NoScript 10 + New Version Releases

bjm, if you uncheck every time in Default and not check any in Untrusted, there is no difference.

Bo

 

Yeah, Default scope with no checks & Untrusted scope with no checks. I'm confused...again, why Blacklist (Untrusted) #216 since, there is no difference.

I'll have to test doubleclick.net again at adobe site. #214
Edit: no XSS Warning with Default doubleclick.net, at this time.

 

The way I see it there are 2 reasons. 1. When you temporarily allow a website, like a new website you visit for the first time, Untrusted domains don't run. When you temporarily allow, only Default domains and Trusted run. So, the amount of unneeded domains running is lesser when you have a blacklist. Your chances of being tracked, infected by malicious domains or served ads is lower. And 2. When you figure a new site, domains labeled as Untrusted are domains you can ignore when you fine tune the site to allow only whats required. The trial and error becomes a lot easier and faster. The pictures I posted yesterday are an example of what I am saying here on point 2. I posted them for you to see that. If you look at the pictures, specially the first one, about 11 domains were automatically untrusted when I first landed on that site. Figuring that site with over 20 domains (most nasty and not needed) took me less than 30 seconds. Thats because I harvest a black list based on my personal case use of the internet.

Black listing domains just for the sake of black listing doesn't do nothing for you. If you are going to do one, do it based on your personal use of the internet. Because I do that, thats the reason why this new site yesterday was basically done for me with 11 untrusted domains as I landed for the first time as I regularly visit that type of site.

By the way, in NoScript, Default, Trusted Untrusted and Custom are called Presets.

Bo

 

I'll have to observe Untrusted domains don't run. Seems like the execution of any "Preset" with no checks would behave the same as any "Preset" with no checks.
So, a "new website" would be under control of in-place Blacklist.
Interesting, to be sure... although, I doubt...I'm inclined to setup such granularity. Just me.
RE: Untrusted domains don't run. I thought NoScript blocked elements.
Yeah, I'll ponder my personal use.
Thanks!

 

bjm, in one sentence, the blacklist makes things easier when you trial and error a site to get it working and a lesser amount of scripts, programs, media, etc, run when you use the option to Temporarily allow all this page.

Bo

 

I completely agree, Bo, although I'm guessing your blacklist is probably some what larger than mine.

 

I have Untrusted red googletagservice.com


Should I be seeing black googletagservice.com

I thought red satisfies red and black.

 

As far as I know, you shouldn't. Let me show what I see.

This is what I see when I visit askwoody and Temporarily allow askwoody.com.



And this are my google rules.



Then, I tested creating a new Firefox profile, and allowed askwoody.com, googletagservices.com appears in black.



Afterward, I untrusted googletagservices.com in red. When I visited askwoody, googletagservices.com was labeled as untrusted.



Test with a new profile. Perhaps another extension is conflicting.

Bo

 

I am going to tell you something, Krusty, I dont think the size of the black list is important. I think whats important is that you make it based on where you go in the internet, the type of activities you do, the kind of sites you visit. Take your time building it. And back it up. In my case, it would take me years getting it back if I lost it, while losing the white list wouldn't mean nothing to me as building it back would take me a couple of hours.

Bo

 

I understand that, Bo. I just suspect you have been building your blacklist longer than I so it is likely to be larger. I am constantly building mine as I navigate the 'net and I'm doing that individually on three machines.

Yes, I am aware we can export / import again now with NS v10.x but I don't visit the same sites on all three machines.

 

started over > seems like black googletagservices.com stays black for me?

I re-did (add a website) googletagservices.com

I'll head scratch n' monitor.

Edit: in new default Fx 58 profile



black googletagservices.com stays black for me?

Edit 2: in spare user account.
Reset NoScript Options to Default and reproduced black googletagservices.com stays black.
head scratch

 

No reason for head scratch (IMO) .

Bo

 

Okay, I thought googletagservices was supposed to go red.
#233

 

Thats how it goes on mine. My thinking is that if you added googletagservices in Red Untrusted, and googletagservices is black and still blocked for you, then all is fine. Thats what you are getting today, after resetting NoScript.

This is different than what you were seeing yesterday when you added googletagservices in red untrusted but gooogletagservices black was not being blocked.

Why what you see is a little different than what I see? Perhaps the version we are using has something to do, I am using latest beta and you are using latest stable.

Lets test with twitter and google.com. see what you see. I know I tested with those 2 domains before what we are talking about here.

Bo

 

bj, do google.com. And use this website for testing.
http://www.bnwmovies.com/

I dont have any rules for google.com. For me it is default. This is what I see when I go to the movie site with google as Default. You can see it is labeled as https and black.



After setting google.com as red untusted, when I visit the movie site again, google.com is blocked and in Red.



Bo

 

Aha, yes...back to my opening query #232. Yes, googletagservices red Untrusted but, gooogletagservices black not being blocked. Okay. Yes.

and now googletagservices blocked, albeit black.
#236
Yes, black googletagservices.com stays black... but, is reporting blocked...then all is fine.

 

and for me google.com is blocked and in Black

 

Thats how I see it.

Bo

 

Yeah, and I'll re-visit bnwmovies after NoScript update.

 

How do I remove a site? I was trying to see how manually adding sites worked and entered www.www and now I can't remove it.

Thanks.

Edit: Sorted! I set it to Temporary, then revoked Temporary.

 

make Default and Ctrl+R(eload), works for me.

 

All good now. See my above edit.

 

@bjm_ , I was actually wondering, did you manually add googletagservices.com? I don't do that, I just browse to a site and whitelist / blacklist from there.

 

some manually, some from site.... I've been playing.

 

I wonder if that is why the discrepancy? The only sites I manually entered were some sites for Decentraleyes compatibility.

FWIW, I see the same as Bo when I visit AskWoody.com.