Top all-time · #1949
hackademix.net
Personal blog · hackademix.netsecurityprogramming
hackademix.net is a personal blog at hackademix.net about security and programming. Since 2009, 38 different Hacker News readers have linked it 60 times, most often “Why Chrome has No NoScript”. The last post was in 2022, but the archive is still widely read.
Rarely recommended · 3 of 34 sampled comments recommend it?
Why HN links it
HN readers link Giorgio Maone's NoScript blog for announcements about NoScript's releases, explanations of its features, and his responses to debates on ad blocking, WebExtensions and browser add-ons.
- Recommended for · 3 comments
- Called the NoScript reply to Adblock Plus 'excellent'; recommended the migration post as the place to start and a post explaining the new UI as helpful.
Summarised by Claude from a sample of 34 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Why Chrome has No NoScript5 people · 5 mentions · first linked 2009-12-10
- Double NoScript4 people · 6 mentions · first linked 2017-11-14
- Why NoScript Blocks Web Fonts4 people · 4 mentions · first linked 2010-03-24
- NoScript 10.1.1 Released for Firefox 573 people · 6 mentions · first linked 2017-11-21
- Firefox WebExtensions API and NoScript3 people · 5 mentions · first linked 2015-08-22
- /2008/10/08/hello-clearclick-goodbye-clickjacking/2 people · 2 mentions · first linked 2016-10-02
- Dear Mozilla community: I screwed up. Big time.2 people · 2 mentions · first linked 2009-05-04
- /2010/03/24/why-noscript-blocks-web-fonts/2 people · 2 mentions · first linked 2015-02-13
- NoScript author on WebExtensions2 people · 2 mentions · first linked 2016-03-09
- CrossFUD: An Analysis of Inflated Research and Sloppy Reporting2 people · 2 mentions · first linked 2016-04-07
What Hacker News says?
WebExtension version of NoScript is going to be released today: https://hackademix.net/2017/11/14/double-noscript/
Comment linking /2017/11/14/double-noscript/
on “Firefox 57.0 Released”Submitted Dear Mozilla community: I screwed up. Big time. as a story · 124 points
HN discussionBut NoScript will be released today: https://hackademix.net/2017/11/14/double-noscript/
Comment linking /2017/11/14/double-noscript/
on “Firefox 57.0 Released”Submitted Cross-Browser NoScript Hits the Chrome Store as a story · 96 points
HN discussionThere's no need for a NoScript replacement. Giorgio Maone (author of NoScript) says NoScript for Firefox 57 will be released today: https://hackademix.net/2017/11/14/double-noscript/
Comment linking /2017/11/14/double-noscript/
on “Firefox 57.0 Released”Submitted Why Chrome has No NoScript as a story · 39 points
HN discussionTouch away: https://hackademix.net/2017/11/14/double-noscript/
Comment linking /2017/11/14/double-noscript/
on “Firefox 57.0 Released”Submitted Why NoScript Blocks Web Fonts as a story · 30 points
HN discussionNoScript includes protection against this! He calls it ClearClick: " whenever you click or otherwise interact, through your mouse or your keyboard, with an embedded element which is partially obstructed, transparent or otherwise disguised, NoScript prevents the interaction from completing and reveals you the real thing in "clear". At that point you can evaluate if the click target was actually the intended one, and…
Comment linking /2008/10/08/hello-clearclick-goodbye-clickjacking/
on “Google YOLO clickjacking”Submitted NoScript author on WebExtensions as a story · 16 points
HN discussion> Extensions are second class citizens in any other browser. I'd say Firefox's support for extensions is better than Chrome's, even after the change to WebExtensions. The author of NoScript, for example, thinks Firefox has the best environment for add-ons: https://hackademix.net/2017/11/21/noscript-1011-quantum-powe...
Comment linking /2017/11/21/noscript-1011-quantum-powerball-finish-and-rebooting/
on “Firefox desktop market share now below 9%”Submitted NoScript 10.1.1 Released for Firefox 57 as a story · 8 points
HN discussionNoScript implemented this over a decade ago, as part of its surrogate scripts feature: https://hackademix.net/2009/01/25/surrogate-scripts-vs-googl... This was one of my favorite examples of how there was much more to NoScript than most people assumed, and it had a depth of features that could not be matched by "alternatives" like uMatrix. But that feature was killed by the mass extension breakage in Firefox 57: htt…
Comment linking /2009/01/25/surrogate-scripts-vs-google-analytics/
on “Firefox replaces Google Analytics with fake no-op in strict tracking protection”Submitted Contextual Policies and LAN Protection (Abe Quantum) in NoScript 11.3 as a story · 5 points
HN discussionThat site turned me off. I am using DDG as my primary search engine for many months now. I really dislike the style and "atmosphere" of that site. The images are seemingly unordered and could use some borders. The images of the dog biting the women or the predator disgust me. Then some "motivationals" and memes that do not help the case. This site gave me mental stress (the left-alignment of varied sized text and im…
Comment linking /2010/12/28/x-do-not-track-support-in-noscript/
on “Google tracks you. We don't. An illustrated guide”Submitted NoScript – The Week Is Not Over Yet as a story · 4 points
HN discussionNoScript provides many features that uMatrix does not: * Shift+click on host name, and pull up info on trustability from NoScript.net database * Filters WebGL, XSLT, @font-face * Sophisticated XSS protection: Look up XSS on these pages: https://noscript.net/features https://noscript.net/faq * CSRF protection * Clearclick: Detects invisible elements which cover clicked visible elements https://hackademix.net/2008/10/…
Comment linking /2008/10/08/hello-clearclick-goodbye-clickjacking/
on “NoScript is harmful and promotes malware”Submitted IE8’s “Clickjacking Protection” Exposed as a story · 4 points
HN discussionresponse: https://hackademix.net/2009/05/04/dear-adblock-plus-and-nosc... it wasn't circumventing the filters just to show ads. It was circumventing the filters because the filter were blocking everything, including the install extension button.
Comment linking /2009/05/04/dear-adblock-plus-and-noscript-users-dear-mozilla-community/
on “NoScript is harmful and promotes malware”Submitted Noscript Webextension for Firefox Quantum Released as a story · 3 points
HN discussionNoScript has been released for Firefox 57: https://hackademix.net/2017/11/21/noscript-1011-quantum-powe... https://addons.mozilla.org/en-US/firefox/addon/noscript/
Comment linking /2017/11/21/noscript-1011-quantum-powerball-finish-and-rebooting/
on “Extensions in Firefox 58”Submitted Top immediate priorities for NoScript Quantum as a story · 2 points
HN discussionGiorgio's post on the matter: https://hackademix.net/2015/08/22/webextensions-api-noscript...
Comment linking /2015/08/22/webextensions-api-noscript/
on “The likely end of DownThemAll”Submitted Double NoScript as a story · 2 points
HN discussionNotscripts hasn't been updated since December of 2010. ScriptSafe (used to be scriptno) is still being developed https://chrome.google.com/webstore/detail/scriptsafe/oiigbmn... However, the author of noscript has said that it isn't technically possible to entirely replicate all of the features of noscript on chrome because extensions on chrome don't have the same kind of access as they do on firefox. http://hackadem…
Comment linking /2009/12/10/why-chrome-has-no-noscript/
on “Camino browser reaches its end”Submitted Firefox WebExtensions API and NoScript as a story · 2 points
HN discussionEDIT: To the author, the download and email icons are the same. This is fantastic. A feature you might not have realized is that it works well with NoScript users. With font-faces considered harmful[0], these icons can be delivered to the user, vulnerability free. [0] https://hackademix.net/2010/03/24/why-noscript-blocks-web-fo...
Comment linking /2010/03/24/why-noscript-blocks-web-fonts/
on “Show HN: Littlebox, a pure CSS icon library – worth continuing?”Submitted The difficulty of truly blocking Google Analytics as a story · 2 points
HN discussionAlso, NoScript developer Giorgio Maone's take on WebExtensions: https://hackademix.net/2015/08/22/webextensions-api-noscript...
Comment linking /2015/08/22/webextensions-api-noscript/
on “WebExtensions FAQ”Submitted Ehy IE8, I Can Has Some Clickjacking Protection? as a story · 2 points
HN discussion
