NoScript’s Cross-tab Identity Leak Protection (or “TabGuard”) is an experimental countermeasure against the Targeted Deanonymization via the Cache Side Channel attack by Mojtaba Zaheri, Yossi Oren and Reza Curtmola, presented at Usenix Security in August 2022. It is loosely inspired by the Leakuidator+ browser extension proposed by the authors as a defense, but it’s designed… Continue reading 2 Months of TabGuard
Category: NoScript
News and development directions about everyone’s dearest security add-on for Firefox.
NoScript, Red or Blue? Whatever Suits You!
The dust has settled, all the rough edges have been smoothed, and NoScript’s new UI is better than ever. Many usability and accessibility enhancements (from keyboard navigation to dark / light color schemes) have been added, and the result is just gorgeous, on the website too. The default theme now is “Modern Red”, but the… Continue reading NoScript, Red or Blue? Whatever Suits You!
Contextual Policies & LAN Protection (ABE Quantum) in NoScript 11.3!
ABE Quantum is the combination of Contextual Policies, one of the most requested features in NoScript’s history, and LAN protection, an important “Classic” defense lost in the 2017 Quantum migration. After years of waiting and months of hard work, this good stuff (which I personally missed a lot, too) is finally in the hands of… Continue reading Contextual Policies & LAN Protection (ABE Quantum) in NoScript 11.3!
Welcome SmartBlock: Script Surrogates for the masses!
Today Mozilla released Firefox 87, introducing SmartBlock, a new feature which “intelligently fixes up web pages that are broken by our tracking protections, without compromising user privacy […] by providing local stand-ins for blocked third-party tracking scripts. These stand-in scripts behave just enough like the original ones to make sure that the website works properly.… Continue reading Welcome SmartBlock: Script Surrogates for the masses!
Save Trust, Save OTF
As the readers of this blog almost surely know, I’m the author of NoScript, a web browser security enhancer which can be installed on Firefox and Chrome, and comes built-in with the Tor Browser. NoScript has received support by the Open Technology Fund (OTF) for specific development efforts: especially, to make it cross-browser, better internationalized… Continue reading Save Trust, Save OTF