NoScript add-on for Firefox

If you’re like me, you frequently get called on to help others out when they experience “issues” on their computers. Let’s face it, we’re front-line tech support for many of our family and friends. One tweak that I like to do on family computers is #1 to switch them over to using Firefox as their default browser and #2 installing the NoScript add-on to Firefox. CNet has a quick video explaining NoScript (see below) but I end up having to take a more pragmatic approach by selecting “Scripts Globally Allowed”. Let’s face it, the first time a site doesn’t work because scripting was blocked, they’re going to make you set it anyways.

Even with scripts allowed globally, NoScript still protects you from other issues including Cross-Site Scripting (XSS), Click Jacking and other nastiness that they’ll run across while browsing. It even has a setting to help encourage SSL connections to various sites to help prevent cookie hijacking while you’re on the road. While not a complete secure browsing solution, it’s another layer of security that MAY result in a couple less support calls.

Don’t just take my word for it, Steve Gibson has mentioned NoScript many times in his Security Now podcast. For more info on NoScript and what it offers, scope out the features of NoScript.

Disclaimer: Your mileage may vary. Don’t blindly follow my lead…do your own research and configure the sphincter pressure of your NoScript settings at whatever comfort level you have based on your research.

This entry was posted in Computers and Internet and tagged , , . Bookmark the permalink.

Leave a comment