Re: FIREFOX 25 IS RELEASED ON THE 29TH

by Guest Sun Oct 27, 2013 8:22 pm

nerd creamer wrote:
spinnythings wrote:what security features
XSS attack protection, application boundary enforcer etc.

just because you think facebook.com is safe doesn't mean you're safe going to it, someone could h4xx0r it and stick in a drive-by download thing that goes to ejhfdshgf32768347dhsidfu8.tk and gives you some fucked up virus

XSS attack protection would block that stuff out

also things like requiring explicit confirmation for java/flash/pdf viewer shit to run

whats an XSS

by gay Sun Oct 27, 2013 8:24 pm

spinnythings wrote:
nerd creamer wrote:
spinnythings wrote:what security features
XSS attack protection, application boundary enforcer etc.

just because you think facebook.com is safe doesn't mean you're safe going to it, someone could h4xx0r it and stick in a drive-by download thing that goes to ejhfdshgf32768347dhsidfu8.tk and gives you some fucked up virus

XSS attack protection would block that stuff out

also things like requiring explicit confirmation for java/flash/pdf viewer shit to run
whats an XSS

Cross Site Scripting

by **LEADER OF THE FREE WORLD** Sun Oct 27, 2013 8:24 pm

spinnythings wrote:
nerd creamer wrote:
spinnythings wrote:what security features
XSS attack protection, application boundary enforcer etc.

just because you think facebook.com is safe doesn't mean you're safe going to it, someone could h4xx0r it and stick in a drive-by download thing that goes to ejhfdshgf32768347dhsidfu8.tk and gives you some fucked up virus

XSS attack protection would block that stuff out

also things like requiring explicit confirmation for java/flash/pdf viewer shit to run
whats an XSS

cross site scripting essentially allows for data stored in your browser that is readily accessable (ie login cookies) to be stolen or for you to be redirected to a java driveby site

by Guest Sun Oct 27, 2013 8:27 pm

bobby b wrote:
spinnythings wrote:
nerd creamer wrote:XSS attack protection, application boundary enforcer etc.

just because you think facebook.com is safe doesn't mean you're safe going to it, someone could h4xx0r it and stick in a drive-by download thing that goes to ejhfdshgf32768347dhsidfu8.tk and gives you some fucked up virus

XSS attack protection would block that stuff out

also things like requiring explicit confirmation for java/flash/pdf viewer shit to run
whats an XSS
cross site scripting essentially allows for data stored in your browser that is readily accessable (ie login cookies) to be stolen or for you to be redirected to a java driveby site

oh thats bad maybe i will install it

by gay Sun Oct 27, 2013 8:36 pm

it's good for you

especially if you dont have an antivirus installed, which i know you don't. jesus christ dude

by Guest Sun Oct 27, 2013 8:36 pm

whoa this is cool

by gay Sun Oct 27, 2013 8:37 pm

spinnythings wrote:whoa this is cool

?

by Guest Sun Oct 27, 2013 8:50 pm

google analytics is literally fucking everywhere

by gay Sun Oct 27, 2013 8:52 pm

spinnythings wrote:google analytics is literally fucking everywhere

yeppers and it's totally useless to the end-user

one major reason i don't use noscript isn't just because of the security it enforces but also because pages load a shit-ton faster with it

by gay Sun Oct 27, 2013 8:53 pm

analytics isn't on OTTD, i don't think

we use googleapis though

by Guest Sun Oct 27, 2013 8:54 pm

nerd creamer wrote:analytics isn't on OTTD, i don't think

we use googleapis though

i had to enable that to get dotlan.evemaps.com to work

by gay Sun Oct 27, 2013 8:56 pm

spinnythings wrote:
nerd creamer wrote:analytics isn't on OTTD, i don't think

we use googleapis though
i had to enable that to get dotlan.evemaps.com to work

gapis is very useful

i thought it was whitelisted by default on noscript since it's safe and it's everywhere

by Guest Sun Oct 27, 2013 8:56 pm

nerd creamer wrote:
spinnythings wrote:
nerd creamer wrote:analytics isn't on OTTD, i don't think

we use googleapis though
i had to enable that to get dotlan.evemaps.com to work
gapis is very useful

i thought it was whitelisted by default on noscript since it's safe and it's everywhere

well its noscript

by Sponsored content