Home » WTF ?!? NoScript's default setting allows everything!!
Click Here To Hide Tor

WTF ?!? NoScript's default setting allows everything!!

2
0

WTF?!?

I just noticed that current (Dec 2 2018) TOR (8.0.3, I think) has NoScript’s Default setting set to allow everything!!

When did this happen? This seems like a gigantic security hole!

Anyone else aware of this?

  • You must to post comments
1
0

It’s the same with 8.0.4.

In fact, I had to change all these:
1. Check NoScript’s default setting to ensure nothing is allowed (uncheck all Allow boxes on Default tab)
2. Change TBB’s Security setting to SAFEST, it had been on the lowest setting.
3. type about:config, search for: javascript.enabled
Double click it to the value from True to False.

Aside from having three things fucked up, the most alarming aspect is that ALL the Allow boxes were checked on NoScript’s default tab when I installed TOR. Clicking on NoScript’s Reset (to change it’s settings back to their defaults) results in only three boxes checked (frame, fetch and other) on the Default tab.

So the default for the Default tab is to allow 3 things, but TOR shipped with all boxes checked. This means that it’s not like the standard NoScript just accidentally shipped in TOR, someone had to check all those boxes.

Does anyone else see this as a major fucking issue? Many people could be endangered by this.

  • You must to post comments
1
0

WHAT THE FUCK DOES THAT MEAN? LOL. NOSCRPITS?

  • You must to post comments
0
0

Me too i have this issue since updating tor Noscript says it’s on default mode which is block but on settings everything is allowed.
i think tor devs are becoming sellouts.

  • You must to post comments
Showing 3 results
Your Answer
Guest Author
Post as a guest by filling out the fields below or if you already have an account.
Name*
E-mail*
Body*
captcha*