NoScript’s Cross-tab Identity Leak Protection (or “TabGuard”) is an experimental countermeasure against the Targeted Deanonymization via the Cache Side Channel attack by Mojtaba Zaheri, Yossi Oren and Reza Curtmola, presented at Usenix Security in August 2022. It is loosely inspired by the Leakuidator+ browser extension proposed by the authors as a defense, but it’s designed… Continue reading 2 Months of TabGuard
The dust has settled, all the rough edges have been smoothed, and NoScript’s new UI is better than ever. Many usability and accessibility enhancements (from keyboard navigation to dark / light color schemes) have been added, and the result is just gorgeous, on the website too. The default theme now is “Modern Red”, but the… Continue reading NoScript, Red or Blue? Whatever Suits You!
ABE Quantum is the combination of Contextual Policies, one of the most requested features in NoScript’s history, and LAN protection, an important “Classic” defense lost in the 2017 Quantum migration. After years of waiting and months of hard work, this good stuff (which I personally missed a lot, too) is finally in the hands of… Continue reading Contextual Policies & LAN Protection (ABE Quantum) in NoScript 11.3!
Today Mozilla released Firefox 87, introducing SmartBlock, a new feature which “intelligently fixes up web pages that are broken by our tracking protections, without compromising user privacy […] by providing local stand-ins for blocked third-party tracking scripts. These stand-in scripts behave just enough like the original ones to make sure that the website works properly.… Continue reading Welcome SmartBlock: Script Surrogates for the masses!
I’ve just received an email from Stephen Etheridge (Avast): Hi there, I am a Product Manager for CCleaner and I’d like to share some information regarding a recent incompatibility between CCleaner and Firefox 79 regarding extension settings storage. The issue is covered in the following threads: CCleaner Forum – CCleaner deletes NoScript Settings on Firefox… Continue reading CCleaner Wiping Out Firefox Extensions Data: Expected Fix & Work-Around
As the readers of this blog almost surely know, I’m the author of NoScript, a web browser security enhancer which can be installed on Firefox and Chrome, and comes built-in with the Tor Browser. NoScript has received support by the Open Technology Fund (OTF) for specific development efforts: especially, to make it cross-browser, better internationalized… Continue reading Save Trust, Save OTF
The problem Google’s “Manifest V3” ongoing API changes are severely hampering browser extensions in their ability to block unwanted content and to enforce additional security policies, threatening the usefulness, if not to the very existence, of many popular privacy and security tools. uBlock’s developer made clear that this will cause him to cease supporting Chromium-based… Continue reading A cross-browser code library for security/privacy extensions. Interested?
As you may have noticed, NoScript Quantum’s placeholders for blocked embeddings has an animation moving the NoScript snake icon from the center to the top left side when you hover it, in order to make the label more readable. Some people can find this annoying, but fortunately in WebExtensions everything is made of standard web… Continue reading Freeze That Snake!
I’m pleased to announce that, some hours ago, the first public beta of cross-browser NoScript (10.6.1) passed Google’s review process and has been published on the chrome web store. This is a major milestone in NoScript history, started on May the 13th 2005 (next year we will celenbrate our 15th birthday!). Over all these years… Continue reading Cross-Browser NoScript hits the Chrome Store
Dec 18th 2017 Update NoScript 10.1.6 reimplements the “Export” button functionality in a more convoluted way, which doesn’t require the “downloads” permissions anymore though :) Enjoy! It seems some users are really upset with NoScript 10.1.5.7 asking for an additional “downloads” permission. This surprised me a bit. Not just because NoScript 5, which everyone loves… Continue reading NoScript and the “downloads” permission