designed to block Service Workers, but I don't want to add another entity that may be capable of reading or changing site data. For now I am satisfied with clearing SW's.

    The SW's I see tend to be from weather.com and fianancial sites, and also GitHub. The active worker I see right now says
    I appreciate stapp starting this thread. Interesting, but complex, for me. :)
     
  12. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    42, are you using an extension for that? because chrome does not allow you to delete history on shutdown automatically.
     
  13. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,344
    Location:
    Italy
  14. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    a well programmed page delete a service worker when site is closed. nevertheless is blocking no well chosen decision because it has side effects on page content.

    Cookie AutoDelete is able to delete SW when cookies for such page is deleted. there is nothing else to care about.
     
  15. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    I said I have Chrome set to clear browser data, not history. The actual setting I have enabled is "Clear cookies and site data when you quit Chrome".

    To answer your question, imdb, I don't use an extension to clear history. I manually clear browser data ("Clear history, cookies, cache, and more"), and I run Privacy Eraser Pro (manually) which erases, among other things, Internet History, Download History & AutoFill History.

    The difference in all this, that I believe you are pointing out, is that site data is not the same as history. For purposes of this topic (Service Workers), I observed that the SW's are gone when the site data is cleared upon closing the browser, or when manually clearing browser data.

    How do you handle all of the above, imdb?
     
  16. imdb

    imdb Registered Member

    Joined:
    Nov 2, 2011
    Posts:
    4,208
    thanks, 42. i use chrome portable. i use a (pre-configured) fresh profile for every new session.
     
  17. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    Is the chrome starter not able to delete such files?
     
  18. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    6,941
    Location:
    USA
    Same question here. I read the above-linked Service Worker Security FAQ, and it does reference Service Workers as seeming "extremely risky" and mentions how the "SW designers and implementers have mitigated the risks"... but I missed the part about what the risks actually are? Or maybe I did not miss the part. Maybe the FAQ left that out? :(
     
  19. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    You possible missed this one after:
    And chrome instances are "low right". Thats reason behind answer above from me - SW are not evil in a normal way.
     
  20. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    So from what I understood you need to clear cookies in order to avoid these service workers, is this correct?

    Seems interesting, but no reviews.
     
  21. Sampei Nihira

    Sampei Nihira Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    3,344
    Location:
    Italy
    It would be interesting to check if it works.:thumb:
    Among many W. members who use chrome-based browsers ...

    I have no SW problems with my New Moon 28 browser.
    ;):)
     
  22. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    I never had in any browser, but I miss experience turning them off for no reason. ;)

    For chromium based
    chrome://serviceworker-internals/

    (pre-word might differ as "vivaldi", "edge", "opera" aso.)

    For Firefox
    about:serviceworkers
    about:debugging#/runtime/this-firefox

    Important is this line
    Running Status: STOPPED (similar in Firefox - about:debugging#/runtime/this-firefox )

    this forum version has no SW, but the next gen of xenforo has. And it's bound to a user session id, so it becomes not hijack-able.
     
    Last edited: Jan 10, 2021
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.