Help with firefox "yes/no" popup problem (rickroll related)

By Karmashock
Oct 5, 2008
Topic Status:
Not open for further replies.
  1. DO NOT click on this link unless you want to experience the problem.
    http://techsmartly.net/freePS3.php


    It's a rickroll page that pops up an endless stream of "yes/no" queries while it taunts you with the rickroll playing in the background.

    It's clever and if this were the only page on the internet that could do this... then I wouldn't mind it. I thought firefox blocked this sort of thing. Clearly not.


    How do I harden my browser against attacks like this besides just turning javascript off. I'm sure I could make my browser immune... it would just come at the cost of screwing up practically every other website I ever visit.


    Is there some sort of javascript filtering or scanning plugin I can look for or some setting buried in the config file?
  2. tw0rld

    tw0rld TechSpot Maniac Posts: 609   +6

    No Script is a good addon, that does exactly that. There is also Adblock, and flash block that you could give a try. Suggest going with No Script first. https://addons.mozilla.org/en-US/firefox/addon/722

    Why bother posting the link?
  3. Tedster

    Tedster Techspot old timer..... Posts: 10,074   +13

    Companies that advertise like that should be banned.
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    I've used Firefox for almost 4 years and not had any pop-up problems. I put AdBlock Plus and the filters on at the beginning. Kept AdBlock Plus but changed to Easy list. I suggest you do that if you want to avoids this.

    In the future, either don't post the link (best) or put brackets around the URL to prevent a link:

    AdBlock Plus: https://addons.mozilla.org/en-US/firefox/addon/1865
    Easy List: http://easylist.adblockplus.org/ (I have all three)
  5. Badfinger

    Badfinger Newcomer, in training Posts: 160

    Other things to do, get Spybot: Search and Destroy (http://www.spybot.info/en/index.html) that can immunize your system including Firefox and IE,

    AND you can edit your hostfile, info here:

    http://www.mvps.org/winhelp2002/hosts.htm

    I use HostsMan application (freeware) for Hosts file, has 4 built-in lists it pulls questionable URLs and can automatically add them.
    Beware, some site links might not work, it blocks a TON of ads sites including google's, but you can manually adjust the hosts file as needed, been using that for years.

    Get HostsMan here: http://www.abelhadigital.com/
  6. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    no script seems to be the only thing that works for this but requires you to actively blacklist pages. I was hoping for something automatic.

    so you know what I'm talking about. It's also harmless.
    ====================================================
    I have that and it doesn't address the issue.

    I needed an example of the problem.

    I gave a warning in red.

    and the link, aside from being annoying, is harmless.
  7. tw0rld

    tw0rld TechSpot Maniac Posts: 609   +6

    By default Noscript kills all scripts on every webpage. It is up to you to decide which page you are gonna allow. This could be annoying as i have mentioned in a previous post, but is actually the safest way to handle scripts(killing it before it runs).
  8. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    I'm sorry, what I meant to say was "yesscript"... it's noscript's twin brother that works the other way around.


    On most sites I do want scripts to run. But certain actions should not be permissible such as spamming yes/no messages.


    So I'm using this yes script program that lets you blacklist bad pages with a single click. It sounds like that's the best I'm going to get until there's a major effort to disallow bad javascript behavior.
  9. tw0rld

    tw0rld TechSpot Maniac Posts: 609   +6

    How will this protect you if the script runs before you have a chance to blacklist it? How would this help you on a site like the one that you mentioned above? I still think that Noscript is the way to go, but it is totally up to you of course.
  10. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    As I said before, no script requires that I tag each site as safe... running into this rickroll site is obviously pretty uncommon... if I blacklist it half way through it's operation it stops the script half way through so that ends it anyway.

    I'm not happy with this system but I'm looking for something that eats as little of my time as possible.
  11. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Don't you have a contradiction here? You want the scripts, but pop-ups bother you. The same add-ons I've used for 4 years to prevent them won't work for you- why?
     
  12. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    Bobbye, I want good scripts because most websites don't work properly without them.

    Actively white listing scripts on all webpages I visit is annoying.

    Actively blacklisting bad ones is better because it's something I'll only have to do at most once a month where as whitelisting good pages will be something I do three times a day. Yes it does open me up to being annoyed now and then but it's less annoying on balance then having to white list every page I visit.

    As to the addon you recommended, I am "already" using adblock plus with that very same subscription. It clearly didn't stop the javascript popups on that rickroll page. Ergo not only will it not work... it did not work.

    I was looking for something that would disallow certain javascript commands or actions. Like javascript antimalware or something. Something that could detect the difference good javascript and bad javascript... filter them automatically... and not waste any of my time. This clearly does not exist... so I'll be actively blacklisting bad pages as I find them.
  13. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

  14. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    I added all three, turned off "yesscript" and the problem came right back.


    Your suggestion does not work. I'm sure you're a smart guy... but I'm not as stupid as you seem to think. Please don't take this the wrong way, I came here for help and usually get it. I appreciate this community deeply and am sure at some point you had the answer to one of my questions awhile ago. But you don't seem to have it this time...

    at least, "use adblock with these three subscriptions" is not a solution. If you're not getting the problem then it's because you're doing something else like using "noscript" to stop it.

    I just reenabled yes script and the problem has gone away.


    That appears to be the only non-obnoxious solution until there's a proper javascript filter
  15. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Sometime we have to try different things.
    Yes, I am smart. However that doesn't mean I have 100% success.
    At no time did I infer that you were.
    This board is made up of volunteers who give their time to help others fix their problems. Sometimes we're able to "fix" things first try, sometimes not.
    I will now leave you with whatever obnoxious suggestions are forthcoming.

    It's not nice to bite the hand that feeds you!
  16. Karmashock

    Karmashock Newcomer, in training Topic Starter Posts: 237

    I'm looking for different things.

    I went to some pains to point out that I was "not" slighting you. You forced me to repeat myself a couple times, which led me to believe you weren't listening (Even genius snoozes).

    Ergo, I changed the angle so it would get your attention. Demonstrably this tactic remains one of the most effective means to jar the mind. That was it's sole purpose. If you're actually offended, then I apologize. Again, I was only interested in getting your attention... if you repeated the same advice again while ignoring my response... I'd have to climb a clock tower. Trust me, it's better for everyone this way.

    If you think you can help me or have any further ideas I'm very interested. Thus far the best thing I can come up with is the blacklisting solution. It has the problem of expecting me to know bad sites from good ones... but it's better then an MS vista like experience (white listing) of having to confirm that absolutely every individual thing in existence is personally "OK" until I bleed from the eyes.


    Regards, Karma.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.