<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Matt Refghi&#039;s Blog &#187; noscript</title>
	<atom:link href="http://mattrefghi.com/blog/tag/noscript/feed/" rel="self" type="application/rss+xml" />
	<link>http://mattrefghi.com/blog</link>
	<description>Computer Science and other written works</description>
	<lastBuildDate>Sat, 10 Mar 2012 17:58:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>To Love and Hate NoScript</title>
		<link>http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/</link>
		<comments>http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/#comments</comments>
		<pubDate>Sat, 21 Nov 2009 08:33:47 +0000</pubDate>
		<dc:creator>Matt Refghi</dc:creator>
				<category><![CDATA[Reviews]]></category>
		<category><![CDATA[advertising]]></category>
		<category><![CDATA[extension]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[noscript]]></category>
		<category><![CDATA[rant]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.mattrefghi.com/wordpress/?p=982</guid>
		<description><![CDATA[Mozilla Firefox has always been]]></description>
			<content:encoded><![CDATA[<p><a href="http://en.wikipedia.org/wiki/Mozilla_firefox" target="_blank">Mozilla Firefox</a> has always been one of my favorite browsers. The only contender that was able to knock it from its #1 position was <a href="http://en.wikipedia.org/wiki/Google_Chrome" target="_blank">Google Chrome</a>. Even though Chrome is still lacking in a few departments (extensions, bookmark management), I swear by it because of the overall performance. Plus, whenever they release a major version, I know they&#8217;ll have further performance enhancements &#8211; that&#8217;s just what they do. I also prefer the minimalistic nature of their user interface &#8211; which, as it turns out, also integrates beautifully with my operating system, Windows 7.</p>
<p>Despite Firefox dropping to #2 in my list, I still use it regularly for web development. They have plenty of extensions to keep me coming back: <a href="https://addons.mozilla.org/en-US/firefox/addon/1843" target="_blank">Firebug</a>, <a href="https://addons.mozilla.org/en-US/firefox/addon/60" target="_blank">Web Developer</a>, <a href="https://addons.mozilla.org/en-US/firefox/addon/271" target="_blank">ColorZilla</a>, <a href="https://addons.mozilla.org/en-US/firefox/addon/249">HTML Validator</a>, and&#8230; well, <a href="https://addons.mozilla.org/en-US/firefox/addon/722" target="_blank">NoScript</a>. All of those extensions are excellent; however, NoScript sometimes irritates me.</p>
<div id="_mcePaste" style="position: absolute; left: -10000px; top: 0px; width: 1px; height: 1px; overflow-x: hidden; overflow-y: hidden;">NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java and Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank), and provides the most powerful Anti-XSS protection available in a browser.</div>
<div id="_mcePaste" style="position: absolute; left: -10000px; top: 0px; width: 1px; height: 1px; overflow-x: hidden; overflow-y: hidden;">NoScript&#8217;s unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality&#8230;</div>
<blockquote><p>NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java and Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank), and provides the most powerful Anti-XSS protection available in a browser.</p>
<p>NoScript&#8217;s unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality&#8230;</p></blockquote>
<p style="text-align: left; ">Certainly sounds great &#8211; and it works very well too. I really get a sense of safety in knowing I can selectively enable specific elements on webpages, blocking everything else by default. The functionality they offer is great. The problem I have is more with the developers, not the extension. You see, here&#8217;s the problem: NoScript is <strong>regularly updated</strong>, so you&#8217;re very likely to see this on a regular basis:</p>
<p style="text-align: center; "><a href="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript1.png" rel="lightbox[982]"><img class="aligncenter size-full wp-image-985" title="NoScript is updated often - each time you choose to install an update, you have to restart Firefox." src="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript1.png" alt="NoScript is updated often - each time you choose to install an update, you have to restart Firefox." width="475" height="350" /></a></p>
<p style="text-align: center; ">
<p style="text-align: left; ">Kind of annoying, but by itself, not a deal breaker. After an restarting Firefox due to the update, I&#8217;m immediately greeted by the following page:</p>
<p style="text-align: center; "><a href="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript2.png" rel="lightbox[982]"><img class="aligncenter size-full wp-image-986" title="The NoScript homepage - content aggressively mixed with advertising, affiliation links, and donation buttons." src="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript2.png" alt="The NoScript homepage - content aggressively mixed with advertising, affiliation links, and donation buttons." width="473" height="470" /></a></p>
<p style="text-align: left; ">Let me state this very clearly:<strong> Every time I update NoScript, I&#8217;m thrown to that page</strong>. Ugh.  Sure, they show me the change log, news, and more &#8211; but they also show me ads&#8230; a lot of them. Let&#8217;s start by looking at how much of the site is devoted to ads. I&#8217;ll highlight pure advertisements in <strong><span style="color: #ff0000;">red</span></strong>, affiliations in <strong><span style="color: #ff00ff;">pink</span></strong>, and donation controls in <strong><span style="color: #ff6600;">orange</span></strong><strong>:</strong></p>
<p style="text-align: center; "><a href="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript3.png" rel="lightbox[982]"><img class="aligncenter size-full wp-image-987" title="The NoScript homepage with the advertising, donation controls, and affiliation links highlighted." src="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript3.png" alt="The NoScript homepage with the advertising, donation controls, and affiliation links highlighted." width="473" height="470" /></a></p>
<p style="text-align: left; ">That&#8217;s quite a lot of advertising on the main page&#8230; <em>and </em>it is<em> </em><a href="http://www.codinghorror.com/blog/archives/001307.html" target="_blank">above the fold of the page</a>. It&#8217;s not the worst I&#8217;ve ever seen, but it is still a significant assault on my eyes. I won&#8217;t show you screenshots of what the rest of the page looks like, but trust me &#8211; it follows the same trend. If you&#8217;d like to see it all, <a href="http://noscript.net/">you can visit it here</a>. That said, I get the whole &#8220;we&#8217;re starving programmers and we need the money&#8221; thing, but I expect a certain amount of elegance in pursuing revenue. Considering their <a href="http://en.wikipedia.org/wiki/NoScript#Criticism" target="_blank">previous shady practices</a>, though, I&#8217;m not entirely surprised.</p>
<p style="text-align: left; ">Another aspect of their advertising that particularly bothers me is how they claim to be &#8220;your friendly web cop&#8221;, keeping you safe, and yet, they are suggesting software that they <em>probably never even tried</em>. I&#8217;m particularly referring to the &#8220;PC slowing you down? Free scan&#8221; and &#8220;Top tip! Click here to check if your drivers are up-to-date!&#8221; ads. I would <strong><em>never </em></strong>click on those things&#8230; but I know some people that might, especially if they are shown on a security-related site. At first glance, even <strong>I</strong> have to ask myself if it is an ad &#8211; it almost looks like it could be another software offering from the same company. Things like that really make me want to start using <a href="https://addons.mozilla.org/en-US/firefox/addon/1865">AdBlock Plus</a> again&#8230; and that&#8217;s not cool, since I am a web developer myself.</p>
<p style="text-align: left; ">Overall, if their site was more tastefully presented, and the ads were more respectful in number and placement, I&#8217;d have less of a problem with them showing me their page every time I update. In its current state, it is just so obvious to me that they are money-hungry &#8211; to the point where they put little thought behind the resulting user experience.  Even with that aspect improved,  a pretty page could still be an annoyance if you are automatically thrown to it once a week. Thankfully, the NoScript guys have a way for you to disable the feature. Hurrah!</p>
<p style="text-align: left; "><span style="font-family: Tahoma; line-height: normal; font-size: 11px; color: #2c2c29; "> </span></p>
<h3 style="border-top-width: 0px; border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; border-style: initial; border-color: initial; outline-width: 0px; outline-style: initial; outline-color: initial; vertical-align: baseline; background-image: initial; background-repeat: initial; background-attachment: initial; -webkit-background-clip: initial; -webkit-background-origin: initial; background-color: transparent; margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; font-size: 1.6em; background-position: initial initial; ">Solution<a href="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript41.png" rel="lightbox[982]"><img class="size-full wp-image-992 alignright" title="How to make it so the NoScript page does not automatically appear whenever you update." src="http://www.mattrefghi.com/wordpress/wp-content/uploads/2009/11/NoScript41-313x282-custom.PNG" alt="How to make it so the NoScript page does not automatically appear whenever you update." width="282" height="254" /></a></h3>
<p>With the latest version of NoScript installed (In my case, 1.9.9.15):</p>
<p>1) Right-click the NoScript icon, and select Options.</p>
<p>2) Click the &#8220;Notifications&#8221; tab.</p>
<p>3) Find the checkbox titled &#8220;Display the release notes on updates&#8221;, and <strong>uncheck it</strong>.</p>
<p>4) Click &#8220;OK&#8221;.</p>
<p>That&#8217;s it! The NoScript page should no longer be force-fed to you after every update. Take a moment to truly enjoy that fact.</p>
<p>If you&#8217;re ever wondering about what they added in a particular update, you can check the update-specific release notes from within Firefox itself. In the Add-ons Manager, click the &#8220;Updates&#8221; tab, select the NoScript update, and click the &#8220;Show Information&#8221; button at the bottom of the dialog. Once clicked, you&#8217;ll see additional information about the update:</p>
<p style="text-align: center;"><a href="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/show_information.png" rel="lightbox[982]"><img class="aligncenter size-full wp-image-994" title="You can view an extension's release notes right in Firefox." src="http://mattrefghi.com/wordpress/wp-content/uploads/2009/11/show_information.png" alt="You can view an extension's release notes right in Firefox." width="467" height="365" /></a></p>
<p>Now&#8230; remind me, NoScript developers, why I <em><strong>need </strong></em>to see your homepage every time you release a new minor version? For the sake of your advertising revenue, perhaps?</p>
<p style="text-align: center;">
<p><a class="a2a_button_digg" href="http://www.addtoany.com/add_to/digg?linkurl=http%3A%2F%2Fmattrefghi.com%2Fblog%2F2009%2F11%2Fto-love-and-hate-noscript%2F&amp;linkname=To%20Love%20and%20Hate%20NoScript" title="Digg" rel="nofollow" target="_blank"><img src="http://mattrefghi.com/blog/wp-content/plugins/add-to-any/icons/digg.png" width="16" height="16" alt="Digg"/></a><a class="a2a_button_reddit" href="http://www.addtoany.com/add_to/reddit?linkurl=http%3A%2F%2Fmattrefghi.com%2Fblog%2F2009%2F11%2Fto-love-and-hate-noscript%2F&amp;linkname=To%20Love%20and%20Hate%20NoScript" title="Reddit" rel="nofollow" target="_blank"><img src="http://mattrefghi.com/blog/wp-content/plugins/add-to-any/icons/reddit.png" width="16" height="16" alt="Reddit"/></a><a class="a2a_button_stumbleupon" href="http://www.addtoany.com/add_to/stumbleupon?linkurl=http%3A%2F%2Fmattrefghi.com%2Fblog%2F2009%2F11%2Fto-love-and-hate-noscript%2F&amp;linkname=To%20Love%20and%20Hate%20NoScript" title="StumbleUpon" rel="nofollow" target="_blank"><img src="http://mattrefghi.com/blog/wp-content/plugins/add-to-any/icons/stumbleupon.png" width="16" height="16" alt="StumbleUpon"/></a><a class="a2a_button_slashdot" href="http://www.addtoany.com/add_to/slashdot?linkurl=http%3A%2F%2Fmattrefghi.com%2Fblog%2F2009%2F11%2Fto-love-and-hate-noscript%2F&amp;linkname=To%20Love%20and%20Hate%20NoScript" title="Slashdot" rel="nofollow" target="_blank"><img src="http://mattrefghi.com/blog/wp-content/plugins/add-to-any/icons/slashdot.png" width="16" height="16" alt="Slashdot"/></a><a class="a2a_button_facebook_like addtoany_special_service" data-href="http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/"></a><a class="a2a_button_twitter_tweet addtoany_special_service" data-count="horizontal" data-url="http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/" data-text="To Love and Hate NoScript"></a><a class="a2a_button_google_plusone addtoany_special_service" data-href="http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/"></a><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Fmattrefghi.com%2Fblog%2F2009%2F11%2Fto-love-and-hate-noscript%2F&amp;title=To%20Love%20and%20Hate%20NoScript" id="wpa2a_2"><img src="http://mattrefghi.com/blog/wp-content/plugins/add-to-any/share_save_120_16.png" width="120" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://mattrefghi.com/blog/2009/11/to-love-and-hate-noscript/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

