Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Just to re-iterate the article, NoScript runs ads on their website to generate some revenue. Adblock Plus normally blocks these ads, but NoScript whitelists itself (along with a few other partner developer websites) in Adblock Plus "without" end-user permission, and without making a genuine effort to notify users it's doing this. It hacks Adblock Plus from working on its sites, basically.

You can disable NoScript's "modification" to Adblock Plus by doing the following in Firefox:

1) Tools -> Add-ons -> Adblock Plus -> Preferences

2) Collapse the "Filter subscription: EasyList (USA)" list.

3) Uncheck "Enabled" for the "Filter subscription: NoScript Developer Support Filterset" list.

Now when NoScript installs an update, and loads its webpage full of ads, Adblock Plus won't be blocked from doing its duty. Unless of course NoScript re-enables the filter...



OTOH It's trivial for any site to get past adblock if they choose to, or degrade the users experience if they're running adblock (If they have js).

I've never understood the reason for installing NoScript. It seems utterly pointless. Why not install NoHTML while you're at it, or use lynx.

Also never understood the philosophy behind adblock. If a website starts doing garish irritating ads, just don't go there again.


There's a very good reason to run NoScript: most web developers still don't understand CSRF, and hence many web applications are vulnerable to CSRF attacks. Running NoScript prevents untrusted sites from exploiting CSRF holes in sites that you care about.

That said I don't personally run NoScript (I use Safari), but I totally understand people who do.


FYI, the newest version of NoScript (1.9.2.6) stops doing this:

http://news.ycombinator.com/item?id=589683




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: