Help with firefox "yes/no" popup problem (rickroll related)

[Karmashock]

DO NOT click on this link unless you want to experience the problem.
http://techsmartly.net/freePS3.php


It's a rickroll page that pops up an endless stream of "yes/no" queries while it taunts you with the rickroll playing in the background.

It's clever and if this were the only page on the internet that could do this... then I wouldn't mind it. I thought firefox blocked this sort of thing. Clearly not.


How do I harden my browser against attacks like this besides just turning javascript off. I'm sure I could make my browser immune... it would just come at the cost of screwing up practically every other website I ever visit.


Is there some sort of javascript filtering or scanning plugin I can look for or some setting buried in the config file?

 

[tw0rld]

No Script is a good addon, that does exactly that. There is also Adblock, and flash block that you could give a try. Suggest going with No Script first. https://addons.mozilla.org/en-US/firefox/addon/722

DO NOT click on this link unless you want to experience the problem.

Why bother posting the link?

 

[Tedster]

Companies that advertise like that should be banned.

 

[Bobbye]

I thought firefox blocked this sort of thing. Clearly not.

I've used Firefox for almost 4 years and not had any pop-up problems. I put AdBlock Plus and the filters on at the beginning. Kept AdBlock Plus but changed to Easy list. I suggest you do that if you want to avoids this.

In the future, either don't post the link (best) or put brackets around the URL to prevent a link:

AdBlock Plus: https://addons.mozilla.org/en-US/firefox/addon/1865
Easy List: http://easylist.adblockplus.org/ (I have all three)

 

[Badfinger]

Other things to do, get Spybot: Search and Destroy (http://www.spybot.info/en/index.html) that can immunize your system including Firefox and IE,

AND you can edit your hostfile, info here:

http://www.mvps.org/winhelp2002/hosts.htm

I use HostsMan application (freeware) for Hosts file, has 4 built-in lists it pulls questionable URLs and can automatically add them.
Beware, some site links might not work, it blocks a TON of ads sites including google's, but you can manually adjust the hosts file as needed, been using that for years.

Get HostsMan here: http://www.abelhadigital.com/

 

[Karmashock]

No Script is a good addon, that does exactly that. There is also Adblock, and flash block that you could give a try. Suggest going with No Script first. https://addons.mozilla.org/en-US/firefox/addon/722

no script seems to be the only thing that works for this but requires you to actively blacklist pages. I was hoping for something automatic.

Why bother posting the link?

so you know what I'm talking about. It's also harmless.
====================================================

I've used Firefox for almost 4 years and not had any pop-up problems. I put AdBlock Plus and the filters on at the beginning. Kept AdBlock Plus but changed to Easy list. I suggest you do that if you want to avoids this.

AdBlock Plus: https://addons.mozilla.org/en-US/firefox/addon/1865
Easy List: http://easylist.adblockplus.org/ (I have all three)

I have that and it doesn't address the issue.

In the future, either don't post the link (best) or put brackets around the URL to prevent a link:

I needed an example of the problem.

I gave a warning in red.

and the link, aside from being annoying, is harmless.

 

[tw0rld]

By default Noscript kills all scripts on every webpage. It is up to you to decide which page you are gonna allow. This could be annoying as i have mentioned in a previous post, but is actually the safest way to handle scripts(killing it before it runs).

 

[Karmashock]

I'm sorry, what I meant to say was "yesscript"... it's noscript's twin brother that works the other way around.


On most sites I do want scripts to run. But certain actions should not be permissible such as spamming yes/no messages.


So I'm using this yes script program that lets you blacklist bad pages with a single click. It sounds like that's the best I'm going to get until there's a major effort to disallow bad javascript behavior.

 

[tw0rld]

How will this protect you if the script runs before you have a chance to blacklist it? How would this help you on a site like the one that you mentioned above? I still think that Noscript is the way to go, but it is totally up to you of course.

 

[Karmashock]

As I said before, no script requires that I tag each site as safe... running into this rickroll site is obviously pretty uncommon... if I blacklist it half way through it's operation it stops the script half way through so that ends it anyway.

I'm not happy with this system but I'm looking for something that eats as little of my time as possible.

 

[Bobbye]

Don't you have a contradiction here? You want the scripts, but pop-ups bother you. The same add-ons I've used for 4 years to prevent them won't work for you- why?

 

[Karmashock]

Bobbye, I want good scripts because most websites don't work properly without them.

Actively white listing scripts on all webpages I visit is annoying.

Actively blacklisting bad ones is better because it's something I'll only have to do at most once a month where as whitelisting good pages will be something I do three times a day. Yes it does open me up to being annoyed now and then but it's less annoying on balance then having to white list every page I visit.

As to the addon you recommended, I am "already" using adblock plus with that very same subscription. It clearly didn't stop the javascript popups on that rickroll page. Ergo not only will it not work... it did not work.

I was looking for something that would disallow certain javascript commands or actions. Like javascript antimalware or something. Something that could detect the difference good javascript and bad javascript... filter them automatically... and not waste any of my time. This clearly does not exist... so I'll be actively blacklisting bad pages as I find them.

 

[Bobbye]

Add this:

Easy List: http://easylist.adblockplus.org/ (I have all three)

 

[Karmashock]

I added all three, turned off "yesscript" and the problem came right back.


Your suggestion does not work. I'm sure you're a smart guy... but I'm not as stupid as you seem to think. Please don't take this the wrong way, I came here for help and usually get it. I appreciate this community deeply and am sure at some point you had the answer to one of my questions awhile ago. But you don't seem to have it this time...

at least, "use adblock with these three subscriptions" is not a solution. If you're not getting the problem then it's because you're doing something else like using "noscript" to stop it.

I just reenabled yes script and the problem has gone away.


That appears to be the only non-obnoxious solution until there's a proper javascript filter

 

[Bobbye]

Your suggestion does not work.

Sometime we have to try different things.

I'm sure you're a smart guy.

Yes, I am smart. However that doesn't mean I have 100% success.

but I'm not as stupid as you seem to think.

At no time did I infer that you were.

I came here for help and usually get it. ..... ago. But you don't seem to have it this time...

This board is made up of volunteers who give their time to help others fix their problems. Sometimes we're able to "fix" things first try, sometimes not.

That appears to be the only non-obnoxious solution until there's a proper javascript filter

I will now leave you with whatever obnoxious suggestions are forthcoming.

It's not nice to bite the hand that feeds you!

 

[Karmashock]

Sometime we have to try different things.

I'm looking for different things.

Yes, I am smart. However that doesn't mean I have 100% success.

At no time did I infer that you were (stupid).

This board is made up of volunteers who give their time to help others fix their problems. Sometimes we're able to "fix" things first try, sometimes not.

I will now leave you with whatever obnoxious suggestions are forthcoming.

It's not nice to bite the hand that feeds you!

I went to some pains to point out that I was "not" slighting you. You forced me to repeat myself a couple times, which led me to believe you weren't listening (Even genius snoozes).

Ergo, I changed the angle so it would get your attention. Demonstrably this tactic remains one of the most effective means to jar the mind. That was it's sole purpose. If you're actually offended, then I apologize. Again, I was only interested in getting your attention... if you repeated the same advice again while ignoring my response... I'd have to climb a clock tower. Trust me, it's better for everyone this way.

If you think you can help me or have any further ideas I'm very interested. Thus far the best thing I can come up with is the blacklisting solution. It has the problem of expecting me to know bad sites from good ones... but it's better then an MS vista like experience (white listing) of having to confirm that absolutely every individual thing in existence is personally "OK" until I bleed from the eyes.


Regards, Karma.