RUN FIREFOX WITH NOSCRIPT.

I swear to god if you don't do this it's your bank account. And keep the "trusted" list short.

What happened?

been doing this for a while. downloading noscript updates every day really gives you that "on the cutting edge" feeling.

plz to explain

http://noscript.net/

haha kerm

What happened?

nothing to me, but things have been happening to lots of people! I had to teach my boss to do this today.

is this only pc-relevant?

so far this week it is. I'm more sketchy about safari every day though

what are the 3 scripts being blocked on this very page?

you mean java script?

ILX/Javascript/bbCodeize.js
ILX/Javascript/style.js
ILX/Javascript/ajax.js

mac OK as of right now yn

Hey, I installed it and I use a Mac, better safe than etc.

http://www.sentience.com/num50bp.gif

lol norton

like giving your computer AIDS so doctors will pay more attention to it...

i would use this if it didn't make the internet not work

"driving responsibly keeps making me late to my job"

i mean, is there a way to use it other than, "uh, i guess this script looks safe"

http://msmvps.com/blogs/spywaresucks/

this lady is always goin' nuts about advert farms that wind up hosting ads with malcode in them

I ran adblock since forever so I didn't usedta worry but seriously the asprox (yes ASS PROX) trojan/worm thingamabob and related criminal activities just keep getting more nasty by the hour.

also if you play WOW this goes double for you, you will totally end up naked and penniless unless you drive safe

Threat Assessment
Wild
Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy
Damage
Damage Level: Low
Payload: Uses the compromised computer as a proxy server.
Distribution
Distribution Level: Low
Writeup By: Paul Mangan and Fergal Ladley
Technical Details

Wild level: low

haha what is that supposed to be somebody's assessment of asprox

http://infosec20.blogspot.com/2008/06/asprox-sql-injection-botnet-and-iframe.html

http://www.symantec.com/security_response/writeup.jsp?docid=2007-060812-4603-99

http://infosec20.blogspot.com/search/label/ASPROX

I am just sitting here saying "ASS PROXY" in a very loud whisper to myself over and over.

I am just going to throw this out there and say that if symantec/norton did their jobs worth a shit even 1/20th of the time then maybe people like me wouldn't have to yell at other people for using internet explorer nahmean

like giving your computer AIDS so doctors will pay more attention to it...

― Kerm, Friday, October 31, 2008 12:50 AM (21 minutes ago)

lol

I mean we ain't perfect where I work but shit man people actually paying you money to slow their computers down to a crawl, maybe you want to provide a little protection against some shit

or we can just go back to blaming microsoft and the users hell I dunno what the solution really is, if I did I'd be posting from a tropical atoll that only belongs to me

lmao @

http://en.wikipedia.org/w/index.php?title=Peter_Norton&diff=246926037&oldid=165872509

noscript is good for blocking espn's flash embeds where trey wingo announces to your entire office that you aren't working.

the china proxy one is kind of fun too. magically erase the dalai lama from internets!

noscript is good for blocking espn's flash embeds where trey wingo announces to your entire office that you aren't working.

^^^ truth bomb

has anyone been affected yet?

anyone here i mean

http://infosec20.blogspot.com/2008/06/asprox-sql-injection-botnet-and-iframe.html

― TOMBOT, Friday, October 31, 2008 5:08 AM (9 hours ago) Bookmark Suggest Ban Permalink

http://www.symantec.com/security_response/writeup.jsp?docid=2007-060812-4603-99

― № 1 (libcrypt), Friday, October 31, 2008 5:08 AM (9 hours ago) Bookmark Suggest Ban Permalink

http://infosec20.blogspot.com/search/label/ASPROX

― TOMBOT, Friday, October 31, 2008 5:08 AM (9 hours ago) Bookmark

BANTER!

i've just installed this, although i'm not sure why.

How do I know whether to whitelist a site? Are there feeds I can subscribe too, like with Adblock?

i mean, is there a way to use it other than, "uh, i guess this script looks safe"

― circles, Friday, October 31, 2008 4:59 AM (10 hours ago) Bookmark Suggest Ban Permalink

like, if i'm logging into my bank account, how do i know whether it's blocking the bank's script's or some hackers??

(hackers' script)

( http://evoen.net/images/angelina.jpg )

http://www.cse.lehigh.edu/~lopresti/Courses/2006-07/CSE097/Images/the%2520net.jpg

temporarily allow whatever you need to do, or you can just mark your bank as trusted

what happens when you get fucked is usually that one site is hosting a script that sends you to another site where ANOTHER script runs, so temporarily allowing or trusting the site you were actually intending to visit won't allow some evil person's gobbledygook to take over your shit.

do you trust ilxor.com?

poll thread

of course I trust ilxor.com, I know the guy that wrote it, I know the admin and I'm a frickin' moderator, shit don't load for me anyway.

You could just be saying that to lure guess papers googlers into a trap.

Yeah, but I wrote one of those Javascripts heh heh heh.

the point of "knowing the guy who wrote it" isn't "I trust the dude" it's "I know his name and where he lives."

i've had noscript for more than a year now and its the tits

The world is fucked.

I know very little about this kind of stuff, though I try to keep with it when I can. But even though I am the opposite of 1337, I'm still the person that several other people rely on to fix computer problems and give advice. I think the chain-of-command is screwed up for internet security problems. I'm not sure how urgent the current ASS PROXY situation is, but assuming it was a serious situation, is this how it works? Knowledgeable people in the industry blog about a problem, readers tell their friends, and the information gradually disseminates down to people like me, who are then supposed to call grandma and help her? Even though grandma doesn't know the difference between Firefox and Windows 98, and is never going to understand what scripts even are, let alone take the trouble to manually enable or disable them?

Or are they supposed to wait for Vista to automatically update their computers with additional "protection"?

Obviously I don't have an alternative solution, but I just think the whole thing is fucked up.

way to freak everyone out, tombot

this is like when my aunt tried to protect my grandma from netflix

more like anthraxflix amirite

ASS FLIX

Or are they supposed to wait for Vista to automatically update their computers with additional "protection"?

ha ha!! yes and also grandmothers should not be allowed to run Windows.

in 30 years we'll have licenses and insurance and mandatory safety equipment, just like everything else.

BURN ALL COMPUTERS

er, actually recycle them.

Seventy per cent of the world's discarded phones and computers are exported to China. Most are processed in family-run workshops, where the circuit boards are ripped out of old equipment and heated over open fires. This melts the solder, allowing individual components to be removed and resold. The bare circuit boards are then burned.

deleting all your cookies / logging out of banking sites is pretty u&k too

BUILD TECHNOFORTS OUT OF YOUR COMPUTERS

Seventy per cent of the world's discarded phones and computers are exported to China. Most are processed in family-run workshops, where the circuit boards are ripped out of old equipment and heated over open fires. This melts the solder, allowing individual components to be removed and resold. The bare circuit boards are then burned.

― TOMBOT, Friday, October 31, 2008 1:19 PM (1 minute ago) Bookmark Suggest Ban Permalink

theres some crazy disturbing footage of this in manufactured landscapes http://www.imdb.com/title/tt0832903

this whole thread is disturbing

from the world's youngest expert in disturbing

truthfully, i am grateful to you for starting it, although my peace of mind is somewhat wrecked

reduce, reuse, recycle, and if you can't do those, smelt it over an open fire with your bare hands

the world's youngest expert in disturbing

― TOMBOT, Friday, October 31, 2008 1:31 PM (2 minutes ago) Bookmark Suggest Ban Permalink

r u gonna sue me if i pitch this to discovery channel

Does ilxor work with noscript lol?

yes

fewer ads, too

^ haw

there were a few places today making hullaballoo about Apple recommending that OS X ppl use antivirus - hey you can run ClamAV all you want that's cool but I think most folks here probably know better than to click YES I WANT TO DOWNLOAD THE NEWEST ACTIVE-X CODEC TO WATCH THIS PRON and then install it willy-nilly, which remains the only truly working attack vector against Macs

just stop being dumb on the internet everyone! it's like driving a car.

I ran an update today and now Firefox keeps randomly shutting down and running zombie on me??

a noscript update or what?

Yeah upgraded to the newest version and since then Firefox will crash. System monitor shows it still running so I kill it and it goes zombie, still using memory but otherwise undetectable. Only finally dies when I restart.

what about folks that use Opera??

Though come to think of it I ran the update at work earlier this week and it's run fine there, maybe I need to fuck around here before I start pointing the finger.

upgrade/update in ref to newest version of NoScript obv

I dunno you kids are weird. Stay patched.
HOOS you run ubuntu or another linux package?

(xpost to rev)

Ubuntu here, XP at work.

Can I just say clicking "Allow slapchop.com" was one of the highlights of my week.

I got rid of it months ago after I got sick of the weekly updates and now this:

http://adblockplus.org/blog/attention-noscript-users

I use NoScript and FlashBlock and TrackMeNot add-ons with FF and half the internet is disabled unless I whitelist it. If you surf sketchy sites or want to protect your sensitive information use the TOR Vidalia Bundle with FoxyProxy. Encrypt your hard drive with Truecrypt if you've got big secrets on there.

If you want to check that your IP is masked, turn on your security settings and then go to decloak.net and if your IP still shows up you're doing something wrong.

Hm this NoScript ad thing came up somewhere else this morning and has left me wondering what I'm doing wrong, cause not only have I never seen any ads generated by noscript (how would I, exactly?), it's never insisted I updated it (weekly, you say Stan? Never, for me!). Maybe I disabled updates the first time one asked, or something. Anyway both programs are still cooperating as a result, but I must say using noscript can be a massive pain sometimes, trying to work out what on a site I need to enable to make its damn video player or photo slideshow function when sites embed shit from other media servers so you cant tell whats legit and what isnt.

Yeah, it updated weekly and none of the "only install major updates" solution never worked for me. But there's a reply to that post I linked to and an apology from NoScript's maker:

http://hackademix.net/2009/05/04/dear-adblock-plus-and-noscript-users-dear-mozilla-community/

(most people don't accept the apology though)

I use both as well, and have, like Trayce, never had any ads or whatever. He's obviously sorry and ashamed, and if he corrects the mistake (which he says he intends to do), why not forgive him?

(thanks for the links though StanM! This would otherwise completely have gone past me)

Pah it reads like such a storm in a teacup! Adblocker blocks noscripts ads, noscript find a way around it that adblock users probably wouldnt even have known/cared about, boo de hoo, god open source coders are a bunch of creepy aspies.

As a creepy aspie I object to being thrown together with coders

Hahah.

i have some sympathy for noscript guy, was just fixing his problems with ABP the only way he knew how - by adding a whitelist (albeit in ABP's area)

that said, those ads on noscript site, the ones that popup on rollover, are just the kind of intrusive, disruptive ads i installed adblocker for in the first place. and he overstepped the mark the moment he started obfuscating the whitelist insertion code.

NoScript is fucking up fonts in Firefox. If your fonts are suddenly fucking up, downgrade to v1.9.9.35 or have a crack at this:

You can work around by setting the noscript.surrogate.popunder.sources about:config preference to an empty string for now, or by adding the malfunctioning domains to noscript.surrogate.popunder.exceptions.

The new version of Noscript is unbelievably bewildering

If anybody on the planet ever figures out how it's meant to work pl bump this thread

I just set new websites to "custom" and turn on scripts, leaving the rest as default - seems to work fine so far.

it's horribly slow for me. and yes the new (presumably temporary) UI is indeed bewildering

sorry, i don't have any tips

ah here's a helpful tip, not much else in this forum thread that I can see

If you're looking for Temporarily Allow, you need to click Trusted and look for the clock icon.

https://community.norton.com/en/forums/waiting-firefox-57-compatible-noscript-extension

who the fuck uses firefox in this day and age

I keep hearing the new browser they just released is amazing, I might give it a go since Chrome turned into such a hogg azz piece of shit

If anybody on the planet ever figures out how it's meant to work pl bump this thread

trusted = whitelist, allow everything from the chosen site. in the latest version only temporarily, click on the clock icon to make the setting persist

untrusted = blacklist, forbid everything. when you click "temporarily allow all this page", all blacklisted sites remain so, only unknown and trusted sites will be allowed

custom = pick what elements to allow/deny for the chosen site

default = forget site. existing rules for the site are removed, default permissions will apply. can also be used to modify noscript's default behaviour, so *don't* use it for allowing a specific site to run scripts, that's what the trusted/custom buttons are there for.

padlock icon = if green, only allow scripts when the site uses https; if red allow scripts over both http and https

thanks, chihuahuau