121–130 of 193 posts
Earlier quoted context omitted.
Chrome lets you limit access to a list of specified websites. Right click the extension icon, click manage extension, and find the option there.
Excellent, I hadn't noticed that one yet. Yeah, that's a good start.
There's an incredibly useful extension that's not on that list that I bet a good number of HN folks would like: Vimium [1] It lets you use keyboard shortcuts to navigate through webpages, click buttons, jump to text boxes, etc. it's been huge for me both as a productivity tool (it's significantly faster than using a mouse for navigation) and also for reducing RSI/strain on my hands. Here's a video of it in action as…
Earlier quoted context omitted.
Yes, this - absolutely. Every extension you install is another potential risk/attack vector. Consider the sources carefully and run the least number of extensions possible. Each one potentially has control of your browser, so choose accordingly.
Lately I ended up running much fewer extensions than I used to, and actually looking at their source first. I think the only closed-source extension I run is lastpass, and I'm evaluating open-source alternatives. How do people who cannot read code even cope, I don't know.
I deleted my account and switched to BitDefender. Still getting the LastPass emails though, whenever I check my spam folder.
Also, LastPass slowed my Android phone a lot. BitDefender doesn't seem to do that.
In short, my recommendation is: stay the hell away from LastPass. They can't even handle an email system, I don't trust them at all to handle my passwords.
Would add HTTPS Everywhere https://www.eff.org/https-everywhere and NoScript https://noscript.net/ to that list
Does HTTPS Everywhere actually work for you? It's utterly useless for me as far as I can tell. Try going to some site (say, example.net) in Chrome and watch it just load HTTP.
Earlier quoted context omitted.
Does HTTPS Everywhere actually work for you? It's utterly useless for me as far as I can tell. Try going to some site (say, example.net) in Chrome and watch it just load HTTP.
IIRC, you have to enable the "strict" mode, or something along those lines, in the settings before it rejects HTTP connections from being made. I had the same issue.
> Privacy Badger + UBlock Origin The days of uBlock Origin on Google Chrome are numbered. It may not work for Google Chrome when Manifest V3 is implemented (and no recourse provided for uBlock Origin). [1] P.S: I haven't kept up with the latest developments on this since last year. [1]: https://www.ghacks.net/2019/01/22/chrome-extension-manifest-...
At some point I’m sure they’ll start trying to bypass local DNS by forcing DNS over HTTPS to only their approved servers, at which point someone will build a MITM HTTPS proxy for home users that you can seamlessly install onto a Raspberry Pi until we see the next escalation in the never ending battle for our eyeballs.
Earlier quoted context omitted.
IIRC, you have to enable the "strict" mode, or something along those lines, in the settings before it rejects HTTP connections from being made. I had the same issue.
Thanks, but then what do I do about HTTP-only sites? Why can't it default to HTTPS and then auto-fallback to HTTP when HTTPS connections fail for sites that aren't in the known-HTTPS list? It seems like a logical thing to do instead of just going straight to HTTP.
An active adversary will just cheerfully block that HTTPS connection because you'll fall back to insecure silently.
Earlier quoted context omitted.
Thanks, but then what do I do about HTTP-only sites? Why can't it default to HTTPS and then auto-fallback to HTTP when HTTPS connections fail for sites that aren't in the known-HTTPS list? It seems like a logical thing to do instead of just going straight to HTTP.
This only helps you at all against passive adversaries. An active adversary will just cheerfully block that HTTPS connection because you'll fall back to insecure silently.
Earlier quoted context omitted.
I even pay them for premium. I can't send an email without it. It makes business emailing much more professional.
Can I ask how? What does it correct or suggest that makes it so useful?