Hacker News Reader

> NoScript Tracker is a basic tracker that makes use of iframes and the Refresh HTTP header to measure how long users spend on web pages.

> It is ideal for getting basic usage statistics on the Tor network, where JavaScript is not an option for most users.

NoScript can block iframes; will that disable this tracker?

Also, does the Tor Browser, which includes NoScript, default to blocking iframes?

View on HN

> Also, does the Tor Browser, which includes NoScript, default to blocking iframes?

No. Tor Browser defaults to the lowest security level, allowing all scripts, media, iframes, etc.

NoScript->Options->Embeddings->Additional restrictions for untrusted sites->Forbid <IFRAME>

Just turned that option on, myself. I might have had it on years ago--can't remember for sure--but now that I know it's being abused, I'll definitely leave it on. IFRAMEs are generally poor practice, anyway.

Also, pay attention to these settings in about:config page:

accessibility.blockautorefresh

noscript.forbidBGRefresh

noscript.forbidMetaRefresh

Additionally, you can cherry-pick options (or just use it all) from this repository at https://github.com/pyllyukko/user.js for more privacy.

Thanks! I'll look into those.

Reply on news.ycombinator.com