Reviews for NoScript Security Suite
NoScript Security Suite by Giorgio Maone
Review by Firefox user 13553842
Rated 2 out of 5
by Firefox user 13553842, 7 years agoGeorgio wrote:
> Unfortunately I cannot do the impossible (recreating legacy NoScript on the new, much more limiting WebExtension platform)
> just because "people" ask for the impossible. And I've the duty to provide the best security NoScript
BUT maybe it is not so much about recreating the old thing, than understanding what the problem with the new thing is. First you need to accept that the current approach is simply not intuitive. As a dev (I am one myself, so I had this problem myself) its hard to understand when that happens, because for you its as familiar as a part of your body, but it is obviously a mistery for everbody else.
Also, about your "duty": Its true what you said, but: if many people now dont use NoScript at all, because they do not get it anymore, you decreased web security by a lot.
So:
- Simpler is better. Simpler might be less safer, but if the alternative is not using it at all, it's still better. Way better.
- get rid of the slider. It looks mhm good(?), but its not recognizable as one.
- there is way to much clickable stuff, one does not get what is a button, what a link and whatnot...
- make it simpler: hide everything exept: domain name, status icon and -depending on the status- two buttons for each entry.
- clear design, dont change font size and font color at any time
- No xss-popups. In fact, never, ever use popups.
Instead:
- a simple list of domains like before, each with a status icon in front of it: your blue "S", for allowed, same with a little clock for temporarily allowd, red crossed "S" for disallowed
- depending on the current status of an entry, two buttons:
- if currently allowed: "disallow" and "temp. disallow"
- if currently disallowed: "allow" and "temp. allow"
- these buttons need to be different than the status icon. I would use red X and green hook/check, each with and without a little clock.
- dont make anything but the buttons clickable! not the text, not the status icon.
Thats it.
You can add a (clearly seperated from the other buttons, clearly different graphic) button behind each list entry to hide all the detailed settings, for the expert. Everybody else gets the simple list.
At the very buttom of the list go -clearly separated - three entries: "temp allow all" and "save permissions for this site" and "deactivate noscript".
No problem to do that in html. And believe me, people will love you again. :)
If you would like me to make a mockup of what Ive just desrcibed, just say so and tell me where to send it.
And btw.: You dont owe us anything. People have no right being rude to you about something you gave us for free. But maybe see their ill-advised passion as a testament to how important NoScript is to us. That is something I think, even if you must hate the internet right now.
I thank you for the old NoScript and that it helped increase my security. But I won't use the current one. So I would thank you again if you make it simple and easy to use again.
> Unfortunately I cannot do the impossible (recreating legacy NoScript on the new, much more limiting WebExtension platform)
> just because "people" ask for the impossible. And I've the duty to provide the best security NoScript
BUT maybe it is not so much about recreating the old thing, than understanding what the problem with the new thing is. First you need to accept that the current approach is simply not intuitive. As a dev (I am one myself, so I had this problem myself) its hard to understand when that happens, because for you its as familiar as a part of your body, but it is obviously a mistery for everbody else.
Also, about your "duty": Its true what you said, but: if many people now dont use NoScript at all, because they do not get it anymore, you decreased web security by a lot.
So:
- Simpler is better. Simpler might be less safer, but if the alternative is not using it at all, it's still better. Way better.
- get rid of the slider. It looks mhm good(?), but its not recognizable as one.
- there is way to much clickable stuff, one does not get what is a button, what a link and whatnot...
- make it simpler: hide everything exept: domain name, status icon and -depending on the status- two buttons for each entry.
- clear design, dont change font size and font color at any time
- No xss-popups. In fact, never, ever use popups.
Instead:
- a simple list of domains like before, each with a status icon in front of it: your blue "S", for allowed, same with a little clock for temporarily allowd, red crossed "S" for disallowed
- depending on the current status of an entry, two buttons:
- if currently allowed: "disallow" and "temp. disallow"
- if currently disallowed: "allow" and "temp. allow"
- these buttons need to be different than the status icon. I would use red X and green hook/check, each with and without a little clock.
- dont make anything but the buttons clickable! not the text, not the status icon.
Thats it.
You can add a (clearly seperated from the other buttons, clearly different graphic) button behind each list entry to hide all the detailed settings, for the expert. Everybody else gets the simple list.
At the very buttom of the list go -clearly separated - three entries: "temp allow all" and "save permissions for this site" and "deactivate noscript".
No problem to do that in html. And believe me, people will love you again. :)
If you would like me to make a mockup of what Ive just desrcibed, just say so and tell me where to send it.
And btw.: You dont owe us anything. People have no right being rude to you about something you gave us for free. But maybe see their ill-advised passion as a testament to how important NoScript is to us. That is something I think, even if you must hate the internet right now.
I thank you for the old NoScript and that it helped increase my security. But I won't use the current one. So I would thank you again if you make it simple and easy to use again.
2,317 reviews
- Rated 5 out of 5by DiGiTaL-CORE, a day agoI've used NoScript for as long as I can remember. I love having such control over what websites can do on my side of the browsing experience. So many unnecessary scripts... Combined with uBlock, I can tell exactly what is not needed.
- Rated 5 out of 5by Interrupteur, 5 days ago
- Rated 5 out of 5by Universe, 7 days ago
- Rated 4 out of 5by Firefox user 14219946, 7 days agoWould it be possible to add the user-saved NoScript settings to the user's Firefox account for syncing via the cloud? The "Firefox Multi-Account Containers" extension offers this, for example. I just had to "refresh" Firefox because something was causing it to crash in a loop, and so I lost all of the NoScript site preferences that I had set. It would be great to have these sync automatically when the extension is downloaded from my account. Thanks!
- Rated 4 out of 5by Firefox user 18601515, 10 days agoхорошее расширение, но минус в том что он иногда блокирует нужные скрипты для работы некотрых сайтов и поэтому приходится вручную врубать, а так расширение отличное, рекомендую!
- Rated 5 out of 5by ABHIMANYU KHADSE, 11 days ago
- Rated 5 out of 5by Firefox user 18400659, 12 days ago
- Rated 5 out of 5by JCD, 14 days ago
- Rated 5 out of 5by sneksarecute, 15 days ago
- Rated 5 out of 5by Cattypat, 20 days ago
- Rated 5 out of 5by Raptor, 24 days ago
- Rated 5 out of 5by Larry, 25 days ago
- Rated 3 out of 5by Firefox user 18736741, 25 days agoI think it works well, and I do recommend getting it. Pages load faster, since they don't load much of the bloat and spam, this also helps with security, preventing a lot of code from executing without consent.
It does take a bit of time to customize for all of the sites that are regularly visited. Often time sites load a lot of items, which must be explicitly allowed, then often times when something is allowed, it opens up a lot more items that must also be allowed. Scripts have to be customized for each domain (not each site) to be allowed to run. Which leads me to my next point, and the reason I gave 3 stars instead of 5...
I have spent quite a lot of time getting all of the scripts I like setup, the individual sites and domains configured exactly like I like it. Then something really bad went wrong. On a completely different PC, I logged into my Firefox browser with my Firefox account, and it loaded all of my plugins, and those plugins all reset to their initial default value, not only on the new PC I logged in on, but it reset all of my noscript configuration on my main PC that I've been using for years!!! So much time configuring it exactly like I like it, all gone. It's really quite sad.
Overall, I still recommend getting it, but having lost all of my settings like that is really upsetting. I guess if I would have known this would happen ahead of time, maybe I could have backed up my settings or something, but I had no idea logging into Firefox on a completely different PC would erase all of my noscript settings on my original PC. - Rated 3 out of 5by MB, 25 days agoExcellent attempt, but since it *constantly* forgets whatever settings I set the previous day, I end up having to re-allow the same site over and over.
It needs to have something more like uBlock Origin's lists, which seem to work consistently. - Rated 5 out of 5by pibo06, a month ago
- Rated 5 out of 5by Firefox user 18729992, a month ago
- Rated 5 out of 5by Shogun5362, a month ago
- Rated 5 out of 5by Tempdirz, a month ago
- Rated 3 out of 5by Pavel, a month agoIt's good to block the scripts, but it started to loose the list of enabled sites every now and then. An to have some sites to work may require enabling several other sites. So I have to resort to "Enable all temporarily" due to my enabled list being lost.
- Rated 3 out of 5by TDGalea, a month agoFantastic plugin to handle all the pathetic popups and tracking of the modern web. Only down two stars because it seems to keep forgetting my trusted sites. It's almost as if it's trying to sync, but instead of syncing my saves to new devices, new devices sync their empty lists to existing devices instead.
- Rated 2 out of 5by Andy, a month agoI've disabled restrictions globally in the extension and still get a "NoScript XSS Warning" when using SSO. There's no option to temporarily allow it; It's either allow this one attempt (that got interrupted and will therefore fail) or permenantly allow it forever. How about an "allow for this session" or "allow for x time"? Or even better, when I use the "disable globally" option it completely stops NoScript interfering? I've had to complettely disable the entire extension just to log in to some websites (trust pilot this specific time).nnot
- Rated 5 out of 5by Blaze Fox, a month ago
- Rated 5 out of 5by rimutaka, a month ago
- Rated 4 out of 5by Ci3MNiC, 2 months ago