Noscript does not work in the new Firefox Quantum browser.

  1. Whilst I’m more than capable of looking after myself, I often ask my self is all this hassle worth while. In this case I’m close to saying it isn’t worth the time and hassle.

I rather doubt I’m alone in that thought, I see Mozilla Firefox losing a large part of its user base, give most are there because of the availability of add-ons and its flexibility and it has lost a lot of ground in those regards.

  1. In all honesty, I don’t know where they get this ’ being fast’(er), on my win10 system FF 57.0 version I certainly don’t see it .

I’m not seeing it using much less memory, but for me there is little point in having memory if you aren’t going to use it. This is something I will have to monitor as firefox had the habit of RAM usage creeping steadily upwards. At the moment it is in excess of 1GB with 8 instances of firefox running, not what I would call frugal but I would say it is lower than I have seen it previously.

EDIT: Images added.

EDIT2 This modification of the post timed out twice, don’t know what was responsible FF or the forums.

Even the more where Mozilla is now copying more of Google Chrome’s ways: https://www.thesslstore.com/blog/chrome-data-url-phishing/
Read: https://blog.mozilla.org/security/2017/11/27/blocking-top-level-navigations-data-urls-firefox-58/

At present a lot of power-users use uMatrix in stead of now crippled No Script.
Also blocks unwanted/undesired scripts and a lot more - and after some practice - works in a similar fashion.

A combination of uBlock Origin and uMatrix is a very effective one. Very adjustable at that as well.

Also import som third party filters into uBlock Origin, like for instance: http://cinsscore.com/list/ci-badguys.txt & http://www.networksec.org/grabbho/block.txt & https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset

Against bitcoin mining scripts uMatrix is also an effective blocker.

Only allow that into/onto uMatrix what one needs to have the loaded website function properly
for you inside your browser client of choice, be it firefox or Google chrome etc.

You need no rocket science abilities to do this,
it can be easily achieved with a bit of persistent excercise and good will.

polonus

It is looking like I will have to get rid of NoScript (NS) not because of what you mention, but because of my firefox synchronisation on my three installations.

There is duplication between NS and uMatrix, so I’m having to do things twice and even when that is done I’m getting what appears to be weird interaction/s, were the page just doesn’t load correctly.

I would however, rather have RequestPolicy as that isn’t so complex as uMatrix, far quicker, simpler to use than uMatrix and possibly more effective.

More misery to show that Mozilla Quantum broswer is on it’s way to completely going down the drain:
Unsolliceted extension installed: https://support.mozilla.org/en-US/kb/lookingglass

https://www.reddit.com/r/firefox/comments/7jh9rv/what_is_looking_glass/dr6fiaz/

This might completely suit the needs of Mr. and Mrs. nitwit-Average and their Main Stream click-go-happy-kids,
but is giving the traditional Firefox power-users, like little old me, the creeps.

I now have the feeling that the Firefox browser has completely and utterly capitulated
to be like all the other main browsers, Google Chrome, Blue-e Edge, etc.",
meaning mass consumption instruments for Big Multinational Corps to thrive,
like everything in this world to-day. >:(

66 very useful legacy type extensions “murdered” in the process.

I hope this will mean the end of frefox,
and we can switch to another concept like Brave etc.

Gone are the days of flock, or of in browser security.
Quantum a hand-out to the needs of Big Tech trackers and profilers,
and suiting Big Gov’s Surveillance better.

Sad days, for the more aware :-[

polonus

For now FF ESR still works for me… Cheers

I wish you a good Advent, Asyn,

Good users also have Palemoon (fx before version 29) and for the tor browser,
the more traditional firefox flaw will never go away. ;D

Quantum equals Edge and/or Google Chrome.

Damian

No such beast on my win10 system with firefox 57.0.2, but then again I wouldn’t have expected it. As mentioned in your link “No changes will be made to Firefox unless you have opted in to this Alternate Reality Game.” I haven’t, so no changes, nor have I received any other unsolicited add-ons.

However, I don’t see Firefox Quantum lasting long and it isn’t for this, it is for the pathetic number of add-ons that are available for it.

Thanks Damian, same to you and yours. :slight_smile:

It would be great if the ADD-ON DEVELOPERS update their product and not just mozilla fixing the problem on their side.

I think you are losing the track here.

Firefox have fixed nothing, they have implemented a policy when FF 57.0 was released that all add-ons would be under a different API/Language (not just a simple update to the existing add-on). That at a stroke made over 80% of add-ons on my win10 firefox 57.0 installation redundant.

The developers would have to devote the time to rewrite these add-ons (which by all accounts isn’t straight forwards), they also aren’t paid for this work unless they get voluntary donations.

Hi Evanna456,

As my good forum-friend, DavidR explains to you.

This is not very likely that developers will again develop their extensions/add-ions for another extension-engine, from now once and now left xpi-extention engine to the webextension engine of Google’s Chrome. In a lot of cases the access needed to the browser does not exist anymore, because Google does not allow it to that extent (because of their main line of business prtection) and firefox followed this pattern. That is why NoScript in Quantum is a miserable ‘undressed’ version of the once xpi add-on.

So jumping through all the hoops you mentioned is not that easy at all, and sometimes completely impossible. I hope you understand now that so many power users and folks that understand browser code a tad more, so strongly protest(ed).

To jump onto the Google bandwaggon of tracking and profiling probably was more profitable to firefox heads of development.

polonus

Firefox will get an option to mark all, you read it right, all http sites as insecure!

More security through obscurity coming to firefox on a browser near you:

This is the big green padlock means safe site misconception.

A green padlock does not by definition guarantee a website is safe or secure,
it merely states the connection to it is safe and secure.

Now the public has a completely wrong idea, when clicking their way through the Interwebs.

With a green padlock there, they think they are out of harm’s way. Wrong thought,
thanks to those that wanna profile and track you secretely and hidden over https and in the cloud.

You’d better not find what they are up to, isn’t it now?

Thanks to the https-everywhere actions led by Google et al. we now have such misconceptions in the world.

polonus (volunteer website security analyst and website error-hunter)

O.K. And still no way to keep your zoom settings in the new Quantum browser. ???

D

Yes, if https was safe, why would avast have gone to the trouble of having the web shield scan https content :slight_smile:

I never knew thats the case. Mozilla should fix it then like using another engine(?) i hope. Its not like they cant do it because in the early versions of firefox, addons are running fine. Its not impossible but troublesome considering they are a non-profit organization just like the addon developers, they dont earn much from their work.

So far my addons runs good as it should be. Also i dont use noscript in firefox, it breaks some of the pages and its been a hassle on my part to set it up. I just let avast web shield do the script blocking and thats it.

I do use noscript from an another firefox browser, the tor browser.

I use both of the browsers differently, carefree and full browser experience in firefox and stealthy attitude for tor.

Im not a power user like everyone else but i really hope things will go sort themselves out.

Hi Evanna456,

You, as a n00b user, could be better off using uBlock Origin in combination with uMatrix add-ons in firefox.
There is less toggling that way to make webpages function allowing blocked functionality (3rd party scripts).

polonus

tnx for the suggestion, ill try that in the near future. :smiley:

Another reason not to like new firefox browser: https://arstechnica.com/information-technology/2016/04/noscript-and-other-popular-firefox-add-ons-open-millions-to-new-attack/

Badly isolation creates the extensions reuse vulnerability!

polonus

Hello im still using Firefox 56, was using NoScript + RequestPolicy + Ublock Origin in it.

What do you recommend me doing now? wait a bit more or try using Quantum with new NoScript? though there is no RequestPolicy in it :frowning:

There is now RequestPolicy Light. But the newer extensions, also NoScript, have been hampered by coppying of the Chrome extension model, that leaves developers less access to the browser (apparently here Google’s kernel business dictates) and
there is really no alternative, well there is Brave (with inbuilt protection).

polonus

Hum i see, for now will keep using version 56 then
wonder how long should i use this browser though… since it will be outdated/abandoned eventually
so will keep checking the news here and what to do in the future…