61–70 of 72 posts
Use noscript. It's possibly one of the best add-ons out there now.
Unfortunately there are too many sites that refuse to work without javascript, so any security benefits is negligible because it's very easy to be social engineered into enabling javascript.
Use noscript. It's possibly one of the best add-ons out there now.
Not sure if this has changed but I ditched noscript when I discovered it doesn't block inline script execution. These days I use Ublock Origin: Settings -> check 'I am an advanced user'. You should now be able to block 1st party, third party and inline JS from executing and save on a per-site basis. Hope this helps someone!
Earlier quoted context omitted.
There's a steady stream of criticism from other users that is not getting flagged (and is often highly upvoted). Consider contacting the mods using the footer link to ask what they think might be different about your comments that results in HN readers flagging them.
Look again, a bunch of the original comments are gone.
Earlier quoted context omitted.
Unfortunately there are too many sites that refuse to work without javascript, so any security benefits is negligible because it's very easy to be social engineered into enabling javascript.
You can get most to work by whitelisting one domain while keeping the cesspool of trackers off your computer. If it still doesn't work there are better things in life to spend time on than somebody's poorly constructed website.
Earlier quoted context omitted.
Not knowing something is better than "knowing" something false.
Whats is false in this case?
Earlier quoted context omitted.
Not sure if this has changed but I ditched noscript when I discovered it doesn't block inline script execution. These days I use Ublock Origin: Settings -> check 'I am an advanced user'. You should now be able to block 1st party, third party and inline JS from executing and save on a per-site basis. Hope this helps someone!
citation on the inline script claim?
Can anyone confirm if 73.0b3 includes the same fix? Their "what's new" link in the beta's About window doesn't track with the beta release cycle. There's no revision listed, so I think the notes are for 73.0b1 still? At any rate, there's no mention of any security fixes. https://www.mozilla.org/en-US/firefox/73.0beta/releasenotes/
I don't know my way around Firefox's source control at all, but I tried to do some digging. My first thought was to look through the changelogs on recent release tags, but there's no mention of the CVE that I can find in any of them. I did find these changes in 72 which look related to the bug: https://hg.mozilla.org/releases/mozilla-release/rev/8260da04... And poking at one of those referenced files in the beta chan…
Use noscript. It's possibly one of the best add-ons out there now.
Unfortunately there are too many sites that refuse to work without javascript, so any security benefits is negligible because it's very easy to be social engineered into enabling javascript.
A warning and a fix within two days of releasing the affected version. I appreciate this team’s transparency and priorities.
Firefox is creepy AF. I was just listening to "Diamond Ned Flanders" by MadeinTYO on Apple Music, and when I open Firefox the "suggested article" on the front page is about Ned Flanders. That's some Facebook type shit right there. Uninstalled.
Could you please stop posting unsubstantive and/or flamebait comments to HN? We've already had to ask you this, and you've been doing it a lot. Also, while I have you, please stop using HN for ideological battle—you've been doing a lot of that as well, and it destroys what this site is for ( https://news.ycombinator.com/newsguidelines.html ), regardless of which ideology you favor or disfavor. Also, can you please no…