The beauty of noscript is that they stay up in the arms race with the black hats. The worst security software is one that provides a sense of security while not providing the security. I love that Noscript updates so frequently because I KNOW the blackhats are updating their attacks daily.
The fact is without the frequent updates the Blackhats would be able to exploit their tricks for much longer and that's worth the hassle. It's a credit to the noscript development that they work so hard to stay up to date on the latest blackhat operations.
Posted May 7, 2009 21:52 UTC (Thu) by pflugstad (subscriber, #224)
[Link]
Well, given that many of the exploits depend on JavaScript being enable to function, one would think that after a certain point, NoScript would basically be future proofed - most exploits would already be covered by the fundamental disabling of Javascript.
Also think about this: as this whole saga points out, NoScript is funded by ad's, so that pop-up page every time NoScript updates actually puts money in the Maone's pocket. So I would tend to think that there's a conflict of interest there - the more he updates, the more money he gets. So to a degree, he may have a vested interest in NOT improving NoScript to the point described above. I'm obviously conjecturing here.
Also, I obviously didn't look very hard, but I did NOT actually find the link on how to disable the pop-up page (thanks for the link Jon), even though I went looking for it when it was mentioned in the original article - I was thinking it would be a check-box on the NoScript prefs panel. My bad I guess.