Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #202274

Re: Reverting firefox-esr upgrade in Buster

From Ben Caradoc-Davies <ben@transient.nz>
Newsgroups linux.debian.user
Subject Re: Reverting firefox-esr upgrade in Buster
Date 2018-11-09 00:00 +0100
Message-ID <wS1rj-Ma-5@gated-at.bofh.it> (permalink)
References (1 earlier) <wRNy2-11a-1@gated-at.bofh.it> <wRODL-1Db-3@gated-at.bofh.it> <wRP6O-1MJ-3@gated-at.bofh.it> <wRPJv-2er-5@gated-at.bofh.it> <wRTWO-4HK-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 09/11/2018 03:53, Cindy-Sue Causey wrote:
> But... bank account STILL does not work...
> It yelled javascript was not enabled and basically*almost*  KICKED me
> out IMMEDIATELY because it wasn't available.
> Which led to me sitting here thinking... I THOUGHT javascript was
> security issue prone to the point folks are trying to wipe it from the
> Net. So WHY is a bank so dependent on it that my bank's website almost
> seemed to freak that javascript wasn't available???

I use and recommend Firefox with NoScript. Recent NoScript supports 
WebExtensions, with a new user interface. NoScript blocks JavaScript by 
default and protects you from a range of threats even for origins from 
which JavaScript is permitted. With NoScript, you can selectively enable 
JavaScript for those sites that you trust.

I also use Adblock Plus because ads are a known delivery mechanism for 
malicious content. The combination of NoScript and Adblock Plus has the 
side benefit of making we browsing much faster.

If you are paranoid, you can use a dedicated Firefox profile for your 
internet banking. If you are super-paranoid, you can run Firefox on a 
dedicated virtual machine. A freshly booted non-writeable live image for 
each banking session will prevent malicious state from being persisted 
on the client VM. As long as the host machine has not been compromised, 
in which case all bets are off.

I like web sites that fail gracefully when JavaScript is disabled. 
Unfortunately, JavaScript Single Page Applications (SPA) are a plague on 
the internet. I prefer RESTful architectures.

Kind regards,

-- 
Ben Caradoc-Davies <ben@transient.nz>
Director
Transient Software Limited <https://transient.nz/>
New Zealand

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Reverting firefox-esr upgrade in Buster local10 <local10@tutanota.com> - 2018-11-08 06:50 +0100
  Re: Reverting firefox-esr upgrade in Buster Brad Rogers <brad@fineby.me.uk> - 2018-11-08 09:10 +0100
    Re: Reverting firefox-esr upgrade in Buster local10 <local10@tutanota.com> - 2018-11-08 10:20 +0100
      Re: Reverting firefox-esr upgrade in Buster Brad Rogers <brad@fineby.me.uk> - 2018-11-08 10:50 +0100
        Re: Reverting firefox-esr upgrade in Buster local10 <local10@tutanota.com> - 2018-11-08 11:30 +0100
          Re: Reverting firefox-esr upgrade in Buster Brad Rogers <brad@fineby.me.uk> - 2018-11-08 13:50 +0100
          Re: Reverting firefox-esr upgrade in Buster Michael Stone <mstone@debian.org> - 2018-11-08 14:40 +0100
          Re: Reverting firefox-esr upgrade in Buster Cindy-Sue Causey <butterflybytes@gmail.com> - 2018-11-08 16:00 +0100
            Re: Reverting firefox-esr upgrade in Buster Dan Ritter <dsr@randomstring.org> - 2018-11-08 16:30 +0100
              Re: Reverting firefox-esr upgrade in Buster Brad Rogers <brad@fineby.me.uk> - 2018-11-08 17:10 +0100
            Re: Reverting firefox-esr upgrade in Buster rhkramer@gmail.com - 2018-11-08 18:40 +0100
              Re: Reverting firefox-esr upgrade in Buster Gene Heskett <gheskett@shentel.net> - 2018-11-08 19:20 +0100
            Re: Reverting firefox-esr upgrade in Buster Ben Caradoc-Davies <ben@transient.nz> - 2018-11-09 00:00 +0100
  Re: Reverting firefox-esr upgrade in Buster Jimmy Johnson <field.engineer@gmail.com> - 2018-11-09 07:00 +0100

csiph-web