Comments on: Noscript has iframe protection

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 22:34:44 +0000

Om of course I’ll help ask away mate!

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 22:33:44 +0000

Sorry Tom it’s hard to tell when people are joking on comments

By: Tom Macklin

Tom Macklin — Wed, 12 Sep 2007 17:55:09 +0000

sorry… bad attempt at a joke. I was trying to point out what happens to secure apps when people start using them…

By: Bipin 3~ Upadhyay

Bipin 3~ Upadhyay — Wed, 12 Sep 2007 17:31:39 +0000

@Gareth:
Your comment reminds me of a line from Michael Zalewski’s “Silence on the Wire”:
“The path to simplicity often leads through a seemingly needless level of complexity…”

Although the context is different, the idea is crisp and clear: KISS

I need help regarding certain issues. Will send you a mail. Thanks in advance.

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 16:00:49 +0000

Tom, Giorgio has already added that to noscript, there is even an option to block iframes from trusted sites. Just for the record I’ve nothing to do with noscript I just like it and made a suggestion.

By: Tom Macklin

Tom Macklin — Wed, 12 Sep 2007 15:28:29 +0000

Yeah, simplicity leads to security…

So, could you put include a feature in noscript that allows me to block most iframes, but allow ones that come from sites that are in my trusted sites list or that have a certificate that has been signed by…

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 15:14:57 +0000

I hope that Content Restriction will end this madness but doubt it. The trouble is that often when specs are decided they get too complicated and holes get introduced, I hope this doesn’t happen. Simplicity often leads to better security.

By: Bipin 3~ Upadhyay

Bipin 3~ Upadhyay — Wed, 12 Sep 2007 15:02:56 +0000

Thanks for the “bit of credit” :P, but it doesn’t really matter. What matters is to be in touch with guys like you. I hope to be more active on Slackers.

The funny part is that I’d decided to post the thread right after Bank Of India hack but couldn’t.
However, after reading your post I realized that this is the right time. So of course, (if the credit matters) you should get the bigger chunk.
Most importantly, let’s hope to see the issues (almost) killed with introduction of Content Restriction.

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 13:30:25 +0000

I thought I’d give you a bit of credit as well

By: Gareth Heyes

Gareth Heyes — Wed, 12 Sep 2007 13:19:42 +0000

Yep nice one for starting the thread

It was a interesting discussion