The title should be something like "NoScript for dummies". I expected an explaination of non self-explenatory things, like what each option does and things like this. Instead I get a guide of how to click a fuckin' install button.
It's too much work; the amount of times I get hit with click jackers or multiple pop-ups is less hassle than manually updating a white list constantly. What would be better is a mix of stumbleupon and mailwasher, the noscript guys collate negative clicks from signed-in users, (avoids false positives) or a short Ffox history if its a bad attack, run it through some statistical app and THEY build the white list. Why re-invent the wheel?
I dont thin its seen as "protection" per say, but what it does is gives an extra option to "curtail" the amount of crap that comes with a web page, sure when you turn on JS it will continue as normal, I dont use it for protection, i use it to limit the downloaded crap....
Corychristison..you use linux, and youe a software engineer, untill the like of yourself start writin really good games and break the windows XP monopoly on games, nothin much will change..linux platform games are to few
I love Noscript. It is a very useful tool. Especially for someone who uses Stumbleupon, as it automatically blocks all scripts on any new page where you haven't changed the settings.
I also got rid of the notification bar as it was annoying popping up all the time. You can get along fine with just the icon.
if there's one add-on to install for firefox, it's this one if u care about security.
there's no need to use any other security add-on like adblock plus cause it's totaly useless when noscript is installed. it blocks anything so why installing adblock plus as noscript is able to replace it as it blocks all the things adblocker is coded for and nothing can make firefox surfing more secure, just need a little time to see your webpages the way u want. 10/10
corychristenson is a nub...noscript is probably the easiest way to harden your browser...if you run adblock plus AND noscript you have probably the safest browser solution available...for any price-and it's FREE.
corychristenson, when you get a minute, take your foot out of your mouth and notice how much less adblock plus has to block when running noscript...both work admirably...together they are nearly impenetrable. Your antivirus program will be very bored when running both of these...
Apparently glenn735 didn'te even read my post. He just gets a hardon for yelling at people on the web.
NoScript is a bandage solution, plain and simple. Any malicious 'hacker' can circumvent it by offering up something compelling and making you want to view it with JS.
What we need is an extension to control what JS can and cannot do. Firefox implements the basic things like popup control, allow/disallow changing status bar text, etc. etc.
Those things are already controllable in Firefox's native chrome options. To have them repeated in noscript's UI would be redundant. Also NoScript DOES restrict things scripts can do. It prevents XSS, unnecessary/suspicious refreshes, some CSRF, and allows first-party only JS, which is ALWAYS more secure. most attacks are via 3rd party js.
Upcoming is the ABE module, a comprehensive content policy editor which will help control EVERYTHING firefox can and can't do.
I said: NoScript does not make it any more secure. Period. It's either "All JS Off" or "All JS On". Okay. Understand? I hope so. When you turn it "On" it no-longer 'protects' you. Right? Okay.
Now, if, say, you browse to a site that requires JS for something you may find interesting. You think "Okay, I'll turn it on."
ALSO, I said "What we need is an extension to control what JS can and cannot do. Firefox implements the basic things like popup control, allow/disallow changing status bar text, etc. etc."
NOT that it didn't already support it.
Please, learn to read before commenting like a jack ass.
As for your "it's free" comment. If you want to really have some security, move over to Linux or an equally more secure OS (FreeBSD comes to mind as well).
I've been using Linux for 9 years now. I'm a software engineer and a web developer for fun. I know what I am talking about and NoScript offers no real protection. It's just a façade.
I use a netbook with Ubuntu Linux for when I'm out and about. Surf with Firefox, and I do have Noscript installed, for the simple reason it stops a lot of sites downloading needless junk like Doubleclick adverts, and speeds up my page loading no end, also saves on my monthly download limit when using a cellular modem with the netbook.
What is needed is the ability to control what the JS is doing. Not just 'block' or 'not block' the whole page. How does this protect you, anyway? By default it blocks all JS. What if the site is convincingly safe enough and you want to use a feature on it? But turns out to be malware when you click the magic 'Enable Javascipt' button? Then you are NO better off than /not/ using NoScript. It's a false sense of security.
You have a good point, but this is why you don't allow scripts on pages you don't trust. Often times I will get what I want from a webpage without allowing any scripts.
Oh, I know. But people are putting too much faith in NoScript. It's not protection.
If you want protection, education is the only way to be sure.
People are stupid. And people think that Anti-virus' are necessary. If you think it's necessary to have an AV, Firewall, E-mail checker, you are blind and wasting money.
Also your dogma tha tonly education will solve it is erroneous. There are other extensions that can restrict js/obects even more. Check out the extensions "Controle de Scripts," "RequestPolicy," and "exexceptions". You CAN control what firefox does down to a t.
i installed it, and after an hour of using i set it on globaly allow.. dont really find much of a use from that program, basically all it does is its blocking java, flash, and all that sort of stuff... i would certanly install it if i had 5 yr old sister, but (luckily) i dont have one so ill remove it right now..
you also have to enable ytimg. If you spent more than 5 seconds trying to see what you have to enable to get youtube to work, you could have figured it out by yourself.
huh? i never had problems with the addon, and youtube worked for me without tweaking it. The only reason i got rid of software is that i dont need it. For me its as useful as UAC on vista.
what i don't prefer is having OS nagging me every time i try to open downloaded software, or change system settings. and for some reason i always thought that you have to use Run As only when you have UAC activated..
But yeah i agree with you, UAC is useful, but only for some people.
"i always thought that you have to use Run As only when you have UAC activated"
actually I was talking of the RunAs shell command which is how would get elevated in XP which you could also have as a shell menu item with some registry hackery In any case, what I wanted to say is, that it's A LOT easier to be a restricted/non-admin user in Vista than in XP. Why do you think many private XP users are logged on as admins all the time? And I hope you agree with me that this is a bad idea
Great video, simple enough for novices like me to understand, other advice about the accursed popup ads is too techie for the likes of us. Thanks very much!
Say you're at a website that has a lot of ads on it, enabling script for ONLY the site your on and not all those extra ad sites can keep viruses and spyware away.
Many sites use Javascript for ads and all sorts of other useless crap that you don't need or want. Try this;
Go to the Internet Movie Database (IMDB) and look up a movie that's sure to get a lot of matches, like Dracula. Click 5-6 of the titles so that they all open in new tabs at the same time. Watch Firefox go off into limbo for several seconds at a time.
Next, turn off Javascript and try the exact same thing. The pages will load MUCH faster. JS/Flash is NOT needed for any part of the IMDB.
There was a security flaw affecting Windows, Firefox, IE, and QuickTime over the summer. QuickTime files can contain JavaScript to facilitate interactive movies, for instance. Some guys figured out how to exploit a flaw in Windows, IE, and Firefox. They were able (if Firefox was your default browser) to remotely control Windows and security flaws in IE. One demo that they showed was a QuickTime file that could force your computer to shut down. NoScript actually prevented this exploit.
Nice video 'overview', you 'buried the lead' of the story. If you want to raise awareness and change behavior 1. quickly summarize the threat 2. explain the relavance of this solution 3. and make it clear how this solution is going to assist users in "determining" if they should 'blacklist a site'
Maybe this is in your FAQ or instructions, but you've missed the opportunity to communicate that here. It appears the user is going to have to manually manage everything.
Don't know what they used, but you could use CamStudio, a free download that works pretty good to capture all or part of whatever is on your screen. Not real fancy but it works.
The title should be something like "NoScript for dummies". I expected an explaination of non self-explenatory things, like what each option does and things like this. Instead I get a guide of how to click a fuckin' install button.
Joskapistanyaad 4 weeks ago
Is this better than adblockplus I don't get this can someone explain in simple terms what this does any help would be great cheers
nicko198718 1 month ago
@nicko198718 this disallows javascript on websites unless you explicitly allow it. It doesn't just block ads.
jorowi 1 month ago
The icon is gay and you are a piece of shit.
TheTechBite 2 months ago
zoom out, would ya?
XyberXero 7 months ago 3
I have wot addon, adblock addon, and noscript addon. all of them keep my Firefox browser safe.
coldroll6 2 years ago
It's too much work; the amount of times I get hit with click jackers or multiple pop-ups is less hassle than manually updating a white list constantly. What would be better is a mix of stumbleupon and mailwasher, the noscript guys collate negative clicks from signed-in users, (avoids false positives) or a short Ffox history if its a bad attack, run it through some statistical app and THEY build the white list. Why re-invent the wheel?
bartokism 2 years ago 2
Gotta try that out. I hate when websites are doing shit with javascript.
Lunaticracy 2 years ago
btw WHO would even dream about putting "google-syndicationDOTcom" into the WHITELIST? WHO would be THAT noob??
mrrotweiler2 2 years ago
I dont thin its seen as "protection" per say, but what it does is gives an extra option to "curtail" the amount of crap that comes with a web page, sure when you turn on JS it will continue as normal, I dont use it for protection, i use it to limit the downloaded crap....
Corychristison..you use linux, and youe a software engineer, untill the like of yourself start writin really good games and break the windows XP monopoly on games, nothin much will change..linux platform games are to few
Bree3e 2 years ago
That was amazing, but I just dont get it, what dose NoScript??
Please answer on a mail here on youtube!
FunnyAndiri 2 years ago
I love Noscript. It is a very useful tool. Especially for someone who uses Stumbleupon, as it automatically blocks all scripts on any new page where you haven't changed the settings.
I also got rid of the notification bar as it was annoying popping up all the time. You can get along fine with just the icon.
Great add-on.
mellowmark1 2 years ago
Thanks, great video. I was thinking about downloading this because I am getting a lot of spyware on my computer and it's so not cool.
redg18 3 years ago
Thanks.
johangolden 3 years ago
if there's one add-on to install for firefox, it's this one if u care about security.
there's no need to use any other security add-on like adblock plus cause it's totaly useless when noscript is installed. it blocks anything so why installing adblock plus as noscript is able to replace it as it blocks all the things adblocker is coded for and nothing can make firefox surfing more secure, just need a little time to see your webpages the way u want. 10/10
41L3F 3 years ago
"other security add-on like adblock plus"
Nigga please
FunLeech 3 years ago
lol ironically noscript actually blocks this vid and youtube
bao20 3 years ago 5
thats why you need to allow youtube to use javascript
MrGmoder 3 years ago
@bao20 That it does, by default, anyway. But all you need to do is to whitelist youtube.com and ytimg.com.
JanusHoW 3 months ago
corychristenson is a nub...noscript is probably the easiest way to harden your browser...if you run adblock plus AND noscript you have probably the safest browser solution available...for any price-and it's FREE.
corychristenson, when you get a minute, take your foot out of your mouth and notice how much less adblock plus has to block when running noscript...both work admirably...together they are nearly impenetrable. Your antivirus program will be very bored when running both of these...
glenn735 3 years ago
Apparently glenn735 didn'te even read my post. He just gets a hardon for yelling at people on the web.
NoScript is a bandage solution, plain and simple. Any malicious 'hacker' can circumvent it by offering up something compelling and making you want to view it with JS.
What we need is an extension to control what JS can and cannot do. Firefox implements the basic things like popup control, allow/disallow changing status bar text, etc. etc.
corychristison 2 years ago
Those things are already controllable in Firefox's native chrome options. To have them repeated in noscript's UI would be redundant. Also NoScript DOES restrict things scripts can do. It prevents XSS, unnecessary/suspicious refreshes, some CSRF, and allows first-party only JS, which is ALWAYS more secure. most attacks are via 3rd party js.
Upcoming is the ABE module, a comprehensive content policy editor which will help control EVERYTHING firefox can and can't do.
Reality 4, you 0.
onlyAerik 2 years ago
(@onlyAerik)
I think you are misunderstanding what I'm saying.
I said: NoScript does not make it any more secure. Period. It's either "All JS Off" or "All JS On". Okay. Understand? I hope so. When you turn it "On" it no-longer 'protects' you. Right? Okay.
Now, if, say, you browse to a site that requires JS for something you may find interesting. You think "Okay, I'll turn it on."
BAM! Malicious site.
Where's the protection?
There is none. It's a façade.
corychristison 2 years ago
ALSO, I said "What we need is an extension to control what JS can and cannot do. Firefox implements the basic things like popup control, allow/disallow changing status bar text, etc. etc."
NOT that it didn't already support it.
Please, learn to read before commenting like a jack ass.
corychristison 2 years ago
(again, @glenn735)
As for your "it's free" comment. If you want to really have some security, move over to Linux or an equally more secure OS (FreeBSD comes to mind as well).
I've been using Linux for 9 years now. I'm a software engineer and a web developer for fun. I know what I am talking about and NoScript offers no real protection. It's just a façade.
corychristison 2 years ago
@corychristison and for anyone else interested.
I use a netbook with Ubuntu Linux for when I'm out and about. Surf with Firefox, and I do have Noscript installed, for the simple reason it stops a lot of sites downloading needless junk like Doubleclick adverts, and speeds up my page loading no end, also saves on my monthly download limit when using a cellular modem with the netbook.
gomemdesoto 2 years ago
That's what Adblock Plus is for.
corychristison 2 years ago
I tried Adblock Plus, but found things was easier with Noscript. Guess that's my personal preferences.
gomemdesoto 2 years ago
thanks for the tips! fantastic voice!
Anekocarbuncle 3 years ago
uve got a pretty kool voice for videos like this lol
bigrock123 3 years ago 2
Use Adblock Plus to block Ads and Flash...
NoScript is a bandage solution.
What is needed is the ability to control what the JS is doing. Not just 'block' or 'not block' the whole page. How does this protect you, anyway? By default it blocks all JS. What if the site is convincingly safe enough and you want to use a feature on it? But turns out to be malware when you click the magic 'Enable Javascipt' button? Then you are NO better off than /not/ using NoScript. It's a false sense of security.
corychristison 3 years ago 3
You have a good point, but this is why you don't allow scripts on pages you don't trust. Often times I will get what I want from a webpage without allowing any scripts.
mellowmark1 2 years ago
Yes, it's actually quite an eye-awakening experience to turn off javascript and see that you can get done 99% of what you want without it.
onlyAerik 2 years ago
(@onlyAerik 2nd comment)
Oh, I know. But people are putting too much faith in NoScript. It's not protection.
If you want protection, education is the only way to be sure.
People are stupid. And people think that Anti-virus' are necessary. If you think it's necessary to have an AV, Firewall, E-mail checker, you are blind and wasting money.
Education is key. Plain and simple.
corychristison 2 years ago
Nobody's putting FAITH in noscript at all. It has an active forum for support, bug reporting and feature requests. Stop the strawman attacks.
onlyAerik 2 years ago
Also your dogma tha tonly education will solve it is erroneous. There are other extensions that can restrict js/obects even more. Check out the extensions "Controle de Scripts," "RequestPolicy," and "exexceptions". You CAN control what firefox does down to a t.
onlyAerik 2 years ago
try ff 3
christi1992 3 years ago
Hmmm. Seems a little excessive to me. I already have a firewall, and it's more intelligent than this!
Think I'll give it a miss for now.
numbskullandy 3 years ago
it lets me wont play youtube
moonrays00 3 years ago
just put youtube in a "whitelist" so that it wont block it. or get flash if you dont have it yet..
sergi5122 3 years ago
i already added it to white list bust still damn program...
moonrays00 3 years ago
i installed it, and after an hour of using i set it on globaly allow.. dont really find much of a use from that program, basically all it does is its blocking java, flash, and all that sort of stuff... i would certanly install it if i had 5 yr old sister, but (luckily) i dont have one so ill remove it right now..
sergi5122 3 years ago
you also have to enable ytimg. If you spent more than 5 seconds trying to see what you have to enable to get youtube to work, you could have figured it out by yourself.
NamiAquatique 3 years ago
huh? i never had problems with the addon, and youtube worked for me without tweaking it. The only reason i got rid of software is that i dont need it. For me its as useful as UAC on vista.
sergi5122 3 years ago
Well, UAC is pretty useful or do you prefer using the RunAs command every times you need to run a program with elevated rights?
4K4K1K0 2 years ago
This was meant as a response to sergi5122.
4K4K1K0 2 years ago
@4K4K1K0
what i don't prefer is having OS nagging me every time i try to open downloaded software, or change system settings. and for some reason i always thought that you have to use Run As only when you have UAC activated..
But yeah i agree with you, UAC is useful, but only for some people.
sergi5122 2 years ago
@sergi5122
"i always thought that you have to use Run As only when you have UAC activated"
actually I was talking of the RunAs shell command which is how would get elevated in XP which you could also have as a shell menu item with some registry hackery In any case, what I wanted to say is, that it's A LOT easier to be a restricted/non-admin user in Vista than in XP. Why do you think many private XP users are logged on as admins all the time? And I hope you agree with me that this is a bad idea
4K4K1K0 2 years ago
you also have to enable ytimg.
NamiAquatique 3 years ago
Is Firefox something good ore...???
flemter 3 years ago
Thanks - very helpful.
straydoggio 3 years ago
Great video, simple enough for novices like me to understand, other advice about the accursed popup ads is too techie for the likes of us. Thanks very much!
ArchieLindsay 4 years ago
What is the tool that you use to film the moves of your mouse? (follows your mouse)
MatthiasTjong 4 years ago
So basically this add on turns stuff off which you have to turn on manually or else no site works?
What's the use of that?
yourulenl 4 years ago
So the retards won't get keyloggers.
Hutz86 4 years ago 10
Say you're at a website that has a lot of ads on it, enabling script for ONLY the site your on and not all those extra ad sites can keep viruses and spyware away.
NamiAquatique 3 years ago
Many sites use Javascript for ads and all sorts of other useless crap that you don't need or want. Try this;
Go to the Internet Movie Database (IMDB) and look up a movie that's sure to get a lot of matches, like Dracula. Click 5-6 of the titles so that they all open in new tabs at the same time. Watch Firefox go off into limbo for several seconds at a time.
Next, turn off Javascript and try the exact same thing. The pages will load MUCH faster. JS/Flash is NOT needed for any part of the IMDB.
lurkerrekrul 2 years ago 2
This comment has received too many negative votes show
Stupid video. Two minutes of four speaking how to plug your computer to outlet. No tips and tricks.
Can't imagine blonde chick know nothing about FF add-on installation, but thinking about XSS prevention.
maxyudin 4 years ago
love it
rappids 4 years ago
what is this Do tho ?? i dont get it
cezaxgame 4 years ago
There was a security flaw affecting Windows, Firefox, IE, and QuickTime over the summer. QuickTime files can contain JavaScript to facilitate interactive movies, for instance. Some guys figured out how to exploit a flaw in Windows, IE, and Firefox. They were able (if Firefox was your default browser) to remotely control Windows and security flaws in IE. One demo that they showed was a QuickTime file that could force your computer to shut down. NoScript actually prevented this exploit.
danthemainman1 4 years ago
Check out that cool icon. That gots to be the coolest icon I've seen in a long time...
jondavis1234 4 years ago
o_O
AlmightyAsunder 4 years ago
Nice video 'overview', you 'buried the lead' of the story. If you want to raise awareness and change behavior 1. quickly summarize the threat 2. explain the relavance of this solution 3. and make it clear how this solution is going to assist users in "determining" if they should 'blacklist a site'
Maybe this is in your FAQ or instructions, but you've missed the opportunity to communicate that here. It appears the user is going to have to manually manage everything.
Spacelines 4 years ago
This has been flagged as spam show
old5cool you suck die spammer
thekrutch434 4 years ago
apparently its for stopping websites from running javascript programs (etc.) on your computer unless you say its OK.
HuckleberryFlan 5 years ago
Some ads also give you viruses if you're not careful. This can prevent it
NamiAquatique 3 years ago
what is this for again?
delixioso 5 years ago
Nice program. Don't know why idiots can't see good programs where it's out here whacking them in the face
fuzioninfinity 5 years ago
What program did you use to create this video ?
cekay69 5 years ago
Don't know what they used, but you could use CamStudio, a free download that works pretty good to capture all or part of whatever is on your screen. Not real fancy but it works.
HuckleberryFlan 5 years ago
thx i know camstudio but it doesnt view the part of the screen where the mouse is like this video does. thats why i ask what prog was used.
cekay69 5 years ago
I used CamStudio. There is an option to enable panning which will follow your cursor.
jorowi 5 years ago
completely useless!
EMkaEL7 5 years ago
This has been flagged as spam show
stfu deathshrub u fuking asshole
Zuhuk 5 years ago
karasuhebi - the word "flash" is in the guy's user name. i wouldn't worry too much about what he thinks of a program designed to disable flash.
shamrox 5 years ago
This has been flagged as spam show
um you're a fucking nigger. go suck a monkeys asshole. oh sorry i shouldn't talk about your mother in such a manner.
deathshrub 5 years ago
How is this useless? Don't talk shit about something without backing it up. NoScript actually backs up their claims.
karasuhebi 5 years ago
This has been flagged as spam show
That is the lamest program i have ever seen.
As a javascript user myself, there is absolutely no point in this.
doodleflash 5 years ago
This has been flagged as spam show
Check it out @ noscript[DOT]net
old5chool 4 years ago
Except for maybe keeping viruses off your computer.
NamiAquatique 3 years ago