LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Closed Thread
  Search this Thread
Old 11-13-2010, 11:28 PM   #1
Peufelon
Member
 
Registered: Jul 2005
Posts: 164
Blog Entries: 1

Rep: Reputation: Disabled
A possible security issue in using NoScript


I have requested deletion.

Last edited by Peufelon; 11-14-2010 at 02:18 PM.
 
Old 11-14-2010, 12:19 AM   #2
mesiol
Member
 
Registered: Nov 2008
Location: Lower Saxony, Germany
Distribution: CentOS, RHEL, Solaris 10, AIX, HP-UX
Posts: 731

Rep: Reputation: 137Reputation: 137
Hi,

you did not provide any security related information about the feature of noscript which describes the mentioned issue. All provided information is some unsubstantial. No arguments can be found, only estimates.

Could please provide detailled information on this security issue, testing results which shows that there is really something.

IMHO for me the second useless post from you.
 
1 members found this post helpful.
Old 11-14-2010, 12:26 AM   #3
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
There must be a lot of "computer users concerned about internet security" and for a variety of reasons. Would you like to share what the feature is that you are worried about?
 
Old 11-14-2010, 12:32 AM   #4
Peufelon
Member
 
Registered: Jul 2005
Posts: 164

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
I have requested deletion.

Last edited by Peufelon; 11-14-2010 at 02:19 PM.
 
0 members found this post helpful.
Old 11-14-2010, 12:52 AM   #5
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Security by obscurity is weak ...
 
Old 11-14-2010, 12:55 AM   #6
Peufelon
Member
 
Registered: Jul 2005
Posts: 164

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
I have requested deletion.

Last edited by Peufelon; 11-14-2010 at 02:19 PM.
 
0 members found this post helpful.
Old 11-14-2010, 01:01 AM   #7
mesiol
Member
 
Registered: Nov 2008
Location: Lower Saxony, Germany
Distribution: CentOS, RHEL, Solaris 10, AIX, HP-UX
Posts: 731

Rep: Reputation: 137Reputation: 137
Hi,

so where do you see exactly what? How do you think should anyone discuss with you, without exactly knowing what you are talking about? Did you open a bugtrack at the developer site for the not specified problem? We are not interested what you feel, the is personal to you. We are only interested in facts not in your emotions.

You are acting like a troll trying to initiate a senseless discussion on a fake problem. Please stop doing so.
 
Old 11-14-2010, 01:09 AM   #8
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Quote:
Originally Posted by Peufelon View Post
I agree! But I don't what to do... would you have me post specifics about an issue which I fear is immediately exploitable and which may not have a quick solution?
That is the normal security issues protocol after giving the developer(s) reasonable time to fix and no fix is developed.
 
Old 11-14-2010, 01:13 AM   #9
Peufelon
Member
 
Registered: Jul 2005
Posts: 164

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
I have requested deletion.

Last edited by Peufelon; 11-14-2010 at 02:20 PM.
 
0 members found this post helpful.
Old 11-14-2010, 01:24 AM   #10
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Have you tried posting in the NoScript Development forum?
 
Old 11-14-2010, 01:45 AM   #11
Peufelon
Member
 
Registered: Jul 2005
Posts: 164

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
I have requested deletion.

Last edited by Peufelon; 11-14-2010 at 02:21 PM.
 
0 members found this post helpful.
Old 11-14-2010, 02:34 AM   #12
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
Quote:
Originally Posted by Peufelon View Post
How is posting details there different from posting details here?
It would be a better place to ask how to contact the developer(s).
 
Old 11-14-2010, 09:25 AM   #13
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
A vague and veiled threat that can be used by repressive governments to suppress dissidents, that you won't mention because they may be watching. Quite frankly, this sounds like paranoia of the aluminum foil hat variety and if I were a moderator I would have closed this thread with a warning about not starting another one like it.

Lets either discuss this "threat" in the open, here, where you have some highly knowledgeable individuals or lets table this discussion.
 
Old 11-14-2010, 09:46 AM   #14
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
Come on now, this is ridiculous. At least tell us where we should look. I also think that your concerns may not be well founded, and are quite paranoid. Oh, I completely forgot, the gubmint has a bounty on the head of every Noscript user, $100,000 for the head of a Noscript user ...

I agree that if the OP does not post anything useful, the thread should be closed.
 
Old 11-14-2010, 09:55 AM   #15
catkin
LQ 5k Club
 
Registered: Dec 2008
Location: Tamil Nadu, India
Distribution: Debian
Posts: 8,578
Blog Entries: 31

Rep: Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208Reputation: 1208
I share Peufelon's concern about publicising a possible insecurity before the developer has had an opportunity to fix it or explain why it is not an insecurity.
 
  


Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Firefox: Do I really need NoScript? hydraMax Linux - Security 2 07-13-2010 12:40 PM
do you use NoScript? newbiesforever General 31 04-02-2010 04:47 PM
Mozilla NoScript? SBN Linux - Software 1 09-15-2006 10:14 PM
Trouble Installing the NoScript Firefox Extension win32sux Linux - Software 1 04-14-2006 05:43 AM
webmin issue, poss security issue bejiita Slackware 3 11-03-2004 06:07 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration