<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1537939920946_22020"><span id="yui_3_16_0_ym19_1_1537939920946_22040">On the general topic of security.</span></div><div id="yui_3_16_0_ym19_1_1537939920946_22055"><span id="yui_3_16_0_ym19_1_1537939920946_22040"><br></span></div><div><span id="yui_3_16_0_ym19_1_1537939920946_22040">The other day someone from high up at Microsoft was on the television talking about how AI will be used to solve many big problems, like hurricane recovery.</span></div><div><span id="yui_3_16_0_ym19_1_1537939920946_22040"><br></span></div><div><span id="yui_3_16_0_ym19_1_1537939920946_22040">Asked about security, he replied that Microsoft responds as soon as it learns about a threat. No mention of actively looking for vulnerabilities or attempting to design them out from the start.</span></div><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1537939920946_22146" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;" id="yui_3_16_0_ym19_1_1537939920946_22145"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1537939920946_22144"> <div dir="ltr" id="yui_3_16_0_ym19_1_1537939920946_22143"> <font id="yui_3_16_0_ym19_1_1537939920946_22147" size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Ivan Sergio Borgonovo <mail@webthatworks.it><br> <b><span style="font-weight: bold;">To:</span></b> conspire@linuxmafia.com <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, September 25, 2018 11:38 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [conspire] NoScript<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1537939920946_22148"><br><div dir="ltr" id="yui_3_16_0_ym19_1_1537939920946_22149">On 09/20/2018 07:17 PM, Paul Zander wrote:<br clear="none">> Someone, not on the CABAL list, asked why I use No Script and didn't it limit my access to some fancy websites. Below is my reply. Did I get this reasonably correct?<br clear="none">> <br clear="none">> <br clear="none">> More and more websites use javascript. Also many of those scripts link to other websites.<br clear="none">> <br clear="none">> Loading other websites means more web traffic. It takes time to establish the<br clear="none">> links. What is the benefit to me to load facebook or<br clear="none">> googlesyndication?<br clear="none">> <br clear="none">> <br clear="none">> Javascripts take up CPU cycles on my computer. Using my resources to serve up ads I am not interested in. After I have bought something on line, why do I want to see ads for the same stuff?<br clear="none">> <br clear="none">> Last, and most important, once a script is running on my computer, there are too many ways the bad actors can do things I don't want.<br clear="none"><br clear="none">It seems that the WebExt version of NoScript is not going to get into <br clear="none">Debian. Probably because of some controversies related to the revenue <br clear="none">strategies of the author.<br clear="none"><br clear="none">I know people in Palermo that knows Maone personally and they say he is <br clear="none">a good person with a family etc... and he has to live on something...<br clear="none"><br clear="none">Being able to install noscript as a package was a major plus since I <br clear="none">didn't have to have multiple copies of the same plugin for every firefox <br clear="none">profile, I didn't have to rely on users (my family) upgrading it, I <br clear="none">didn't have to install it on every single profile my users have etc...<br clear="none"><br clear="none">When firefox was moving from xul to webext extension probably some <br clear="none">preparatory changes made xul noscript stop to work with older releases <br clear="none">of noscript so thet you had to install the latest noscript and Debian <br clear="none">was lagging behind. Out of frustration I even decided to set up my home <br clear="none">debian repository and package the newer version of noscript.<br clear="none"><br clear="none">Unfortunately it seems there is no shared method adopted by debian <br clear="none">packager to package firefox plugins, so that every plugin comes with a <br clear="none">different script to clone the git repo, patch etc...<br clear="none"><br clear="none">So I lost interest in really learning the art.<br clear="none"><br clear="none">Now since there's is no more reason to prefer noscript to alternatives <br clear="none">I'm starting to consider uMatrix [1] that seems a bit more granular and <br clear="none">thus may require more initial setup but should let people use websites <br clear="none">properly with a better compromise for security.<br clear="none"><br clear="none">Firefox has some "tool" for administrators to manage configurations but <br clear="none">there seems no easy way to globally install plugins and I think letting <br clear="none">untrained people surf the internet without something like noscript or <br clear="none">ublock is crazy.<br clear="none"><br clear="none">It seems that no browser has some easy way to globally manage plugins <br clear="none">and that reminds me Rick's questions "Who is the customer? What pays for <br clear="none">the costs of these things?".<br clear="none"><br clear="none"><br clear="none">[1] <a shape="rect" href="https://addons.mozilla.org/en-US/firefox/addon/umatrix/" target="_blank">https://addons.mozilla.org/en-US/firefox/addon/umatrix/</a><br clear="none"><br clear="none">-- <br clear="none">Ivan Sergio Borgonovo<br clear="none"><a shape="rect" href="https://www.webthatworks.it/" target="_blank">https://www.webthatworks.it </a><a shape="rect" href="https://www.borgonovo.net/" target="_blank">https://www.borgonovo.net</a><div class="yqt3426134264" id="yqtfd18317"><br clear="none"><br clear="none"><br clear="none">_______________________________________________<br clear="none">conspire mailing list<br clear="none"><a shape="rect" ymailto="mailto:conspire@linuxmafia.com" href="mailto:conspire@linuxmafia.com">conspire@linuxmafia.com</a><br clear="none"><a shape="rect" href="http://linuxmafia.com/mailman/listinfo/conspire" target="_blank">http://linuxmafia.com/mailman/listinfo/conspire</a><br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>