this post was submitted on 11 Apr 2025
137 points (100.0% liked)

Free and Open Source Software

18567 readers
26 users here now

If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

This comment encouraging me to try out NoScript Security Suite (Firefox) changed my life. googletagmanager is used everywhere!

top 35 comments
sorted by: hot top controversial new old
[–] [email protected] 9 points 1 day ago

Used it for over a decade, finally stopped and am just using Ublock now, it's so nice not having to open the menu for every new website to find the scripts that need allowed to make the site work.

[–] [email protected] 2 points 1 day ago

noscript xul version was the best back in the day :(

[–] [email protected] 36 points 2 days ago (1 children)

It’s weird to me that you would click a link and without your consent JS code can be downloaded from wherever and run on your computer.

NoScript is always on for me (on my personal PC). Sites that don’t load at all are probably not worth visiting.

[–] [email protected] 8 points 2 days ago

not only is noscript your general browsing prophylactic, but it will often render js paywalls climbable. I have no other plugin as loved and as useful as noscript - immediate install on any firefox instance.

[–] [email protected] 29 points 2 days ago (3 children)

I first gave NoScript a spin sometime in the mid-2010s. It was an adjustment, to say the least. But once you get used to temporarily allowing a new target domain as a matter of course, holy hell does the whole game come into specific relief.

The Washington Post, for example -- which I was a paid subscriber to until it shit the bed -- wanted JS from some 25 domains (many of which were Amazon ad related). I also have NoScript on Firefox on my Pixel.

Firefox, uBO and NoScript are the floor for passable internet hygiene to me.

[–] [email protected] 20 points 2 days ago* (last edited 2 days ago) (3 children)

You can already block all js and give specific allowances through uBO. Having both uBO and NoScript is redundant, just FYI

[–] [email protected] 5 points 2 days ago (1 children)

@ISOmorph @Powderhorn Please explain how, when #uBlockOrigin works based on blocklisting while #noScript uses allowlisting?

[–] [email protected] 10 points 2 days ago (2 children)

@opensourceopenmind @ISOmorph @Powderhorn You can use #uBlockOrigin in Medium or Hard mode, which blocks all 3rd-party scripts, frames, etc. by default except for those you specifically allow:

https://github.com/gorhill/uBlock/wiki/Blocking-mode

[–] [email protected] 4 points 2 days ago

Interesting. Is there a way to port NoScript settings into uBO?

[–] [email protected] 3 points 2 days ago

@normplum @ISOmorph @Powderhorn Thanks, will give it a try and see if it can replace noScript.

[–] [email protected] 10 points 2 days ago

At this point, using NoScript is muscle memory. No reason to add friction to a process, even if it may not be the most efficient method in terms of memory usage.

[–] [email protected] 4 points 2 days ago (1 children)

How would the whitelist flow work in ublock origin? Can I allow only some third party domains to run js or is it all or nothing?
I like how it's just a few clicks in noscript with no need to type - makes usage on my tablet and phone simple.

[–] [email protected] 6 points 2 days ago (1 children)

I think this is about uBlock Origin's "advanced mode". If it's activated, then the uBlock addon's pop-up gets an extra table to the left showing kinds of content or domains used and switches to block/allow them globally (on all websites) or locally (on this website specifically). Those switches have two halves, the left side acts as an "allow" button (or rather a "no-op" button that tells uBO to ignore a previous block, but not to unblock something that's detected as an ad by the add-on's regular filters) and the right side as a "block" button.

So, AFAIK, you enable advanced mode, use a global switch to block third-party scripts and you've basically got almost the same kind of blocking NoScript does. As you visit other websites, you can use that table to locally allow some domains in order to un-break a website, block local scripts if you don't trust them either (you could also set that globally to completely match NoScript if you want), or block all third-party content from some domains. It also works in "just a few clicks".

[–] [email protected] 5 points 2 days ago (1 children)

It is! I read through the docs and did some testing. It's very similar to noscript once you get used to the flags.
Do not Disable scripts globally using the settings checkbox, it overrides dynamic filtering and ignores your flags

Left flags are global (In the example I block first party and third party scripts globally) and right flags are local for the site you're currently on. (Here I allow bbc.com to run scripts, that's the grey flag)

You can locally allow all scripts from a domain like this (notice the grey flag on bbci.co.uk and the inherited dark grey on the subdomains below):

Or you can allow specific subdomains (here I allow emp.bbci.co.uk and ichef.bbci.co.uk specifically while leaving static.bbci.co.uk blocked)

As I'm allowing scripts with the right side local flags the third party sites will still be default blocked if they're used by another domain that isn't bbc.com.

[–] [email protected] 4 points 2 days ago (2 children)

Interesting, then this is better than NoScript. I'm just a bit rattled by the uBO soft-takedown by Manifest v3 or whatever it was that had happened last year and am concerned about uBO, like, dying or something. What do you think is its future? If it still seems stable enough then I guess I'll drop NoScript for it.

And then on that note, would you be willing to share your settings of the scripts you've deemed comfortable, as a shortcut for other newbs like me who are just getting on board with all this? It'd be much appreciated if so! Either way, thanks for sharing.

[–] [email protected] 1 points 1 day ago (1 children)

uBlock Origin still functions the same. I doubt it'll die in the foreseeable future because there's interest in it, and moreso than in NoScript (my assumption anyway).

The uBlock Origin introduced https://github.com/uBlockOrigin/uBOL-home to cover the manifest v3. It's a separate software. The original uBlock Origin remains functional like before.

Regarding the earlier point, this lite FAQ entry sounds to me like the main author is more committed to origin than lite.

[–] [email protected] 1 points 18 hours ago

I mean, if you're still using Chrome, you likely don't know about Manifest v3. Those who do have been on FF for quite some time.

[–] [email protected] 5 points 2 days ago (1 children)

As a firefox user I'm not really affected by googles changes so I'm not worried about uBO at all.
I will probably stick with noscript as of now, as I'm so used to it and have already built a large whitelist of domains I trust globally.

Not certain what you mean with sharing my settings of scripts. If you mean my whitelist settings in noscript/ublock origin then I would recommend just starting with a blank slate and build up your own whitelist. We're probably not using the same sites after all.

[–] [email protected] 2 points 1 day ago* (last edited 1 day ago) (1 children)

True, there's no way to do a clean merge like we can with multiple KeePass password databases... or can we?

By the way, I now use AdNauseam, which is a uBO fork, but I can't find how to access the color grid in your screenshots. Would you happen to know how to get to it?

[–] [email protected] 1 points 1 day ago

It's available in uBlock Origin when advanced user mode is enabled in settings. No idea if AdNauseam works the same.
https://github.com/uBlockOrigin/uBlock-issues/wiki/Dynamic-filtering:-quick-guide

[–] [email protected] 10 points 2 days ago* (last edited 2 days ago) (1 children)

Yeah, it's getting addicting! I just found so much JS that is totally unneeded to watch Paramount+:

What the hell is all this crap? Man... so much tracking going on. All the DEFAULTs are blocked and the TV I'm watching still loads perfectly fine. And if you try to go to the stepcattle.com one out of pure curiosity, uBlock warns you against it, yet robots prevent any info on it from appearing in search engines... capitalist bastards...

[–] [email protected] 4 points 2 days ago

Odd ... stepcattle doesn't sound at all like the sort of thing involving jackboots and train cars.

[–] [email protected] 8 points 2 days ago

Shit the bed? Do you mean when Jeff Bezos (amazon cto) bought the place?

[–] [email protected] 30 points 2 days ago (2 children)

https://piefed.social/ is 99% functional with noscript, if you're into that. I have JS disabled while posting this comment.

[–] [email protected] 6 points 2 days ago

Wow, incredible! Thanks, I had no idea.

[–] [email protected] 4 points 2 days ago
[–] [email protected] 10 points 2 days ago (1 children)

Use uMatrix and see more sewage

[–] [email protected] 2 points 2 days ago (3 children)

Umatrix was dead, I thought...but yeah, matrix is wayyyyy easier to understand.

[–] [email protected] 1 points 20 hours ago

@easily3667 @teri

there's numatrix that's current and maintained.

[–] [email protected] 4 points 1 day ago

You have to use ublock origin in advanced mode and you can kinda get umatrix

[–] [email protected] 2 points 1 day ago

according to gorhill, it's not as much dead as "done". idk if that means it still works though

[–] [email protected] 13 points 2 days ago* (last edited 2 days ago)

Yeah. It's bad out there.

[–] [email protected] 9 points 2 days ago (1 children)

I run ublock, with some custom additions. It breaks less stuff

[–] [email protected] 4 points 2 days ago* (last edited 2 days ago) (1 children)

Are you willing to share what any of these "custom additions" means?

[–] [email protected] 3 points 1 day ago

In the extension settings you can add more filters. I've made a few extra